In short
The extension reads a web page only when you ask it to and works on the tables in your browser. It has no account, no analytics and no tracking. An optional add-on for AI apps on your own computer is not released yet; when it is, it will run on your computer and pass tables only to the AI app you connect. If you turn on the optional Online AI apps setting, tables your online AI app asks for pass through the Bastion Helix relay, which stores nothing.
Who we are
"Bastion Helix", "we" and "us" means Bastion Helix, an independent software developer based in Bengaluru, Karnataka, India. Contact: support@bastionhelix.com.
What the extension reads, and when
The extension reads the content of a web page, specifically its tables, their headings and the links inside them, only:
- on the tab where you click the Bastion Helix Tables toolbar icon or press its keyboard shortcut (Chrome's "activeTab" permission, which ends when you leave that page), or
- on a site you have chosen to allow with "Always allow on this site" or when capturing pages that reload. You can remove that permission at any time in Chrome's extension settings.
When you capture several pages, the extension clicks the "Next" button you pointed at, on that site only, and reads each page's table. It does not read other tabs, your browsing history, form contents you type, passwords or cookies.
How it is processed
Detection, cleaning, type detection and export all happen inside your browser. Files you export are created on your computer and saved where your browser saves downloads. Copying puts the table on your clipboard.
What is stored, and where
The extension stores, in Chrome's local storage on your computer only:
- your settings (date order, number format, theme, whether AI apps are on);
- cleaning steps you chose to remember, saved per website with the table's column names and the name you gave the table;
- once the MCP add-on is released, its pairing code, if you enter one.
Removing the extension deletes this data. The tables themselves are not stored after you close the panel.
What leaves your browser
By default, the extension sends nothing to Bastion Helix or any other company. The only connections it makes are:
- The MCP add-on (not released yet), if you turn it on once it is: a connection to 127.0.0.1 (your own computer), over which the add-on asks for tables and the panel answers. This stays on your machine.
- Online AI apps, only if you turn it on (see below): a connection to the Bastion Helix relay while the panel is open.
- "Copy and open Google Sheets" or "Copy and open" an AI chat (such as ChatGPT, Claude, Gemini or Le Chat), if you choose it: the table is copied to your clipboard and that site opens in a new tab. Nothing is sent until you paste it there yourself, and from then on that site's own terms and privacy policy apply.
The fonts and code the extension uses are part of the extension; it loads nothing from the internet.
The MCP add-on (not released yet)
The add-on is a small program your AI app (for example Claude Desktop, Claude Code or Cursor) starts on your computer. It listens only on 127.0.0.1, accepts connections only from a browser extension that presents its pairing code, and refuses web pages. It stores its pairing code in a file in your home folder (.bastion-helix/tables-mcp.json). It keeps no copy of tables and sends nothing to Bastion Helix.
When the AI app asks for a table, the add-on passes it to that app. What happens next is governed by the AI app and its provider. If the app sends your conversation to an online AI service, the table is sent as part of it under that provider's terms and privacy policy.
Online AI apps (optional relay)
Claude on the web, Le Chat, ChatGPT and similar online AI apps can only connect to servers on the internet. If you turn on Online AI apps, the extension makes a private link that contains a long random secret created in your browser, and keeps a connection open from the panel to the Bastion Helix relay while the panel is open.
When the AI app you added the link to asks for a table, the request goes through the relay to your panel, and the panel's answer (the table list or the table asked for) goes back through the relay to the AI app. The relay keeps that data in memory only for the request and does not store or log it. The relay runs on Cloudflare's network (Cloudflare acts as our service provider); request logging is turned off. We cannot see your tables and do not keep them.
Anyone who has your private link can read the tables in your panel while it is open, so keep it private. "Make a new link" cuts off the old one immediately, and turning the setting off disconnects the relay. Once the AI app receives a table, its provider's terms and privacy policy apply.
Chrome Web Store user data policy
The use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We do not sell user data or use it for advertising. We transfer it only as you direct: to the AI app you connect, through the relay if you turned it on. No person at Bastion Helix reads it.
Children
The extension is a general productivity tool and is not directed at children.
Changes
If the extension's data handling changes, we will update this policy before the change ships, change its version and date, and say so in the extension's release notes. Changes that need new data or new permissions will be shown in the extension before they take effect.
Contact
Questions or requests: support@bastionhelix.com.