Browser extension privacy addendum

Provineer AI Chat Certifier · Effective 9 September 2026

Scope

This notice explains how Provineer AI Chat Certifier, the Chrome browser extension, handles information when you connect your Provineer account and certify a conversation. This extension is provided by Provineer LTD (company number 14637784), 71–75 Shelton Street, London, England, WC2H 9JQ. Provineer's platform Privacy and Cookie Policy also applies to your account and stored content. For information received through the extension, the Limited Use restrictions below apply, including where the general platform policy describes broader purposes.

Information handled by the extension

When you open the extension on a supported AI chat website, it reads the conversation turns currently rendered on that page. This can include message text, role labels, the page title and conversation URL, rendered code, and readable rendered images. To obtain image bytes, the browser may request the rendered image's source URL. The extension does not retrieve hidden, deleted or unloaded conversations, your full browsing history, or the AI provider's private export data.

You may instead paste a transcript and select supporting files. You control whether to send a conversation and which supporting files to include. Avoid submitting information you are not authorised to share, including another person's private information or restricted workplace content.

Version 0.12.1 also handles already-loaded messages whose rendering the website skips for performance: during capture, the extension may temporarily allow those message containers to render, then restore their inline styles without scrolling. It does not expand hidden thinking or tool panels or request unloaded conversation history. Where known missing turns or unreadable speaker roles make capture incomplete, the extension asks you to paste the conversation instead.

When you choose to certify, the extension sends the transcript, title, version, provider/source attribution, tags and selected proof files to the Provineer API over HTTPS. It does not add the captured page's full URL to the submission's source field. The URL can still appear if it is part of the conversation text or a file you choose to submit. Pasted content can be labelled with the current page's hostname. Requested title/version checks also send the document title to that API. Provineer uses these data to create, store and provide your certificate and supporting evidence. Certificate readiness is checked with follow-up API requests.

When you sign in, the extension opens the Provineer website for account approval and receives a revocable API token. It verifies the token with the Provineer API and stores the token and account display email in the extension's local Chrome storage. The token accompanies authenticated requests to Provineer. The extension does not ask for your AI provider's password or copy its account cookies.

The extension also stores a local hash-based history of successful certifications, including titles, versions, certificate references and dates, to warn about duplicate submissions. These values are not a complete local transcript archive and are not synchronised through Chrome Sync. Captured text and selected proof-file contents are held in the popup while you prepare a submission.

Storage, recipients and blockchain records

Submitted conversations and proof files are processed by Provineer LTD. The service uses DigitalOcean for application hosting and temporary/media or certificate storage, and Impossible Cloud for uploaded work and supporting-file storage. Account and stored-file retention are described in the platform Privacy and Cookie Policy. Deleting server-side data does not erase the public blockchain records described below. The title, version, provider/source description, account signature, certificate identifiers, file hashes and salted email-hash metadata are passed to the public Flow blockchain. These records are visible to Flow network operators and anyone able to read the public blockchain, and can remain available independently of the extension and cannot be erased by deleting your account or server-side files. A private certificate link does not make public blockchain metadata private.

The extension does not request persistent access to AI websites. It uses Chrome's temporary active-tab permission when you invoke the extension. That grant ends when you navigate to a different origin or close the tab.

The extension itself does not contain advertising or analytics SDKs. Accessing the Provineer website is also subject to the website's own privacy and cookie practices.

Your choices

You can close the popup without submitting. You can review the capture summary and selected supporting files before certifying, use paste mode, or choose not to certify a conversation.

Disconnecting removes the extension's saved connection, but does not delete files or certificates already submitted, erase its duplicate-history entries, or itself revoke the token on the server. Revoke access tokens through Provineer's account controls. Uninstalling the extension removes its local Chrome storage. For account data access, correction and deletion requests, contact legal@provineer.com as described in the platform policy.

A shared certificate link is subject to the certificate's sharing settings. Review those settings before sharing links with others.

Chrome Web Store Limited Use

Provineer's use of information received through this extension will comply with the Chrome Web Store User Data Policy, including the Limited Use requirements. Extension data will be used only to provide or improve the extension's disclosed certification features. It will not be sold, used for personalised advertising, transferred for unrelated purposes, or used to determine creditworthiness or for lending.

Human access and transfers will be restricted to the circumstances allowed by the Chrome Web Store User Data Policy, such as providing a user-requested feature or support with appropriate consent, necessary security handling, and compliance with applicable law.

Contact

Privacy requests: legal@provineer.com.

Support: contact@provineer.com.