DevHexLab FlowLens AI Privacy Policy

DevHexLab FlowLens AI does not operate a DevHexLab backend for the MVP version.

• We do not collect, sell, rent, or share user data with advertisers or data brokers.
• We do not track users across websites.
• We do not use user data for advertising.
• We do not collect browsing history for analytics.
• We do not collect payment information.

The extension may store the following information locally in the user's browser extension storage:

• Selected AI provider
• API key entered by the user
• Selected model name
• Provider base URL, if using a custom provider
• Extension preferences, such as whether the floating FlowLens button is enabled
• The latest prompt or focus text entered by the user

This information is stored locally in the user's browser and is used only to operate the extension.

When the user clicks Send, the extension sends the user's message to the selected AI provider.

When the user clicks Send with screen or Analyse current screen, the extension captures the visible browser tab and sends the screenshot together with the user's message to the selected AI provider.

Depending on the selected provider, this may include:

• User-written messages
• Visible page screenshots
• Visible text, errors, flow names, connector names, expressions, or other information shown on the current browser screen
• Model and provider configuration needed to complete the request

This information is sent directly from the user's browser to the selected AI provider using the user's own API key.

Users choose which AI provider to use. Supported provider options may include:

• OpenAI
• Gemini
• OpenRouter
• Kimi
• Custom OpenAI-compatible providers

Data sent to an AI provider is handled according to that provider's own terms and privacy policy.

Users should not use Send with screen on pages containing information they do not want to send to their selected AI provider.

The current MVP version of DevHexLab FlowLens AI does not send screenshots, prompts, API keys, or AI responses to a DevHexLab server. Requests are sent directly from the browser extension to the selected AI provider.

If DevHexLab adds hosted services in the future, this Privacy Policy will be updated before those services are used.

Users provide their own AI provider API key. The API key is stored locally in browser extension storage so the extension can make requests to the selected provider.

Users can remove or replace their API key at any time from the extension settings. Users may also revoke their API key directly from their AI provider account.

DevHexLab FlowLens AI may request browser permissions required for its features, including:

• Active tab access — to analyse the current browser tab when requested by the user
• Storage — to save settings locally
• Tabs and scripting — to open the side chat panel on supported pages
• Host permissions — to communicate with selected AI providers
• Screenshot capture — to support the Send with screen and Analyse current screen features

These permissions are used only to provide the extension's user-facing features.

The extension is designed primarily for Power Automate and Power Platform pages. The floating FlowLens button is intended to appear on supported Power Platform pages. Users may also open the side chat manually from the extension popup on any page.

DevHexLab does not retain user prompts, screenshots, API keys, or AI responses on DevHexLab servers in the MVP version.

Locally stored settings remain in the user's browser until the user changes them, clears extension data, or uninstalls the extension.

Third-party AI providers may retain or process submitted data according to their own policies.

Users can:

• Choose their AI provider
• Change or remove their API key
• Change the selected model
• Disable the floating FlowLens button
• Avoid sending screenshots by using Send instead of Send with screen
• Uninstall the extension at any time
• Revoke API keys from their AI provider account

DevHexLab FlowLens AI is intended for professional and productivity use. It is not directed at children.

We may update this Privacy Policy as the extension changes. When significant changes are made, the effective date at the top of this page will be updated.

For questions about this Privacy Policy, contact DevHexLab through the contact page or visit devhexlab.com/flowlensai.