Internal Staff Tool

Privacy Policy

RPC AI Assistant — Chrome Browser Extension

Effective date: 15 May 2026

1. Overview

The RPC AI Assistant is a Chrome browser extension available exclusively to authorised Rainbow Power Company (RPC) staff. It is distributed as an unlisted internal tool and is not available to the general public.

This policy explains what data the extension collects, how it is used, and how it is protected.

2. Data Collected

The extension collects and stores the following data:

• Authentication token: A personal API key generated by the RPC staff SSO system. This token is stored locally in Chrome's extension storage (chrome.storage.local) and is used solely to authenticate requests to the RPC AI Assistant backend.
• Active tab URL: Read at query time to detect if the user is on a SimPRO page, enabling context-aware responses. The URL is never stored or logged.
• Chat messages: Queries typed by the user are sent to the RPC internal AI backend for processing. Conversation history is cached locally in chrome.storage.local to maintain session context.

3. How Data is Used

All data collected by the extension is used exclusively to provide the AI assistant functionality to RPC staff:

• The authentication token identifies the staff member to the RPC backend and ensures only authorised personnel can access the service.
• Queries are processed by the RPC internal AI backend (hosted on RPC infrastructure) to answer questions about jobs, quotes, customers, commissions, and AR data.
• Conversation history is used only to maintain context within an active session.

4. Data Sharing

No personal data is sold, rented, or shared with any third parties. All data transmitted by the extension is sent exclusively to RPC's internal API servers (rpc.com.au infrastructure). No external analytics, advertising, or tracking services are used.

5. Data Storage and Security

Authentication tokens and conversation history are stored locally in Chrome's extension storage on the user's own device. Data is transmitted to the RPC backend over HTTPS. Access to the backend is restricted to authenticated RPC staff only.

6. Data Retention

Local extension data (token, conversation history) is retained until the user signs out or uninstalls the extension. Server-side query logs are retained in accordance with RPC's internal data retention policies.

7. User Rights

As an RPC staff member, you may:

• Clear your local extension data at any time via Chrome's extension settings or by signing out within the extension.
• Request deletion of server-side data by contacting the IT team.

8. Changes to This Policy

This policy may be updated from time to time. Changes will be reflected by the updated effective date above and communicated to staff via internal channels.

9. Contact

For questions about this privacy policy or data handling, contact:

Zakaria Cheurfi — zakaria.cheurfi@rpc.com.au
Rainbow Power Company Pty Ltd, 1 Alternative Way, Nimbin NSW 2480