Last updated: 2026-07-19
This document explains what Tab Agent does with your data.
Tab Agent reads and acts on the pages you ask it to work with, and sends
that information to the AI provider (Anthropic, OpenAI, or an
OpenAI-compatible endpoint) you configure yourself, using your own
API key. That data goes from your browser directly to that
provider - never to Tab Agent's developer, and never to any server the
developer operates, because no such server exists. Everything else (your
API keys, chat history, settings, scheduled tasks) is stored locally in
your browser via chrome.storage.local and is never
transmitted anywhere except to the AI provider, and only as much of it as
a given task actually needs.
Tab Agent only reads or acts on a page when you (or a scheduled task you created) ask it to do something involving that page. It does not run in the background scanning every page you browse. When it does run, depending on what the task needs, it may access:
screenshot tool is used, and only of the active tab.When a task runs, the relevant page content, screenshots, or attachments are sent as part of the conversation to whichever AI provider and model you've configured in Settings - using the API key you supplied. Tab Agent's developer never receives this data, has no server that intercepts or logs it, and has no way to see your conversations, browsing activity, or API keys. Your data's handling once it reaches the AI provider is governed by that provider's own privacy policy and terms (e.g. Anthropic's or OpenAI's), not by this one.
If you configure a custom/self-hosted OpenAI-compatible endpoint, data goes to that endpoint instead - the same principle applies: it's your configuration, and the data goes directly there, not through anything Tab Agent's developer operates.
Everything below lives in chrome.storage.local, sandboxed to
your browser profile, and is never synced to Google's servers or any
third party:
API keys are stored in plain text, not encrypted - this is standard for "bring your own key" extensions, but it means anyone with access to your browser profile's local storage (e.g. via other software on a compromised device) could read them. Keep your device secure accordingly.
Export/backup files (from Settings → Backup) contain whatever you select to export in plain, unencrypted JSON, including API keys if you include that section. Store exported files as carefully as you would a password.
Chat history, scheduled tasks, and settings persist until you delete them yourself (via the chat history panel, Settings, or by uninstalling the extension - uninstalling wipes all locally stored extension data automatically, per Chrome's standard behavior for uninstalled extensions).
If a future update changes what data Tab Agent accesses or where it goes, that change will be called out in the extension's release notes, and the in-product data-use notice (shown on first run, and re-shown after a material change) will be updated to match.
Tab Agent is not directed at children and is not intended for use by anyone under the age required by their local law to consent to data processing without a parent/guardian.