浏览器助手隐私说明

更新日期：2026-10-28

本说明适用于 SPT Buddy 浏览器助手（Chrome 扩展 ID：ijcklommmieojmlcbhjlnkchfmcmjjej），说明插件如何处理用户指定的网页资料。插件需配合已登录的 SPT Buddy 桌面客户端使用。

何时处理网页资料

只有当你主动引用网页、引用选中文字、发送任务，或允许一个桌面任务控制当前标签页时，插件才为该操作处理相关页面资料。安装插件不会自动读取所有网页正文，也不会上传整份浏览记录。

可能处理的资料包括你指定页面的标题、网址、正文、选中文字、任务说明，以及你授权操作产生的页面快照、截图、表单内容和结果。页面内容可能包含姓名、联系方式、沟通记录或业务数据；请确认有权提供这些资料。插件会阻止部分已识别的敏感字段或敏感页面截图，但自动识别不能保证覆盖每一种网页，不应将它视为资料脱敏的保证。

处理路径和用途

插件通过本机 Native Messaging 通道与 SPT Buddy 桌面客户端连接，用于网页资料引用、生成任务草稿及执行你授权的标签页操作。插件自身不直接连接模型接口；桌面任务会按账号与组织配置，把相关任务资料提交到 SPT Buddy 服务端、所用模型服务，以及你在任务中启用的系统或服务。因此，网页资料并非全部只在本机处理。

这些资料用于完成你要求的任务、展示操作结果、维护授权连接和排查故障。我们不出售插件取得的用户数据，不将其用于广告定向或信用评估，不将其转移或用于与上述用户可见功能无关的用途。模型与其他服务对所接收资料的处理，受各服务的适用条款及你所在组织的配置约束；本说明不替第三方承诺数据保留期限或模型训练政策。

标签页权限与文件

浏览器控制需要你的授权。0.1.4及更新版本提供两种范围：整个浏览器允许任务列出和操作当前浏览器配置中已打开的普通HTTP/HTTPS网页、切换页面、新建网页，以及在这些页面跨站导航；不包含无痕窗口和浏览器内置页。仅当前标签页限制在指定标签页和站点，跨站会撤销授权。0.1.3及更早版本只提供单标签授权。

默认每个任务在插件中单独授权。使用0.1.5及更新插件与支持的客户端时，可在客户端主动开启“自动授权整个浏览器”，后续交互任务自动复用该账号在本机的长期授权，无需再次点击同意；你可以随时关闭此偏好或停止任务接管。主动“停止控制”同时关闭自动授权。组织可禁用长期授权，退出账号或断开连接会撤销当前任务控制；重新连接后的新任务仅在长期授权仍开启时自动授权。此偏好与逐次网页操作确认独立，其他账号不继承。

整个浏览器授权下，列出的页面标题和网址也会交给该任务；只有选中页面后才读取正文并执行相应操作。切换页面、页面内容改变或导航后，旧快照和元素引用失效，操作前需重新读取。引用正文或选中文字时，插件仍按需申请该站点的读取权限；这与浏览器控制授权是不同步骤。

密码、验证码和支付等敏感操作请在浏览器中手动完成。插件不提供导出 Cookie、读取密码或让模型执行任意网页脚本的功能。

上传仅接受任务工作空间内、经你确认的文件。下载仅处理已授权页面中、经确认的支持链接；插件只监控自己发起的下载，不枚举无关下载记录、不修改浏览器全局下载设置。下载文件按任务工作空间的文件管理规则保存。

支持“自动允许网页操作”的客户端默认逐次确认；你可以在确认卡片或浏览器助手中主动开启长期允许。开启后，点击、填写、上传、下载等操作使用该授权，不再逐次询问。此偏好仅对当前账号在本机生效，可随时关闭；组织策略仍可要求逐次确认。它不会替代插件的浏览器授权，人工接管和跨站嵌入内容读取仍需另行确认。

保存、删除与组织访问

插件不建立永久网页正文库；连接、授权和页面引用等运行状态保存在内存中，并会在断开、撤销或过期时清理。进入桌面输入框、任务历史、产物或诊断的资料，可能根据客户端功能及组织配置保存。撤销标签授权或卸载插件不会自动删除已经进入任务历史或已下载的文件。

你可以在客户端删除任务及本地文件，使用现有历史和资料管理功能处理已保存内容。组织管理员可能依其权限查看组织中的任务审计和使用记录。需要确认组织保留策略或申请删除服务端资料时，可联系组织管理员，或通过下方邮箱提出请求；处理请求时会核验账号及资料归属。

撤销和联系

你可以随时在插件中点击“停止控制”，在客户端停用浏览器通道，在浏览器扩展设置中撤销站点权限，或卸载插件。

隐私和支持联系：jhc12345@gmail.com。请说明“SPT Buddy 浏览器助手”、问题发生时间和相关账号；不要在邮件中发送密码、验证码、密钥或无关业务资料。

English summary

SPT Buddy Browser Companion connects to the signed-in desktop through Native Messaging. User-requested page context and authorized operations may process titles, URLs, text, selections, snapshots, screenshots, form values and results. Relevant content may be sent to the SPT Buddy server, configured model providers and services you use. Processing is not exclusively local. Data is used for the requested features and diagnostics; it is not sold or used for advertising or creditworthiness. Sensitive-field detection is limited and does not guarantee complete redaction.

By default, each task requires a grant. Version 0.1.4 adds browser-wide access to normal HTTP/HTTPS pages alongside the single-tab option. Version 0.1.5 and a supporting desktop let users enable remembered browser authorization, off by default and scoped to their account on that device. Future interactive tasks can then use that authorization without another extension prompt. This is separate from remembered action approval. Users can disable either setting; actively stopping browser control also disables automatic authorization. Sign-out, disconnection and expiry revoke current task access. Incognito and browser-internal pages are excluded. Passwords, verification and payments require manual handling. No Cookie export, password reading or arbitrary model-provided webpage scripts are exposed.

Task history, artifacts and diagnostics may retain content under desktop and organization settings. Revoking access or uninstalling does not delete saved tasks or files. Use the desktop data-management features or contact your administrator. For privacy, support or deletion requests, contact jhc12345@gmail.com; ownership verification may be required. Never send passwords, secrets or unrelated business data by email.

English summary

SPT Buddy Browser Companion processes webpage context only when you reference a page or selection, draft a task, or authorize a desktop task to work in a specific tab. Context may include page titles, URLs, text, instructions, authorized snapshots, screenshots, form values and action results. Referenced pages may contain personal or business information. Sensitive-field detection is limited and is not a guarantee that all confidential content is removed.

The extension communicates with the signed-in desktop app through Native Messaging. The desktop task may send relevant information to the SPT Buddy server, configured model providers and services you choose to use. Processing is not exclusively local. Data is used to provide the requested functionality, display results, maintain the connection and diagnose problems. We do not sell extension user data, use it for advertising or creditworthiness, or transfer/use it for purposes unrelated to the visible functionality. Providers' applicable terms and your organization's settings govern their processing.

Control requires an explicit task-specific grant. Starting with 0.1.4, you may authorize this browser's normal HTTP/HTTPS pages, including listing their titles/URLs, switching pages, creating pages and cross-site navigation. Incognito and browser-internal pages are excluded. Alternatively, grant only the current tab and origin; a site change then revokes access. Version0.1.3 and earlier support only the single-tab scope. Stopping, disconnecting or expiry revokes either scope. Switching pages or navigation invalidates old snapshots. Site-reading permission is requested separately when needed. Handle passwords, verification codes and payments yourself. The extension does not expose password reading, Cookie export or arbitrary model-provided webpage scripts.

Runtime state is kept in memory, but content already sent to drafts, task history, artifacts or diagnostics may be retained under desktop and organization settings. Revoking access or uninstalling does not erase previously saved tasks or files. Use the desktop data-management functions or contact your organization administrator to manage retained data. Authorized administrators may access organization task audits and usage records. For privacy, support or deletion requests, contact jhc12345@gmail.com; ownership verification may be required. Do not email passwords, secrets or unrelated business data.