Privacy

Last updated October 8, 2026

What the extension sends, and where

When you run a task, the extension sends the page's visible text, a list of its buttons, links and fields (with their labels and current values), your goal and any details you gave. Password and file-upload fields are never included. It sends this to our server at jevbrowsercontrol.com, which forwards it to OpenRouter; OpenRouter routes Jev calls to TypeSafe and text calls to the text model's provider. We forward the request and do not store its content.

Screenshots and page reads that Claude asks for go to Claude through the MCP server on your computer, under your agreement with Anthropic. They don't pass through us.

Remote AI apps (claude.ai, ChatGPT, Grok Bot)

When you switch on remote control in the extension and connect an app, each tool call from that app (such as “open this page” or “click this button”) passes through our relay to your extension, and the result goes back the same way to the app. The result contains what the tool returns: the page's visible text and elements, or a screenshot. The relay passes calls and results on and does not store them. What the app does with the results is covered by your agreement with that app's provider (Anthropic, OpenAI or xAI).

When you connect an app by signing in (OAuth), we store the app's name and return address, and give the app its own API key, of which we keep only a hash. The key shows in your dashboard as “OAuth · app name”; revoking it disconnects the app.

What we store for credits accounts

  • Your email address, and a hash of each API key (not the key itself), including the keys of apps you connected.
  • Per call: the time, the model, token counts and what it cost. Not the page content, goals or answers.
  • Your balance and the credits you added. Card payments are handled by Stripe; we never see card numbers.

Cookies and email

The dashboard uses one cookie to keep you signed in. Sign-in links are sent through Resend.

Analytics

We count visits with Google Analytics 4, to see which pages people read. Google's advertising signals and ad personalisation are switched off, so the tag is analytics only and we don't use it for advertising. It sets its own cookies and Google receives your IP address, which GA4 does not store. Any browser setting or extension that blocks Google Analytics stops it, and the site works the same either way.

Other parties

The demo video on the home page loads from YouTube (in its privacy-enhanced youtube-nocookie.com mode) only when you press play; until then nothing is sent to YouTube.

OpenRouter, TypeSafe, the text model's provider, Stripe, Resend, Google (Analytics, the fonts on these pages and YouTube) and Cloudflare (which hosts this site) process data under their own policies. OpenRouter lists TypeSafe as not keeping prompts.

Your choices

You can revoke keys in the dashboard at any time. To delete your account and its records, email contact@nexibeo.com from the account's address. Settings and keys in the extension stay in your browser's local storage until you remove the extension.