Browser Extension Privacy

1. Single purpose

The Coommit browser extension has one purpose: create a Coommit room from the video call you are in, and give you a guest link to share with the other participants.

It is published by TAAO, Inc., a Delaware C-Corporation, the company that operates Coommit.

2. What the extension reads

2.1 On meeting pages

On meet.google.com, *.zoom.us, teams.microsoft.com and teams.live.com, the extension reads two things: the page URL and the page title. The URL tells it whether you are actually in a call (so the button stays hidden everywhere else), and the title is used to suggest a room name you can edit before creating anything.

It does not read, record, or transmit the content of your meetings: no audio, no video, no chat, no participant list, no screen content.

2.2 On the Coommit app

On app.coommit.com, the extension asks the app to issue an access key for your own account, so that you never have to create or paste one by hand. It reads nothing else on those pages.

2.3 Everywhere else

Nothing. The extension does not run on any other website.

3. What it stores, and where

The extension stores, in your browser's local extension storage and nowhere else:

• an access key scoped to your Coommit account (permissions: read your account name, read and create rooms, create invitations);
• the Coommit environment that key belongs to;
• a random identifier for this installation, so reconnecting this browser does not disconnect your other devices;
• your preference for creating temporary rooms by default, and the language of your Coommit account.

None of this is synced to us, and none of it leaves your browser except as described below.

4. What it sends, and to whom

The extension communicates with app.coommit.com and with no other server. There is no analytics, no telemetry, no error-reporting service, no advertising network, and no third-party code in the extension.

What it sends, when you ask it to:

• the room name you confirmed (which may be the meeting title it suggested) and whether the room is temporary, in order to create the room;
• a request to create a guest invitation for that room;
• the access key above, as the authentication header of those requests.

We do not sell or transfer this data to third parties, do not use it for anything unrelated to the extension's single purpose, and do not use it for creditworthiness or lending purposes.

5. Why each permission exists

• storage — to keep the access key and your preferences on this device.
• activeTab — to read the URL and title of the meeting tab you clicked from, so the room name can be prefilled.
• clipboardWrite — to copy the guest link so you can paste it into the meeting chat.
• scripting — to run the connection handshake in a Coommit tab you already have open, so installing the extension does not force a new tab on you.
• Access to app.coommit.com — to create rooms and invitations on your behalf, and to obtain the access key without you having to generate one.
• Access to the meeting sites — to show the button on a call and prefill the room name.

6. Turning it off

Open the extension settings and choose Disconnect this browser: the key is erased from the device and the extension stops linking itself again. You can also revoke the key from your Coommit account, under Integrations, at any time. Removing the extension from your browser erases everything it stored.

7. Contact

Questions about this page: hello@coommit.com, or TAAO, Inc., 1007 N Orange St, 4th Floor 5510, Wilmington, DE 19801, USA.