Privacy Policy

Effective date: 2026-10-07

Overview

OnceWise Flow is a self-service browser automation extension. It turns web page operations you specify into automation flows (constrained step trees) and runs them on the target pages you choose. The extension is local-first: your data is processed in your browser, and the extension developer does not collect, receive, or sell any of your data.

What the extension stores on your device

Flows and their settings live in the extension's local storage (chrome.storage), together with each flow's version history (the last 10 saved versions, for rollback). The extension keeps import history for flow files you import (local files only), delivery records for flows your AI tool hands over through the local channel (flow ID, delivery reference, timestamps, and a content hash; capped at the last 10 per flow), and short-lived session data used to prevent duplicate submissions on the same business instance (cleared when the browser session ends). Data read from web pages during a run is processed in memory and not persisted beyond the flow definitions.

Data transmission

The extension makes network requests to exactly one kind of destination, and only when you configure it: a sync server you configure. If you set up synchronization, flows and related configuration go to the oncewise-ai-sync server URL you enter, authenticated with the space key you provide. That server is operated by you or someone you trust; the extension developer operates no server in this loop. Separately, the optional local flow-handover channel (a user-level Node.js native host installed with the agent skills) relays flows between your AI tool and the extension entirely on your device. There is no analytics, telemetry, advertising, or tracking of any kind, and no remotely hosted code.

Permissions and why they are needed

storage persists your flows and settings locally. scripting plus host permissions for all http/https sites exist because every flow targets a site you choose, which cannot be known at install time; in practice, content scripts are registered only for origins that actually carry your flows and are removed when the last flow for a site is deleted. nativeMessaging is the optional local handover channel (host ai.oncewise.native); no data crosses the network through it. sidePanel only lets the toolbar button open the workbench panel.

Retention and deletion

Uninstalling the extension deletes all locally stored flows and settings. Data previously synced to a sync server is governed by that server's operator. The optional native host lives outside the browser, so uninstalling the extension does not remove it; its files can be deleted with the uninstall command shipped with the agent skills.

Changes

If this policy changes, the updated version will be published at the same URL with a new effective date. The source of this page is docs/privacy-policy.md in the GitHub repository.

Contact

zsy.evan@gmail.com