VisionTriageVisionTriage
Back to HomeSupport
Official Policy & Compliance

VisionTriage Privacy Policy

Last Updated: October 23, 2026•Applies to Web Platform & Browser Extension

VisionTriage (“we”, “us”, or “our”) is committed to protecting your privacy and handling your data with absolute transparency. This Privacy Policy outlines what information is collected, how it is used, and how it is secured across the VisionTriage web application, API services, and the VisionTriage Browser Extension for Microsoft Edge and Google Chrome.

1. Single Purpose & Data Minimization

The single purpose of VisionTriage is to provide intelligent screen replay capture, automated Standard Operating Procedure (SOP) triage, and dynamic guided walkthroughs to diagnose and resolve software support issues.

Core Principle: VisionTriage adheres strictly to the principle of data minimization. The browser extension only gathers data when you deliberately initiate a triage or recording session. When an active session is not running, the extension remains completely idle and does not monitor your browser activity.

2. Data Collected by the Browser Extension

When an explicit triage or screen-replay recording session is active, the extension may capture the following categories of diagnostic data:

Data CategorySpecific Items CollectedPurpose & Justification
User ActivityMouse clicks, $(x, y)$ coordinate points, target element tags (e.g. <button>), and element labels.Correlates user workflow steps against documented SOPs to pinpoint where a user deviated from the correct process.
Visual ContentSequential tab screenshots and user-authorized screen/window video frames.Provides visual proof of UI states, error dialogs, or workflow deadlocks for customer support engineers.
Technical DiagnosticsConsole error messages, unhandled promise rejections, and HTTP failure status codes ($4xx/5xx$).Distinguishes client configuration mistakes from true platform bugs and API deadlocks.
Active Page ContextDocument title and sanitized URL of the active tab being debugged.Associates captured triage evidence with the specific application page where the problem occurred.

URL & Data Sanitization

Before any network request or active page context is logged by our telemetry bridge (page_telemetry.js), all query parameters, search terms, and authentication tokens traveling in the URL query string are automatically stripped. Only the origin and pathname are stored.

3. Information We Do NOT Collect

VisionTriage is intentionally engineered to avoid collecting sensitive personal data:

  • Zero Keystroke Logging: We never log keyboard strokes, form text entries, passwords, or PINs.
  • No Financial or Health Data: We do not collect credit card numbers, billing credentials, or health information.
  • No General Web History: We do not access or read your browsing history (the chrome.history permission is never requested).
  • No Location Tracking: We do not access GPS, physical device sensors, or location coordinates.
  • No Remote Executable Code: All extension code, content scripts, and assets are packaged entirely within the extension archive. No external JS/Wasm code is loaded remotely.

4. Extension Permissions & How They Are Used

VisionTriage requests permissions strictly aligned with its single purpose under Microsoft Edge and Chrome Web Store policies:

  • activeTab & tabs: Captures visible tab screenshots upon user interaction and associates triage telemetry with the active page.
  • scripting: Coordinates element inspection to power in-app interactive walkthrough highlights.
  • downloads: Enables users to save captured sequential replay screenshots and ticket packages locally to their computer.
  • storage: Stores local preferences, selected backend URLs (Local vs. Cloud), and session identifiers across side-panel reloads.
  • sidePanel: Displays the triage controller and resolution instructions side-by-side with the web page without obstructing your view.
  • declarativeNetRequest: Appends custom application identification headers solely to outbound requests targeting our secure AI backend (agentrouter.org).
  • offscreen & desktopCapture: Hosts user-authorized desktop/tab video streams in Manifest V3 to record exact visual frames synchronized with mouse clicks.
  • Host Permissions (<all_urls>): Required because VisionTriage is a universal support diagnostics tool designed to troubleshoot issues across any web application or SaaS portal you navigate.

5. Data Sharing, Storage & Security

We treat your diagnostics with enterprise-grade confidentiality:

  • No Selling of Data: We never sell, monetize, or lease your diagnostic data, replay media, or telemetry to third parties or advertising brokers.
  • Transmission Security: All communications between the browser extension and the VisionTriage backend are encrypted using Transport Layer Security (TLS/HTTPS).
  • User Control: Captured snapshots can be saved locally to your device. When submitted to the VisionTriage Console, triage sessions can be inspected and deleted by authorized workspace administrators.

6. Contact Us & Inquiries

If you have questions regarding this Privacy Policy, your data rights, or our security practices, please contact us: