PRIVACY POLICY
Avatar Machine Flow Agent
Effective date: October 12, 2026
Summary. Avatar Machine Flow Agent connects the Avatar Machine desktop application with Google Flow. The extension processes workflow information locally and communicates with the user’s own Avatar Machine application over the loopback interface (127.0.0.1). It does not operate an Avatar Machine remote server for extension data.
1. Scope
This Privacy Policy describes how the Avatar Machine Flow Agent Chrome extension (the “Extension”) processes information while helping a user prepare Google Flow generations and return completed generation results to the Avatar Machine desktop application.
This policy applies to the Extension. Google Flow and other Google services are provided by Google and are subject to Google’s own terms and privacy practices.
2. How the Extension Works
The Extension is designed to work with the Avatar Machine desktop application. It can prepare supported Google Flow form fields and settings, observe workflow and generation state, detect user-initiated generation activity, and retrieve completed media results for return to Avatar Machine.
The Extension does not press the Google Flow Generate button on the user’s behalf. Generation remains a user-confirmed action in Google Flow.
3. Information Processed Locally
To provide this functionality, the Extension may process the following information on the user’s device:
- Google Flow page path or project identifier and page/visibility state needed to maintain the workflow;
- generation form state, available model/options state, and generation/result state;
- user-provided prompts, generation settings, and reference media used in the Google Flow workflow;
- a report that the user activated the Generate action and related workflow progress state;
- completed result information, including download filename and file size where needed to return the result to Avatar Machine;
- a locally generated Extension installation identifier, Extension version, browser user-agent information, and a sign-in/readiness verdict used for local connection and troubleshooting;
- local connection and workflow state needed to maintain communication between the Extension and the Avatar Machine desktop application across page navigation or Extension service-worker restarts.
4. Credentials and Authentication
The Extension does not read, collect, store, or transmit Google account passwords, browser cookies, Google OAuth tokens, session tokens, or other authentication credentials.
Users sign in to Google directly through the browser and Google’s own sign-in experience. The Extension does not use the Chrome identity permission to obtain Google credentials.
5. Local Communication with Avatar Machine
The Extension communicates with the user’s own Avatar Machine desktop application through the local loopback interface at 127.0.0.1. This communication is used to exchange workflow commands and status information required for the Google Flow integration.
Extension-derived data is not automatically transmitted to an Avatar Machine-operated remote server.
6. Google Flow Processing
When a user submits a generation in Google Flow, prompts, reference media, generation settings, and related request data are provided to and processed by Google as part of the Google Flow service. Google’s handling of that information is governed by Google’s applicable terms and privacy policies.
Avatar Machine Flow Agent does not change Google’s role in processing data submitted to Google Flow.
7. Downloads Permission
The Extension uses the browser downloads permission only to retrieve completed Google Flow generation results created through the Avatar Machine workflow so those media files can be returned to the Avatar Machine desktop application.
The Extension does not use this permission to monitor unrelated downloads or download unrelated files.
8. Storage Permission
The Extension uses local browser storage to maintain connection and workflow state required to communicate with Avatar Machine and to preserve the Google Flow preparation workflow across page navigation and Extension service-worker restarts.
This permission is not used to build a general browsing history or to store unrelated user data.
9. Website Access
The Extension requires access to Google Flow pages at https://flow.google.com/* for the limited purpose of preparing requested generation fields, reading workflow state and generation results, and returning completed results to Avatar Machine.
The Extension is not designed to access unrelated websites or monitor general browsing activity.
10. Analytics, Diagnostics, and Crash Reporting
The Extension does not automatically send Extension workflow data to remote analytics services.
The Avatar Machine desktop application has separate optional telemetry and crash-reporting capabilities. In the audited release configuration, telemetry is off by default and no analytics project key is embedded. Extension-derived Google Flow workflow data is not intentionally attached to that telemetry.
A diagnostics package may be created locally by the user. Such a package leaves the device only if the user chooses to share it. If telemetry or crash-reporting behavior materially changes in a future release, this policy will be reviewed and updated as appropriate.
11. Data Sale, Advertising, and Unrelated Uses
Information processed by the Extension is not sold or transferred to third parties for advertising, is not used for personalized advertising, and is not used for creditworthiness, lending, or unrelated purposes.
The Extension uses information only as necessary to provide and support the Avatar Machine / Google Flow workflow described in this policy.
12. Data Retention and Deletion
Workflow state stored by the Extension is maintained locally as needed for operation. Users can remove Extension-local data by removing the Extension and, where applicable, clearing its local browser storage.
Media and project information imported into Avatar Machine are managed by the Avatar Machine desktop application and the user’s local project/storage choices. Data submitted to Google Flow is subject to Google’s applicable retention and account controls.
13. Security
The Extension is designed to minimize access to information and to communicate with Avatar Machine locally. No method of software operation or storage can guarantee absolute security, but the Extension is designed to avoid collecting authentication credentials and to limit its access to the functionality necessary for the Google Flow integration.
14. Changes to This Privacy Policy
This Privacy Policy may be updated if the Extension’s functionality, data practices, distribution model, or applicable requirements change. The effective date at the top of this document will be updated when material revisions are published.
15. Contact
For questions about this Privacy Policy or the Avatar Machine Flow Agent, contact:
Support email: support@memoryos.com