Centeye Lumen Browser Extension Privacy Policy

1. What this policy covers

This policy describes the Centeye Lumen browser extension for Google Chrome and Microsoft Edge (the “extension”). It covers what the extension reads, what it sends and where that goes.

The extension is part of Centeye Lumen, a service that organizations use to guide how their people use AI websites at work. It is installed on work computers by the organization or by the IT provider that manages them, through browser policy. It works only together with the Centeye agent on the same Windows computer.

When an organization uses Centeye Lumen, it decides how the data described here is used. It does this through its IT provider and its agreement with Centeye. Centeye processes that data on the organization’s behalf and under its instructions, as described in our Privacy Policy and our Data Processing Agreement.

2. What the extension does

On AI websites that your organization has chosen, the extension does one of two things:

• It shows a short reminder card (for example, “Keep company data out of [site]”) with a link to the AI app your organization has approved.
• If your organization has blocked the site, it shows a page that says so and links to the approved app.

On every other website, it does nothing.

3. What the extension reads

• The host name of the website in a tab, and only for the AI websites on its list. The list comes from Centeye’s AI site catalog, and Centeye adds and removes sites as AI services change; an updated list comes with a new version of the extension. The browser gives the extension a tab’s address only for sites on that list. The extension uses the host name only, for example chat.example-ai.com, not the rest of the address.
• Which button you choose on its own reminder card or block page: open the approved app, go on to the site, or leave.
• Whether a sign-in to an AI service used a personal account rather than a work account. It does not read the sign-in page, an email address, a user name or a password. Today this covers Microsoft personal accounts: the extension learns it only from the host name of Microsoft’s personal sign-in page, login.live.com, when a sign-in passes through it. Other providers, such as Google, may be added in a later version of the extension; this policy will say how before that version is released. Any other sign-in is recorded as “not read”.
• Your organization’s settings, which the Centeye agent on your computer hands it: which AI sites get a reminder or a block, the approved app, and a contact line.

4. What the extension does not read

• Anything you type, paste or upload, and any file.
• The content of any web page.
• Form fields, the clipboard and key presses.
• Websites that are not on its list of AI websites.
• The full address of any page, including the path, the search terms and anything after the host name.
• Passwords, cookies, sign-in tokens, email addresses or user names.
• Your browsing history.

The extension has no way to send text you wrote. Every message it sends is checked against a fixed list of fields before it leaves (section 5). No field can hold free text, and a message with any other field is not sent at all. The Centeye agent checks every message again and refuses one that does not match. A refused message is discarded. Only a count of refusals is reported, with nothing from the message.

5. What is sent, to where, and how

From the extension to the Centeye agent on the same computer.

• The extension sends data only to the Centeye agent, through the browser’s native messaging, on the computer itself. It makes no network request of its own and calls no server.
• When it shows a reminder card or a block page, it sends one record after you choose a button. The record holds:
  • the AI site’s host name;
  • the browser (Chrome or Edge);
  • whether a reminder or a block was shown;
  • the button you chose;
  • whether a personal-account sign-in was seen (“personal” or “not read”);
  • the time, to the second.
• Every few minutes while it is connected, it sends a status: set up or not, whether settings are loaded and how many, and the extension’s version.
• When it connects, it sends the browser and the extension’s version.
• A visit where nothing is shown sends nothing.

From the Centeye agent to Centeye.

• The agent adds the computer and the name of the Windows account signed in to the browser. It reads that name from the operating system, not from the extension. It then sends the record to Centeye’s service over an encrypted connection (HTTPS with the agent’s own certificate).
• The status above travels as part of the agent’s regular check-in.
• Centeye stores a record only when the site is on the AI site catalog for your organization.

Who sees it. Your organization and the IT provider that manages Centeye for it see these records in the Centeye console. Centeye does not sell this data, does not use it for advertising, and does not use it to build profiles of individuals. Centeye staff see these records only to provide support that your organization or its IT provider asks for, or when the law requires it.

6. Nothing is sent until your organization has told you

The extension stays idle until your organization has recorded in Centeye that it told its people about these controls, and the date it did so. While idle it sends nothing, shows nothing and blocks nothing. Its toolbar button says “Not set up: This shows nothing, blocks nothing and sends nothing.”

If your organization withdraws that record, the extension goes idle again and deletes, on the computer, every record it had not yet sent. Centeye refuses any record for an organization with no such notice on file.

When the extension is active, its toolbar panel says: “Your organization can see each AI site where this showed you a card or a block, when, and what you chose, under your Windows account name. It can also see if a Copilot sign-in used a personal Microsoft account. This extension does not read what you type or the files you add.” Each reminder card and block page shows your organization’s own contact line.

7. Who turns it on and off

• The IT provider. On a computer that runs the Centeye agent for endpoint protection, Lumen is off until an administrator at the IT provider turns it on for the organization. The console records who turned it on and when. Turning it off stops the extension’s work on those computers. No reinstall is needed.
• The organization’s settings. Which AI websites get a reminder or a block, and the approved app, are set by the organization through its IT provider.
• The person using the browser. Because the extension is installed by work policy, it cannot be removed from a managed browser by the person using it.

8. What is kept, and for how long

On the computer. The extension keeps only what it needs, in the browser’s own storage on that computer:

• which listed AI sites already showed a reminder today, so it shows at most once a day per site; this is kept for the current day only;
• a reminder or block page that is open, until you choose a button;
• records not yet handed to the agent, so none is lost if the browser restarts; at most 200 are kept;
• whether a personal-account sign-in was seen on a site today, until the day ends.

None of this is sent anywhere except the records described in section 5, and only to the agent. The agent holds records it has not yet sent in memory, in a queue of limited size.

At Centeye. How long records are kept is set by your organization’s agreement with Centeye.

9. Security

Records travel from the extension to the agent only on the computer itself. From the agent to Centeye they travel over an encrypted connection that uses the agent’s own certificate. In Centeye’s service each organization’s records are kept separate from every other organization’s. Every change to the Lumen on/off switch is recorded with who made it and when.

10. Your choices and requests

Centeye Lumen is used by your organization, which decides how this data is used. To ask about, see or delete records about you, contact your organization or the IT provider that manages your computer. The contact line on each reminder card and block page is theirs. If you contact Centeye, we will pass your request to them.

11. Changes and contact

If we change this policy, we will update the date at the top. A change to what the extension reads or sends comes with a new version of the extension, which each browser store reviews again.

Questions: privacy@centeye.io.