Co-fill Assistant — Privacy Policy
Last updated: October 8, 2026
This notice covers version 0.3.1 of the Co-fill Assistant Chrome extension and its companion chat running on your own computer. It explains this product's handling of information when you use it to help complete an Interactive Brokers account application. Co-fill is not affiliated with or endorsed by Interactive Brokers.
Publisher and privacy contact
Co-fill Assistant is published by taliaferro.tech. For privacy questions or requests, contact support@taliaferro.tech.
Information used and why
The assistant uses the answers you provide to understand the application questions, explain unfamiliar terms, fill the fields you authorize, and check the result. Depending on the application, answers can include your name, contact details, address, birth date, nationality, employment, tax residency, identification information, income, net worth, investment experience and security-question answers.
The extension reads the application page's field labels, available choices, headings, validation messages and button labels. It can read a field back to check a fill. It inspects tab addresses to find a supported Interactive Brokers application page, but does not keep a browsing history or monitor your activity in unrelated tabs. The extension does not take screenshots or log your keystrokes.
Passwords are excluded from form capture. Credentials, verification, signatures and final submission are intended to be completed directly by you in Interactive Brokers. Do not put passwords, verification codes, bank details or other secrets in ordinary chat: anything you voluntarily type there may enter the conversation, saved transcript and AI processing described below.
Optional ID photo and secure entry
If you upload an ID photo, the companion app sends the entire image, including any visible document number and portrait, through OpenRouter to a vision model to extract identity details. Uploading an ID is optional. The app does not intentionally save the original image to disk. Extracted name, birth date, nationality and other identity details may become saved answers and later AI context.
The extracted document number is kept separately in server memory for direct form filling, rather than added to the chat-planning context or saved answer file. Entries made through the dedicated secure-input box also bypass the chat model, and the displayed chat entry is masked. This separation does not apply to secrets typed into ordinary chat or to the image during the initial AI extraction.
Recipients and AI processing
The extension connects to the companion app on your computer through localhost. It does not send application data directly to a Co-fill cloud backend in this release. Local operation does not mean all processing stays on your device: the companion app sends relevant chat content, answers and application structure to OpenRouter and the selected model providers to interpret replies, plan fills and explain questions.
The default configuration uses Anthropic Claude models for conversation and OpenAI's vision model for ID extraction, accessed through OpenRouter. The app operator can change model settings. Public-fact research can use OpenRouter's online search service; questions and selected context, such as country or employment category, may be used to form those searches. Processing may occur outside Panama.
Provider retention and use depend on the selected provider, routing and account settings; this release does not impose a universal zero-retention policy. See OpenRouter's privacy policy, provider data practices, Anthropic's privacy policy and OpenAI's privacy policy.
Answers filled into the broker's page are also received by Interactive Brokers under its own notices, including before final submission if its application saves progress. Deleting local co-fill data does not delete a broker application or provider-held records.
Local storage and retention
The extension saves the connected companion app's address in Chrome extension storage. It keeps a short operational diagnostic log in memory. The chat saves your language preference in browser storage.
The companion app keeps the conversation, current answers and document-number storage in process memory. It also saves ordinary answers to .cofill-profile/web-values.json to support resuming. When a run finishes, it can write the conversation to demo/cofill-web/transcript.json. These local files have no automatic time-based expiration and are not encrypted by the app; your operating system's account and disk protections apply.
A fresh demo clears the saved answer file and starts a new conversation, but it does not erase older exported transcripts or reports. Restarting the app clears its process memory. Uninstalling the extension does not remove the companion app's local files.
The optional direct-browser developer mode, separate from extension operation, can also save application screenshots under demo/cofill-web/shots. These can contain personal data and remain until deleted. This notice does not promise that a fresh start removes those files.
Your choices and deletion
You can complete the application yourself without co-fill, skip the ID upload, correct answers, or stop the companion app. Chrome shows a debugging notification while the extension is attached; canceling it stops the extension until a newly opened chat reconnects it. You can uninstall the extension through Chrome's extension settings.
To remove local session records, stop the app, delete .cofill-profile/web-values.json and the files in demo/cofill-web, and remove any reports or copies you exported elsewhere. Clear site data for the local chat to remove its language preference. Remove the extension to clear its own stored settings. Your computer's backups may retain copies under your backup settings.
To request access, correction or deletion, email support@taliaferro.tech. Describe your request without sending passwords, ID photos or full account numbers. Local files can be removed as described above; the publisher cannot remotely erase files on your computer. For information held independently by Interactive Brokers or an AI provider, contact that service as well.
## Limited use
The assistant uses the information handled by this extension to provide and support the co-fill functionality described here. The assistant does not sell it, use it for advertising, or use it to determine creditworthiness or lending eligibility. Information received through Chrome APIs is used subject to the Chrome Web Store User Data Policy, including its Limited Use restrictions. Transfers to AI services for the requested functionality are described above.
This notice and changes
This page describes the local companion release, not a future hosted application. A hosted version or a material change in data handling requires an updated notice. We will publish updates here with a revised date. This privacy page contains no application form, chat or ID uploader; information you send by email to the privacy contact is handled to respond to your request.