Privacy Policy — PopFlow Capture Extension

Last updated: June 2, 2026

1. Overview

PopFlow Capture is a Chrome extension developed by PopFlow that allows users to record step-by-step procedures on any website and publish them as Standard Operating Procedures (POPs) inside the PopFlow platform (popflow.ia.br).

2. Data Collected

When you use the extension, the following data is collected:

Screenshots — Images of the browser tab at the moment of each captured step.
Page URL and title — The address and title of the page where each step was recorded.
Clicked element text — The visible label of the element you interacted with (e.g., button labels).
Authentication token — Your PopFlow login token, stored locally in the browser and used to authenticate API requests.

We do not collect: passwords, form field values, personal financial data, or any content from pages you visit outside an active recording session.

3. How Data is Used

Screenshots and step data are sent to popflow.ia.br to generate procedure documentation using AI.
Data is associated with your PopFlow account and your organization only.
No data is sold, shared with third parties, or used for advertising purposes.

4. Data Storage

Screenshots are stored on the PopFlow server (popflow.ia.br), hosted in Germany.
Data is accessible only to members of your organization within the PopFlow platform.
Your authentication token is stored only in chrome.storage.local on your device and never transmitted beyond the API.

5. Data Deletion

You can delete any capture (and its associated screenshots) at any time from within the PopFlow platform. Organization administrators can also delete any capture belonging to their organization.

6. Permissions Used

activeTab — To capture a screenshot of the current tab when a step is recorded.
tabs — To read the URL and title of the active tab.
storage — To store the recording session state and login token locally.
scripting — To inject a content script that detects user clicks during recording.
sidePanel — To display the PopFlow panel alongside the current page.
Access to all URLs (<all_urls>) — To enable recording on any website the user works on, including internal company systems that are not on a fixed list of domains.

7. Contact

Questions about this privacy policy? Contact us at contato@popflow.ia.br or visit popflow.ia.br/contato.