--- title: "Opus One Vault Extension Privacy Policy | Azendo" description: "How the Opus One Vault browser extension handles your data: what it keeps in your browser, what it sends to Opus One and what it never does." url: "https://azendo.co/vault-extension-privacy-policy/" --- # Opus One Vault extension privacy policy. The extension fills your company's logins on the right website. It never stores passwords in your browser, never reads your browsing history and never sells or shares your data. ## Who we are The Opus One Vault extension (the extension) is published by Azendo and works only with Opus One, the business platform Azendo runs at portal.azendo.co. It is a workplace tool for people whose company gave them an Opus One account. Your company decides which logins you may use and who can see what. For the logins in its Vault, Azendo handles the data on your company's behalf, under its agreement with your company. ## What the extension does When you open the extension on a login page, by clicking its button or using its keyboard shortcut, it shows the logins your company lets you use for that website and fills the one you choose: the username, the password and, when needed, a two-step verification code. After you have opened it on a website, it can also show a small button inside that site's login fields. It has no access to a website until you open it there. ## Information the extension handles | What | How it is used and kept | | ---------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Connection to Opus One | When you choose Connect to Opus One and confirm it in Opus One, the extension receives an access token, the date it expires (90 days) and your name and initials, which it shows in the extension. These are kept in your browser's extension storage. The token stops working when you disconnect, change your Opus One password or leave your company, and your company can revoke it in Opus One at any time. | | The website you are on | When you use the extension on a page, it sends that website's address (for example app.example.com) to Opus One to find the logins that belong to it. It does not send the content of the page, and it does not record the pages you visit when you are not using it. | | The login you choose to fill | The username, password and two-step verification code of the login you pick are fetched from Opus One over an encrypted connection at the moment you fill, and go straight into the website's fields. The extension does not store them, log them or show the password. For a login spread over two pages (email first, password next), the website and the chosen login are remembered for up to 60 seconds in temporary browser storage that is cleared when the browser closes. The password itself is never kept. | | Fields you teach it | If you use Learn this field on a website, the extension saves a technical description of where that field sits on the page (a CSS selector) in Opus One, so it can find the field next time. Nothing you typed is saved. | | Your preferences | Whether the button inside login fields shows always, on hover or never, and the websites where you chose to hide it, are kept in your browser only. | ## What the extension never does * It does not collect your browsing history or read the content of the pages you visit. * It does not record keystrokes, clicks or anything you type. * It has no analytics, advertising or tracking of any kind. * It does not sell, rent or share your information, and does not use it for advertising, credit or lending decisions. * It does not load or run code from the internet. All of its code is in the published package. * It does not copy passwords to your clipboard or show them on screen. ## Records kept in Opus One Opus One records each fill: who filled which login, on which website, and when. Refused fills, for example on a website that does not match the login, are recorded too. Your company's administrators and the people who manage its Vault can see these records, so the company knows who used its logins. They are kept with your company's other Opus One activity records for as long as your company keeps them. ## Where information goes and how it is protected The extension talks only to Opus One at portal.azendo.co, over HTTPS. Opus One stores logins encrypted, with a separate key for each login (AES-256-GCM), and fills a login only on the website it belongs to. Your company can ask you to confirm it's you before logins are filled, at most once every 8 hours. ## Your choices and rights You can disconnect the extension from its menu at any time, or remove it from your browser unless your company installed it for you. Disconnecting or removing it deletes the connection and your preferences from your browser. To see, correct or delete information about you in Opus One, ask your company's Opus One administrator, or write to [hello@azendo.co](mailto:hello@azendo.co). ## Chrome Web Store user data policy The use of information received through the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Information is used only for the extension's single purpose, filling your company's Opus One Vault logins on websites, and is not transferred, sold or used for anything else. ## Children The extension is a workplace tool for employees and is not meant for children. ## Changes to this policy If the extension starts handling information differently, we update this page and its date before the new version is published. ## Questions Write to [hello@azendo.co](mailto:hello@azendo.co) and a person will answer. Last updated 5 November 2026.