What stays on your machine
Ava Copilot has no server, no account and no analytics. It keeps your data in your browser, and sends only what a task needs to the services you chose.
Last updated ·
What leaves your machine
Per task, and only for the features you use.
Stays in your browser
- Chats, meeting notes, memory, routines and settings
- Browser storage
- API keys and connector sign-ins
- Encrypted vault
Leaves, to the service you chose
- Your task and the page it works on
- Your model provider
- Meeting audio and dictation
- Your speech-to-text model
Never leaves
- Cookies and saved passwords
- Never read
- Analytics or usage tracking
- None
- Anything to us
- No server
With a model on your computer, such as Ollama or LM Studio, page text stays on your computer too.
What it keeps, and where
Your work
Chats, meeting notes and transcripts, memory, routines, agents and the Inbox are kept in your browser profile (IndexedDB). Settings are kept in the extension’s own storage.
Your keys
API keys and connector sign-ins are encrypted in a vault in your browser (AES-GCM, with a key the browser will not export). Pages and settings only ever see the last four characters.
Removing it
Removing the extension deletes all of it. Memory can also be exported, imported or wiped from Settings.
What leaves, and where it goes
To your model provider
Your task, the text of the page it is working on (and a screenshot, only when vision is on), and the earlier messages and notes the task needs.
To your speech provider
Meeting audio when you take notes, what you dictate into the chat box, and your voice in a Gemini Live conversation. In economy mode, speech is written down on your computer and only text goes to your model. The “Hey Ava” wake word never leaves your computer.
For search by meaning
Passages added to memory are turned into vectors by Gemini if you use it, by Ollama on your computer, or not at all: keyword search works without either.
To the tools you connect
Connectors (MCP servers) receive only the tool calls you allow. A tool that writes asks first.
Checking a key
Saving a Gemini key sends it to Google once, to check that it works.
What never leaves
Cookies and saved logins
The agent does not read or send them, and it never types into a password field.
Analytics
There is none: no usage tracking, no crash reporting, no telemetry. Upstream’s analytics were removed.
Us
There is no Ava Copilot server. Nothing is sent to the people who make it.
Why it asks for each permission
Browser extensions list what they may do. Here is what each one is for.
| Permission | What it is for |
|---|---|
| Read and change data on all websites | To read and act on the pages you give it a task on. A blocked-sites list keeps it off sites you name. |
| Side panel | To sit next to the page you are working on. |
| Tabs and tab groups | To see and group the tabs a chat works in, and keep each chat to its own. |
| Scripting and active tab | To read pages and press buttons in them. |
| Debugger | To click and type the way a person does. The browser shows a bar while it is attached. |
| Web navigation | To know when a page has finished loading. |
| Storage, unlimited | To keep chats, notes and memory in your browser without a size cap. |
| Tab capture and offscreen | To record a call’s audio when you start meeting notes, and to listen for “Hey Ava” with the panel closed. |
| Top sites | So voice can find “my email” among the sites you visit most. |
| Alarms and notifications | To remind you of meetings and tell you when something needs you. |
| Text to speech | To read answers aloud with your computer’s own voices. |
| Identity | To sign in to connectors through the browser’s own sign-in window. |
This website
This site is static pages. It sets no cookies, runs no analytics and loads no scripts, fonts or images from anyone else. Your theme choice is kept in your browser’s local storage.