CXMi.ai

CXMind Copilot — Privacy Policy

How the CXMind Copilot Chrome Extension handles your data

Last updated: April 13, 2026

1. Introduction

CXMind Copilot ("the Extension") is a Chrome browser extension developed by SonicWell Technology that provides real-time AI-powered assistance for SIP/VoIP call center agents. This privacy policy explains what data the Extension collects, how it is used, and how it is protected.

2. Data We Collect

Authentication Data

2.1 Account Information

When you sign in to the Extension, we collect:

Email address — used as your login identifier
Password — transmitted securely to your self-hosted CXMind server for authentication; never stored in plaintext
Authentication tokens — stored locally in Chrome's chrome.storage to maintain your session
Google OAuth credentials — if you choose to sign in with Google, we receive your name and email from Google's OAuth API

Personal Information

2.2 Agent Profile Data

Agent name and extension number — retrieved from your CXMind server to display your identity in the side panel
Server URL — the address of your self-hosted CXMind instance, stored locally

Communication Data

2.3 Call Audio & Transcription

Call audio streams — captured from your microphone and/or browser tab audio during active calls for real-time speech recognition (ASR)
Transcription text — generated from the audio stream and displayed in real-time in the side panel

Important: Audio data is streamed directly to your organization's self-hosted CXMind server or processed on-device using WebLLM. Audio is never sent to SonicWell's servers or any third-party service.

3. Data We Do NOT Collect

❌ We do not collect browsing history or web activity
❌ We do not collect location data
❌ We do not collect financial or payment information
❌ We do not collect health information
❌ We do not track mouse clicks, scrolls, or keystrokes
❌ We do not read or modify website content outside of the Extension's side panel

4. How We Use Your Data

Data	Purpose
Email & password	Authenticate you with your CXMind server
Auth tokens	Keep you signed in across browser sessions
Agent profile	Display your identity and call status in the UI
Call audio	Real-time speech-to-text transcription
Transcription	AI suggestions, note generation, and CRM integration
User preferences	Remember language, theme, and display settings

5. Data Storage & Security

5.1 Local Storage

All user preferences, auth tokens, and session data are stored locally in the browser using Chrome's chrome.storage API. This data remains on your device and is not synced to any external server by the Extension.

5.2 Server Communication

The Extension communicates exclusively with your organization's self-hosted CXMind server (the Server URL you configure during setup). All communication uses HTTPS/WSS encrypted connections. SonicWell does not operate any centralized data collection servers.

5.3 On-Device AI Processing

When using the local AI feature (WebLLM), language model weights are downloaded from HuggingFace CDN and cached in the browser's Cache Storage. All AI inference runs entirely on your device — no conversation data is sent externally.

6. Data Sharing

We do not sell, rent, or share your personal data with any third parties. Your data flows only between the Extension and your self-hosted CXMind server, which is managed by your organization.

7. Data Retention

Local data — Persists until you sign out, uninstall the Extension, or clear browser data
Server-side data — Governed by your organization's CXMind server data retention policies
AI model cache — Can be cleared manually from the Extension's settings panel

8. Your Rights

You have the right to:

Access — View all data stored by the Extension in Chrome's developer tools
Delete — Clear all local data by signing out or uninstalling the Extension
Revoke — Disconnect Google OAuth access from your Google Account settings at any time
Opt-out — Disable audio capture or AI features independently from the Extension settings

9. Children's Privacy

The Extension is designed for professional use in call center environments. It is not intended for use by individuals under the age of 16. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the Extension after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this privacy policy, please contact us:

Company: SonicWell Technology
Email: support@cxmi.ai
Website: https://cxmi.ai