Security & privacy

Privacy is a product feature, not an afterthought. Here's what that means concretely.

Browser-first, user-controlled

Every capture and every autofill is initiated by you. Nothing runs in the background without you clicking a button.

Minimal permissions

The extension requests activeTab, storage, scripting, and sidePanel — not broad access to every site you visit. Destination sites need explicit, optional host permission.

No raw page storage

SwiftListing AI never stores full page HTML, screenshots, or DOM snapshots. Only the normalized values you reviewed, plus minimal source metadata for traceability.

Sensitive fields are never touched

Passwords, credit-card numbers, bank-account numbers, SSNs, government IDs, and authentication codes are blocked from both capture and autofill by a denylist.

No automatic submission

SwiftListing AI fills forms; it never clicks a destination site’s submit button. That action is always yours.

Server-side authorization

Plan limits and access control are enforced on the server, not trusted from the extension — a compromised or modified client can’t grant itself more access.

Questions about our security posture? See our privacy policy or contact us.