bach 浏览器助手 隐私政策
「bach 浏览器助手」（以下简称「插件」）是 bach 的 Chrome 浏览器插件，让你在 bach 里交代任务后，由 AI 在你自己的浏览器里打开网页、点击、输入和读取页面。本政策说明插件会处理哪些数据、如何使用，以及你可以怎样控制。
1. 插件处理的数据
| 数据 | 用途与时机 |
|---|---|
| bach 登录令牌 | 只从 bach 自己的域名（bach 官方域名，或你所在企业的管理员配置的地址）读取登录 Cookie，用来连接你的 bach 账号。不读取其他网站的 Cookie。 |
| 网页内容 | 只在你交代任务后，读取 AI 正在操作的网页的文字、页面结构和截图，以及你让 AI 保存的图片，用于完成你的任务。 |
| 网址与标题 | AI 正在操作的标签页、AI 为任务打开的标签页，以及你打开侧边栏时所在网页的网址和标题，作为任务上下文。 |
| 操作记录 | AI 代你执行的点击、输入、跳转等步骤及结果，显示在 bach 对话里，方便你查看。 |
| 插件设置 | bach 地址、是否允许 AI 操作、敏感操作确认方式、你信任的网站。只保存在你的浏览器本地。 |
插件不会在你没有交代任务时读取网页内容，不会记录你自己的浏览和键盘输入，也不会读取密码管理器或浏览器保存的密码。
2. 数据发送给谁
- 上述数据只通过加密连接发送给你登录的 bach 服务（bach 官方服务，或你所在企业私有部署的 bach），用于让 AI 完成你交代的任务。
- bach 服务可能把任务所需的内容交给它所使用的 AI 模型服务处理，这部分受 bach 服务本身的隐私政策和你所在企业的协议约束。
- 我们不出售你的数据，不把它用于广告、用户画像或信用评估，也不用于与插件功能无关的任何目的。
3. 保存多久
- 插件本地：只保存设置；标签页与对话的对应关系保存在浏览器会话存储里，关掉浏览器即清除。插件不在本地保存网页内容。
- bach 服务端：任务过程和结果作为对话记录保存在你的 bach 账号里，保存期限和删除方式与 bach 的其他对话相同。你在 bach 里删除对话，相关记录随之删除。
4. 你可以怎样控制
- 在侧边栏的「浏览器权限」里关闭「允许 AI 操作浏览器」，或随时暂停。
- 在网页顶部的提示条上点「暂停」或「结束」，随时收回控制权。
- 选择敏感操作的确认方式：每次都问、高风险才问（默认）、完全放开；管理你信任的网站。
- 退出 bach 登录，或在 Chrome 的扩展程序页面停用或移除插件；移除后本地设置一并删除。
5. 安全
插件只连接 bach 官方域名和企业管理员授权的地址，不会被其他网站冒充；所有代码都随插件打包，不从网络加载或执行远程代码。插件对用户数据的使用遵守 Chrome 应用商店用户数据政策，包括其中的「有限使用」要求。
6. 未成年人
插件面向使用 bach 的企业和个人用户，不面向 14 周岁以下的未成年人。
7. 政策变更与联系我们
本政策如有变更，会在本页面更新并修改生效日期；重大变更会在插件更新说明中提示。有任何问题，请通过本插件在 Chrome 应用商店页面上公布的开发者联系邮箱联系我们，或在 bach 内联系你的管理员。
bach Browser Assistant Privacy Policy
"bach Browser Assistant" (the "Extension") is the Chrome extension of bach. After you give a task in bach, it lets the AI open pages, click, type and read content in your own browser. This policy explains what data the Extension handles, how it is used, and how you control it.
1. Data the Extension handles
| Data | Purpose and when |
|---|---|
| bach sign-in token | Read only from the bach service's own domains (official bach domains or addresses configured by your organization's administrator) to connect to your bach account. Cookies of other websites are never read. |
| Website content | Only after you give a task: text, page structure and screenshots of the page the AI is operating, and images you ask it to save — used to complete your task. |
| URLs and titles | Of the tab the AI is operating, tabs it opened for the task, and the page where you open the side panel — as task context. |
| Action log | The clicks, typing and navigation the AI performs for you and their results, shown in your bach conversation. |
| Settings | bach address, whether AI control is allowed, confirmation mode, trusted sites. Stored locally in your browser only. |
The Extension does not read page content when you have not given a task, does not record your own browsing or keystrokes, and does not access saved passwords.
2. Who receives the data
- The data above is sent over an encrypted connection only to the bach service you are signed in to (the official bach service or your organization's self-hosted bach), solely to carry out your tasks.
- The bach service may pass task content to the AI model providers it uses; this is governed by the bach service's own privacy policy and your organization's agreements.
- We do not sell your data, and do not use it for advertising, profiling, credit assessment, or any purpose unrelated to the Extension's function.
3. Retention
- In the Extension: only settings are stored; the mapping between tabs and conversations lives in session storage and is cleared when the browser closes. No page content is stored locally.
- On the bach service: task steps and results are kept as conversation history in your bach account, with the same retention and deletion as your other bach conversations.
4. Your controls
- Turn off "Allow AI to operate the browser" or pause it in the side panel's permission settings.
- Click Pause / End on the bar at the top of the page at any time.
- Choose the confirmation mode for sensitive actions (always ask / ask on high-risk — default / never ask) and manage trusted sites.
- Sign out of bach, or disable or remove the Extension in Chrome; removing it deletes the local settings.
5. Security
The Extension connects only to official bach domains and addresses authorized by your administrator, so other websites cannot impersonate bach. All code ships inside the Extension; no remote code is loaded or executed. The use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
6. Children
The Extension is intended for businesses and individuals using bach and is not directed to children under 14.
7. Changes and contact
We will post any changes on this page and update the effective date; material changes will be noted in the Extension's release notes. For questions, contact us at the developer email listed on the Extension's Chrome Web Store page, or reach your administrator within bach.