AI Bookmark Organizer Privacy Policy

1. Summary

AI Bookmark Organizer is local by default. Lucitra does not receive, collect, sell, or use extension data for advertising or profiling. Optional Agent Access lets you connect a separately installed local companion and approved MCP clients. A client that uses an external model may process only the bookmark metadata you have explicitly authorized for that provider.

2. Information the Extension Accesses

The extension can access:

The active tab's title and URL after you open the extension, solely to let you save that page as a bookmark.
Chrome bookmark titles, URLs, folder structure, and bookmark identifiers, solely to save, organize, move, undo, and answer questions about bookmarks.
User-entered organization instructions and bookmark questions.

The extension does not read linked webpage content, general browsing history, cookies, form data, passwords, or data from other tabs.

3. Local Processing and Storage

Chrome Built-in AI processes prompts on the device when available. In the default standalone mode, the packaged extension makes no network requests and does not use a remote AI service.

Scan checkpoints, category plans, editable previews, recent bookmark questions and answers, agent-access policy, prepared plans, and undo records are stored in chrome.storage.local. Chrome controls that local extension storage. Removing the extension normally removes its local storage.

4. Optional Agent Access

Agent Access is off by default. If you select Enable Agent Access, the extension requests Chrome's optional nativeMessaging permission and can connect to the open-source Lucitra companion installed on the same computer. Native Messaging does not expose a public server or inbound network port.

The companion uses an authenticated local socket to make a bounded set of bookmark tools available to an MCP client. You choose the bookmark-folder scope and whether access is read-only or permits reviewed changes. Agent Access cannot read linked page content or delete bookmarks. Write-capable clients must prepare an expiring plan before applying moves, and applied moves are recorded for undo.

Local MCP clients can process approved bookmark metadata on the device. Codex, Claude, and other clients may use external models even when their applications run locally. Before Codex or Claude can access bookmark data, you must select that provider and affirm a separate disclosure in extension Settings. The approved provider may receive bookmark titles, URLs, folder paths, organizer categories, and user instructions from the approved scope. The extension does not send linked webpage content, cookies, passwords, or data from other tabs.

Lucitra does not operate an intermediary cloud service for Agent Access. Data sent by an approved MCP client to an external provider is handled under your account and the provider's applicable terms and privacy policy. Select Disable and revoke in Settings to revoke the Chrome permission and disconnect clients. Uninstalling the companion separately removes its native-host registration and local authentication token.

5. Bookmark Changes

The extension creates bookmarks and folders only at your request. It moves bookmarks only after you review and apply selected changes, either in the organizer workspace or through a prepared Agent Access plan under the reviewed-change policy. It never deletes bookmarks. Recorded moves can be undone; empty folders may remain after an undo.

Lucitra receives no extension data and therefore does not retain, sell, rent, share, or use it for advertising, profiling, credit decisions, or any unrelated purpose. Local extension data remains on the device until it is replaced, cleared, or the extension is removed. Companion configuration remains until the companion is uninstalled.

If you explicitly authorize an external provider, that provider may retain or process the selected data according to your provider account, configuration, terms, and privacy policy. Lucitra does not control that external retention.

7. Chrome Web Store Limited Use

The use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is not used or transferred for purposes unrelated to the extension's single purpose or to determine creditworthiness or for lending.

8. Permissions

activeTab: Temporarily provides the current tab's title and URL after you open the extension.
bookmarks: Provides access required to read bookmark metadata and create or move user-approved bookmarks and folders.
storage: Preserves local checkpoints, previews, Q&A history, agent policy, prepared plans, and undo state.
nativeMessaging: Optional and requested only when you enable Agent Access so the extension can communicate with the installed local companion.

The extension requests no host permissions.

9. Changes to This Policy

If the extension's data practices change, this policy and the extension's disclosures will be updated before those changes are released.

10. Contact

Questions or privacy requests can be sent to privacy@lucitra.ai or submitted on the public AI Bookmark Organizer support page .