FlowOS Companion privacy.

1. Who we are

The FlowOS Companion (the “extension”) is published by Laystone Group SAS, publisher of Thinking Platforms and FlowOS (contact: contact@thinkingplatforms.com). The extension is reserved for employees of FlowOS client companies: it connects to the FlowOS server of the user's company.

For data processed through the extension, the user's company is the data controller. Laystone Group SAS acts as a processor when it runs the FlowOS server on the company's behalf, under the agreement and the data processing agreement (DPA) entered into with the company.

2. What the extension does

The extension shows a side panel to summarize, translate or explain the open page, ask a question about that page, rephrase, shorten, fix or translate selected text, and prepare a reply to an email open in Gmail or Outlook on the web.

In agent mode, the user hands over a task (for example “Find a train ticket Paris → Lyon on Friday morning”): the extension acts in the open tab (open an address, click, type, pick, scroll, read), step by step, with a red “FlowOS is controlling this tab” banner and a Stop button always visible. It asks for the user's confirmation before any binding action (payment, purchase, booking, form or message submission, publishing, deletion, accepting terms, switching account) and never fills in a password, card number, IBAN or code itself: the user types it in.

3. Data processed

Data	When	Where it goes	Why
Main text of the page, title, address (without parameters)	Only when the user starts an action on the page	The FlowOS server of the user's company, then the AI model chosen by the company	Produce the requested summary, answer or translation
Selected text	Only when the user picks a context-menu action	Same	Rephrase, fix, translate, reply
Open email thread (senders, subject, content)	Only when the user clicks “Draft a reply”	Same	Draft the reply
Email, password, two-factor code	At sign-in	The company's FlowOS server only	Authentication; the password is not kept by the extension
Session token	After sign-in	The extension's private storage on the device	Stay signed in; erased on sign-out, and when the browser closes unless “Stay signed in”
Settings (server address, language, model, excluded domains)	When the user changes them	The extension's local storage on the device	Running the extension
Agent mode: snapshot of the controlled tab (address without parameters, title, labels and values of visible buttons, links and fields, visible text)	At each step of a task started by the user, for the shared tab only (and tabs the agent opens for this task), until the task ends or is stopped	The FlowOS server of the user's company, then the AI model chosen by the company	Decide the next action; secret fields (password, bank card, IBAN, codes) are never read, their value is masked
Agent mode: screenshot of the controlled tab (optional)	Only if the user turns on the “screenshot” option, with a model that accepts images	Same	Help the model understand the layout
Agent mode: task, user answers, step log	During the task	FlowOS server (sent to the model); log kept in the extension's session memory, erased when the browser closes	Task tracking and display in the panel
FlowOS ERP customer list and a customer record	When an action mentions a customer and the user turns on “ERP context”	Read from the FlowOS server, kept in session memory for 10 minutes at most	Enrich the answer with internal data allowed for the user's role

4. What the extension does not do

The extension:

• does not read any page in the background and has no permanent script in pages: in agent mode, the control script is only injected into the shared tab, during the task started by the user, and removed when it ends or is stopped;
• in agent mode, never types a password, card number, security code, IBAN or code, and performs no binding action without the user's explicit confirmation; never controls browser internal pages, extension stores or sites forbidden to agent mode (banks, online payment, tax, health, Google, Microsoft and Apple accounts by default; editable list, completed by the company);
• never reads sites on the “excluded domains” list (set by the user or the company);
• sends no data to Laystone Group SAS, Thinking Platforms or any third party: the only destination is the FlowOS server configured by the user's company;
• contains no advertising, audience measurement or tracker;
• does not sell or transfer data for advertising, profiling or credit assessment.

5. Processing by the FlowOS server

The FlowOS server is run by the user's company or on its behalf. It forwards requests to the AI model provider chosen by the company (for example Mistral AI, hosted in the European Union, OpenAI, Anthropic or Google), logs usage (agent, model, number of tokens, duration, without the content of requests) and keeps the documents the user chooses to save (“Save to FlowOS”).

This processing is governed by the contract between the company and Laystone Group SAS and by the FlowOS privacy policy.

6. Browser permissions

• activeTab, scripting: read the page or insert text in the active tab, only after a user action.
• sidePanel: show the side panel.
• contextMenus: right-click actions on a selection.
• storage: settings and session token.
• identity: open the company's Microsoft or Google sign-in window, only when the user asks; the extension does not access the Google account signed in to the browser.
• Access to the FlowOS server (optional permission): requested at sign-in, for the company's server address only.
• Access to a site (optional permission, agent mode): requested when the agent needs to read or use a site not yet allowed, site by site, or for all sites if the user chooses; can be removed at any time in the options. The extension does not use the browser debugger API.

7. Retention and deletion

Local data is deleted on sign-out (token) or when the extension is uninstalled (everything). The agent mode thread and log are kept in session memory, erased when the browser closes or with “New task”. Data kept by the FlowOS server follows the company's rules; users can exercise their rights (access, rectification, erasure, restriction, objection, portability) with their company, which is the data controller, or at contact@thinkingplatforms.com; in that case, the request is forwarded to the company concerned.

The rights, how and when we respond, and the right to lodge a complaint with the CNIL (the French data protection authority) are described in the privacy policy (sections 6 and 7).

8. Changes

Any change to this policy is published at this address with its update date.

← About the FlowOS Companion