The extension reads the current tab's selected text or visible content ONLY when you invoke it (click the Stevai button); it never reads pages in the background. Detected secrets are redacted on your device before anything is sent. The text you choose to send is transmitted over HTTPS to the Stevai API — using your own API key — solely to generate the response you requested. It is not sold, shared with third parties, or used for advertising or tracking. Your API key and settings are stored locally in your browser.
Full policy: https://stevai.com/legal