Amigo privacy and data use
Last updated October 15, 2026. Amigo is Youth Medical Mentorship’s browser assistant for authorized YMM staff. Its purpose is to help you find information, navigate approved company workspaces, and follow procedures.
What Amigo can see
When you open Amigo on a supported tab and connect your staff account, it can inspect rendered page text and control labels on that selected tab when you ask for help. It may briefly scroll the page to review lower sections. It does not grant access beyond your existing website account or inspect every browser tab. Amigo skips password and authentication controls, and does not read password fields or site cookies. Ordinary page text can still contain personal or sensitive information: use Amigo only with information you are authorized to share.
Where information goes
Your request and relevant page context are sent through the YMM-hosted service on Vercel to OpenAI to produce an answer or a proposed browser step. Starting live voice sends microphone audio to OpenAI; ending voice stops that connection. Amigo does not sell page information or use it for advertising. Service providers process information under their own applicable terms and retention policies.
Browser conversations and company memory
Amigo keeps up to 12 recent agent or walkthrough conversation turns, capped at 1,200 characters each, in Chrome extension session storage for the same authenticated tab grant. This bounded context can survive panel-mode changes and supported page reload/navigation. New chat, changing accounts, disconnecting, closing the selected tab or restarting the browser clears it. Access ends when the connection expires; expired session records are removed when next checked. Sanitization removes obvious secret patterns but is not anonymization: authorized personal details may still appear in an answer. The portal-agent endpoint does not write browser conversation or captured page text into Buddy’s company knowledge or Workspace conversation tables.
Amigo’s docked, floating and minimized views stay on the selected work tab and reuse the same mounted iframe; no external floating window opens. Moving, docking or minimizing the panel keeps the current conversation, task and voice connection mounted. Minimizing does not mute voice. The compact Amigo view shows its listening, speaking or working status without record content. Restore the panel to end voice, stop work or disconnect.
A full-document page navigation or reload destroys that iframe and ends its voice connection; restart Talk after the new page loads to continue by voice. An authorized same-workspace task can resume using its latest goal, original task ID, remaining step budget and original expiry, with bounded recent conversation and a fresh page observation. Manual navigation to another safe page cancels the old task rather than pulling you back. Unsupported pages, changed account or expired authorization cannot continue the old task.
Buddy’s separate Workspace has different features: signed-in conversations, approved knowledge, uploaded assets, onboarding progress and meeting records can be saved in YMM’s dedicated Supabase database. The Railway learning worker organizes approved knowledge and private continuity summaries. Meeting transcripts have a 90-day cleanup policy; approved organizational learning, summaries, decisions and action items can remain. Do not upload credentials, medical records, private student records, payroll or disciplinary information for training.
Permissions and control
Amigo’s use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
The Chrome extension uses activeTab for temporary access to the supported tab you select, scripting to attach its locally packaged panel and page-assistance helpers, and storage for session connection state, bounded recent conversation, task authority and panel layout. Its on-tab host isolates panel styling with a closed shadow root. Packaged frame resources are restricted to the approved YMM Portal, YMM monday.com and Amigo practice-workspace origins; the hosted interface has no direct Chrome extension API access. Agent tasks and walkthroughs are bounded, and you can stop or disconnect at any time. The extension does not automatically submit forms or payroll, send invitations, change access rights, or enter passwords.
Sign-in and trusted devices
After you click Connect, Amigo first checks your existing YMM Buddy sign-in inside its hosted frame. If your browser does not allow that sign-in there, it opens an account setup tab instead. After successful connection, only the setup tab opened by Amigo closes automatically. This does not read or reuse passwords or cookies from the connected Portal or monday.com page.
Staff and administrators use YMM-created accounts. If you choose Remember this device, your individual Buddy sign-in can last up to 30 days; do not choose it on a shared computer. This is separate from the selected-tab connection and assistant grant, which last at most one hour and can expire earlier. It does not grant 30 days of continuous page control. Administrators can disable an account or change its credentials to revoke its sessions.
Store-review accounts are separately restricted to a clearly labeled fictional practice workspace and fixed demonstration information. They cannot access internal company knowledge, meetings, contacts, Workspace tools or real student records. Their access expires on the configured review deadline, no later than 30 days after creation, and they do not receive remembered-device sign-in.
Questions and requests
For Amigo support, access, correction or deletion requests, contact kituukafamily@gmail.com. Do not include passwords, verification codes or private student, medical or payroll records in your email. We may need to verify your identity and authorization before changing or deleting company information.