Privacy policy
And You Create builds Standards, a platform for business data and AI agents. This page explains which data we process, why, and how you stay in control of it.
The data we process
On this site: the information you send us when joining the waitlist or booking a call, namely your first name, last name, work email address and company.
In the platform: the business data you put in it. You remain its owner and controller; we act as a processor under the GDPR.
The browser extension
The Standards extension for Chrome connects your browser to your workspace. It acts only on a command from a conversation in that workspace, and never sends anything anywhere but the API of the workspace you connected it to.
When an agent acts, the extension reads the target tab as an accessibility tree — the text and the interactive elements, as a screen reader would see them — and may take a screenshot of it. That content goes to your workspace so the agent knows where to click and what to write, and is kept there like the rest of the conversation.
It keeps in the browser, and nowhere else, the token that identifies it to your workspace: the access token in session memory, cleared when the browser closes, and the refresh token in local storage. No password ever passes through it: you sign in on the Standards pages, as usual.
It does not read your browsing history, your cookies, or the pages you visit outside a requested action. It never attaches to Chrome's own pages, to extension pages, to the Chrome Web Store or to incognito windows. It contains no analytics and calls no third-party service.
“Stop” halts the running action at once. “Disconnect” revokes the access and erases the tokens; all that remains is an anonymous identifier for this browser profile, which says nothing about you and lets the same device be recognised if you reconnect. Revoking the application from your workspace has the same effect, whether the extension is open or not.
Why we process it
To get back to you about your access request, arrange a call, and keep you posted on product changes.
We do not sell any data and never pass it to advertising brokers.
Where it is hosted
Platform data is hosted in the European Union, or directly on your own infrastructure when you pick that option at deployment.
The AI models we call on your behalf do not use your data for training.
How long we keep it
Access requests are kept for three years from the last contact.
Platform data is kept for the duration of the contract, then returned or deleted, as you choose.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your personal data.
To exercise them, write to privacy@standards.new. You may also lodge a complaint with your national data protection authority.
Cookies
This site sets no advertising cookies and no third-party profiling trackers. Only the analytics strictly necessary to run the site are used.