IT GENESIS ยท BROWSER PROTECTION
Privacy and data use
Effective date: 17 October 2026
This notice describes IT Genesis Browser Protection and the processing of its attachment events by the companion IT Genesis Endpoint Agent and Endpoint Manager. It is intended for organization-managed devices. Your organization configures policies and is responsible for informing users about its monitoring practices and determining its lawful basis for processing.
Purpose and operation
The extension applies your organization's attachment policies to supported file-picker, file drag-and-drop and file-paste flows on websites. Policies may monitor, block or allow these flows. An attachment attempt is not proof of a completed upload. This is not a general network firewall and does not cover every upload mechanism, browser profile or private browsing window.
Information processed
- Attachment metadata: file name, file size, website hostname, event identifier, timestamp and attachment method.
- Website context: the extension reads frame and top-level tab URLs locally to determine website hostnames and apply policy. Full URLs are not included in attachment-attempt payloads.
- Identity and device association: the Agent associates events with the Windows user account and enrolled device. Endpoint Manager may display them with the employee and company assigned to that device.
- Operational data: extension version, policy version and connection/health acknowledgements. The extension caches its managed policy in browser local storage.
- Optional screenshots: when enabled by the organization, the separate Agent may capture a screen image associated with an attachment event. Images can contain visible website content, communications, names or other sensitive information. The extension itself does not capture screenshots.
The extension does not read the contents of selected files, typed passwords, keystrokes or clipboard text. It inspects clipboard files for supported file-paste handling. File names themselves may contain personal information. Screen captures, when enabled in the Agent, can incidentally contain sensitive content visible on screen.
Transfer and access
The extension exchanges messages with the locally installed native host. The Agent forwards accepted event records to the organization's configured Endpoint Manager service over HTTPS. Event records and optional images are accessible to authorized organizational administrators and authorized IT Genesis support personnel according to their assigned permissions. Data is used to provide attachment policy enforcement, incident review, troubleshooting and protection of organizational information.
Limited use
IT Genesis Browser Protection's use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. The extension contains no advertising or third-party analytics integration. Data must not be sold or used for advertising, creditworthiness or lending decisions, or purposes unrelated to the disclosed protection functionality. Administrative access and any support access must remain limited to authorized purposes.
Storage, retention and deletion
The local extension policy cache remains until replaced or removed. The Agent maintains a bounded, encrypted local event queue for delivery; pending events are filtered to a maximum age of seven days. This is not the server retention period. Server event and screenshot retention is determined by the organization's deployment and administrative settings. Contact your organization's administrator for its retention period, access controls and deletion procedures. Removing the extension does not delete records already delivered to the server.
Your choices and requests
Contact your organization's IT administrator to understand which policies and screenshot options apply to your device, ask about access or correction, request deletion where applicable, or raise a monitoring concern. Organization-managed installation may restrict extension settings. Private browsing is not a guarantee that organizational monitoring is disabled; ask your administrator about the policies applied to your device.
Security and changes
The product uses browser native messaging, Windows access controls, encrypted local Agent event storage and HTTPS event delivery. No system can guarantee complete security. Changes to collection or use must be reflected in this notice and the store disclosures before they take effect.