G
Garage
Submit Challenge

Privacy Policy

Last updated: April 7, 2026

1. Overview

This Privacy Policy describes how First to Fly Pte. Ltd. ("we", "us", or "our") collects, uses, and protects information when you use Garage ("the platform") and the Garage Web Agent Chrome extension ("the extension"). We are committed to protecting your privacy and handling your data responsibly.

2. Information We Collect

2.1 Account Information

When you sign in via Google OAuth or email and password, we collect your name and email address to identify your account and provide access to the platform.

2.2 Chrome Extension — Session Token

The Garage Web Agent extension stores a session token locally in Chrome storage on your device. This token is used only to authenticate your connection to the Garage platform. It is never shared with third parties and expires after 24 hours.

2.3 Chrome Extension — Automation Data

When you start an automation task, the extension relays browser interaction data (navigation events, DOM state, page content, and user-initiated actions) to the Garage backend solely to execute the task you requested. This data is used exclusively to fulfill your requested task. Basic task metadata (start time, end time, status) is retained for up to 30 days for debugging and service improvement, then permanently deleted. Raw page content and interaction data is not retained beyond the active session.

2.4 Usage Logs

We collect basic usage logs (task start and end times, error states) to operate and improve the service. These logs do not include the content of web pages visited during a task.

3. Chrome Extension Permissions

The Garage Web Agent extension requests the following Chrome permissions, each used only for the stated purpose:

  • debugger — Attaches the Chrome DevTools Protocol to browser tabs so AI-generated automation commands (navigation, DOM interaction, JavaScript evaluation) can be executed. Only active during an explicit user-initiated task.
  • tabs — Opens, queries, and manages browser tabs required by the automation workflow.
  • sidePanel — Displays a live task execution panel alongside the active tab during an automation session.
  • storage — Persists your session token and configuration locally on your device in Chrome storage.
  • offscreen — Maintains a persistent WebSocket connection to the Garage backend in an offscreen document, required by Chrome MV3 architecture for long-running automation tasks.
  • notifications — Sends desktop notifications when a task completes or requires your attention.
  • alarms — Monitors and re-establishes the connection if it drops during an extended automation session.

4. How We Use Your Information

We use collected information solely to:

  • Authenticate your account and provide access to the platform
  • Execute browser automation tasks you explicitly request
  • Operate, maintain, and improve the Garage platform
  • Respond to support requests

5. Data Sharing

We do not sell, rent, or share your personal data with third parties except as required by law or to operate core infrastructure (e.g. cloud hosting providers) under data processing agreements. We do not use your data for advertising or creditworthiness assessment.

6. Data Retention

Session tokens expire after 24 hours. Basic task metadata is retained for up to 30 days for debugging purposes, then permanently deleted. Raw automation data (page content, interactions) is not retained beyond the active session. Account data is retained until you delete your account.

7. Security

All data in transit between your device and our servers is encrypted using TLS. Session tokens are stored locally in Chrome storage on your device and are never transmitted to third parties. We follow industry-standard security practices to protect your data.

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at [email protected]. You can uninstall the Chrome extension at any time to immediately stop all data relay to our servers.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the platform. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact

First to Fly Pte. Ltd.
Singapore
[email protected]