No data sale
We do not sell, rent, or transfer extension data for advertising, profiling, creditworthiness, or unrelated purposes.
Toolio Flow Helper Privacy Policy
This policy explains how the Toolio Flow Helper Chrome extension handles data while connecting Google Flow to the Toolio Automation desktop app.
Effective and last updated: September 4, 2026
Single purpose
Toolio Flow Helper provides a local, authenticated bridge between supported Google Flow pages and the Toolio Automation desktop app. It wakes or opens the Google Flow tab when needed, requests a short-lived verification token for a user-initiated workflow, and returns the result to the Toolio app running on the same computer.
Local connection
The extension communicates with the Toolio desktop app through the loopback address on your own computer.
Short-lived tokens
Verification tokens are handled in memory for the requested workflow and are not displayed or saved by the extension.
Data handled by the extension
The extension handles only the technical data needed for its single purpose:
- A randomly generated extension instance identifier and the installed extension version.
- Temporary local bridge session identifiers, authentication secrets, account route, and replay-prevention nonces.
- The URL and state of Google Flow tabs, only to find, open, reload, or wake the supported Flow page.
- A short-lived Google Flow verification token generated for a workflow initiated by the user in Toolio.
The extension does not collect your name, email address, payment information, files, messages, keystrokes, or general browsing history. It does not request Chrome's cookies or webRequest permissions.
How data is used and shared
Technical bridge data and verification results are used only to provide the extension's user-facing connection and verification features. The verification result is sent only to the authenticated Toolio desktop app through 127.0.0.1 on the same device.
The extension does not send this data to Toolio advertising systems, data brokers, analytics services, or unrelated third parties. Google Flow remains subject to Google's own terms and privacy practices.
Storage and retention
The random extension instance identifier is stored locally in Chrome until the extension is removed or its storage is cleared. Bridge credentials and replay-prevention values use Chrome's session storage and are temporary. Verification tokens are kept in memory only for the time required to complete the requested operation and are not written to extension storage.
Why permissions are required
- alarms: keeps the local Toolio bridge health check available while Chrome is running.
- scripting: requests the verification token inside the supported Google Flow page.
- storage: stores the local instance identifier and temporary authenticated bridge state.
- tabs: finds, opens, reloads, or wakes the Google Flow tab needed for the requested workflow.
- labs.google: limits page access to the supported Google Flow website.
- 127.0.0.1: connects to the Toolio Automation desktop app on the same device.
Chrome Web Store Limited Use
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Data is used only to provide or improve the extension's single purpose. It is not used for personalized advertising, retargeting, lending or credit decisions, or human review, except when required by law or when the user explicitly requests support involving specific information.
Your choices
You can stop the connection by closing Toolio, disable or remove the extension from Chrome, or clear the extension's stored data through Chrome. Removing the extension deletes data stored by the extension in Chrome.
Contact
For privacy questions or support, email support@toolio.live.