Privacy Policy
Last updated October 2026 (extension version 1.0.8)
This covers the Cognivolt Super Extension only — a separate, much narrower piece of software from the main Cognivolt app. It shows a small floating panel over your browser-based EHR and pastes a finished clinical note into it. This page describes exactly what it can see, what it stores, and what it never does.
What it can access, and when
When you install it, Chrome lists the access the extension asks for (“read and change your data on all websites”) and you approve it once. That access exists for one purpose only: to show the Cognivolt panel over your browser-based EHR, and to put the note into that EHR’s fields. Chrome has no narrower way to allow an extension on whatever address your EHR happens to use.
The small program that runs on each page does nothing until you ask for Cognivolt: you click the toolbar icon, you have opened it before on that site, or you ticked “Show the Cognivolt button on every page” (off by default). Only then does it draw the panel or the small “C” button. It does not read the page, its text or its forms (it notes only the site’s name, to remember where you left the panel), and it does not run on a timer.
The one moment it touches your EHR’s content is when you press Insert (or choose “Paste Cognivolt note here” from the right-click menu): it looks at the page’s editable text boxes and their labels to find the matching one, writes the note into them, and stops. It sends nothing it sees on the page anywhere. The note goes into the page itself; it does not travel back to us.
What it stores, and where
Your personal Cognivolt extension token, stored locally in Chrome’s own extension storage on your device. That token never leaves your browser except in requests to Cognivolt’s own API, over HTTPS, to fetch your own recent session notes.
Note text is fetched from Cognivolt only when you open a note in the panel or trigger a paste, used immediately, and not retained by the extension afterward beyond that panel session. The panel also remembers, per website and on your device only, where you left it and whether it was minimized. No patient data is written to disk, no analytics are collected, and nothing is sent to any third party.
What it never does
It does not scan pages for content, harvest emails or any other data, or run on a timer. It does not read your browsing history or cookies, and it contacts only Cognivolt’s own servers (api.cognivolt.app and our backend), never any other address. It downloads no code: everything it runs ships inside the extension. It carries no advertising, analytics or tracking code of any kind.
Revoking access or uninstalling
Revoke the extension’s token anytime from Cognivolt → Settings → Browser Extension — it stops working immediately, everywhere it was pasted in. Uninstalling the extension deletes its locally stored token along with it; nothing about it persists on your device or ours beyond that.