Who We Are

Action Model is a project developed and governed by the Action Model Foundation, a decentralized entity managing the Large Action Model ($LAM) ecosystem. Our goal is to build a community-owned AI that learns from real human interactions with websites and applications. This enables intelligent automation that respects user control, privacy, and data ownership.

We are committed to transparency and user empowerment, especially when it comes to your data. This Privacy Policy outlines exactly what we collect, how we use it, and how you can control it.

What We Record

The Action Model browser extension records user interactions during training sessions you explicitly initiate. Nothing is recorded unless you click "Start Training."

During an active training session, we may capture:

• Browser Actions: Clicks, typing, scrolling, form inputs, and navigation steps

• Screenshots: Web pages visited during training (with sensitive elements auto-blurred)

• Interaction Metadata: DOM events, HTML structure, and UI states

• System Context: Extension version, OS type, browser version

What We Do NOT Record:

• Browser cookies from websites you visit (only auth cookies for login)

• Passwords or credit card inputs

• Your private messages or personal communications

• Any data outside of user-initiated training sessions

• Sensitive fields are automatically masked or excluded at the local device level. This means no sensitive data leaves your computer or touches the internet.

User Control & Permissions

• You are always in control. Recording starts only when you click “Start Training”

• You can pause or stop training at any time

• When training is not running, no data is being collected

• You can review, delete, or permanently erase your recorded data via your dashboard at https://train.actionmodel.com/training-history

• Many websites are blocked by default from being recorded (e.g., email, banking, healthcare).

  You can manage this list at: https://train.actionmodel.com/websites

Permissions & Chrome Extension Compliance

The extension is fully compliant with the Chrome Web Store User Data Policy, including:

• Data Minimization: Only essential permissions are used (storage, cookies, tabs, activeTab, scripting)

• Dynamic Permissions: Broader permissions like <all_urls> are requested only at runtime, with your explicit approval via Chrome’s native permission prompt

• Purpose Limitation: Data is only used for training AI models and improving user automation—not for advertising or profiling

• No Passive Collection: If training is not running, no background collection occurs

• User Consent: All permissions and recording are initiated by the user

Why We Collect This Data

We use recorded session data solely to:

• Train the Large Action Model (LAM) for browser automation

• Help users automate repetitive tasks across the web

• Reward contributors with $LAM tokens for participating in training

• Improve user experience by understanding common workflows

Data Storage & Security

All recorded data is handled with the highest security standards:

• Encryption in transit using HTTPS and TLS

• Data is stored securely on Google Cloud

• Only you and our AI training systems have access to your training data

• You may delete any session at any time from the dashboard

• Screenshots have sensitive UI regions blurred before upload

Authentication & Cookies

We use Clerk.dev to manage login and user sessions:

• Auth cookies are stored only to keep you logged in

• We do not collect or access third-party site cookies

• We do not use tracking cookies, ad pixels, or third-party analytics libraries

Third-Party Services

We may use the following secure infrastructure providers:

• Google OAuth / Clerk – for user authentication

• Firebase or Google Cloud – for encrypted storage

• Web3 Infrastructure – for token-based reward distribution

Each of these services operates under their own privacy policies, which comply with global data protection standards.

Your Rights

Depending on your jurisdiction (e.g., UK GDPR, EU GDPR, CCPA), you may have the right to:

• Access your personal data

• Correct or delete data we hold about you

• Request data portability

• Withdraw consent or restrict processing

• File a complaint with a supervisory authority (e.g. ICO)

To exercise your rights, contact us at: privacy@actionmodel.com

Data Retention

We retain data only as long as necessary to:

• Provide services (e.g., training, replays, automation)

• Comply with legal obligations

• Enforce terms of use

You may delete your training data or your account at any time via the extension or dashboard.

Cookies and Tracking

We use cookies only to:

• Maintain login sessions

We do not use cookies for:

• Cross-site tracking

• Retargeting ads

• Behavioral profiling

Children’s Privacy

This extension and related services are intended for users aged 18 and above. We do not knowingly collect data from children under 13 (or under 16 in the EU). If you believe a minor has used our services, contact us immediately.

Important User Responsibilities

• You are responsible for having permission to record any workflows that involve third parties

• Use the training tools ethically and with awareness of the data being captured

Changes to This Policy

We may update this Privacy Policy as needed. If changes are significant, we’ll notify users through the extension or our website.

Continued use of our services after a policy update constitutes acceptance of the new terms.

Google API Data Usage

What Data We Access via Google APIs

When you choose to sign in with Google or connect your Google account, Action Model may request access to certain Google APIs depending on the features you enable.

These permissions may include access to:

• Basic account information (name, email address, profile image)

• Calendar data (read and/or event management)

• Google Drive files (read and/or write access)

• Gmail data (read, send, and/or modify access)

• Google Docs and Sheets (read and/or edit access)

• Contacts (read-only access)

This access is feature-dependent and entirely optional. You will only be prompted to grant specific permissions when required for a particular workflow, automation, or feature within the product.

You can choose which permissions to grant, and you are not required to enable all scopes to use the core functionality of Action Model.

How We Use Google API Data
Google API data is used solely to enable user-facing functionality within the Action Model platform, such as:

• Authenticating your account

• Enabling AI agents and workflows to interact with your Google services

• Automating tasks across your Google workspace (e.g., sending emails, updating documents, managing calendar events)

We do not use Google API data for:

• Advertising purposes

• Selling or sharing with third parties

• Training models outside of the core functionality of the product

How We Store Google API Data

• OAuth tokens and credentials are stored securely and encrypted locally on your device

• We use industry-standard encryption practices to protect all authentication data

• Tokens are never stored in plain text

Data Transmission and Server Storage

• Google OAuth tokens are **not transmitted to Action Model servers**

• All authentication data remains **local to your device**

• We do not store or process Google API data in our cloud infrastructure
  
  

This ensures that access to your Google account remains device-bound and under your control

How Users Can Revoke Access

You may revoke Action Model’s access to your Google account at any time by:

1. Visiting: https://myaccount.google.com/permissions

2. Selecting Action Model from the list of connected apps

3. Clicking “Remove Access”

Once revoked:

• Any stored tokens become invalid

• The application will no longer have access to your Google data

• You can reconnect at any time if needed
  
  

Data Retention for Google API Data

• Google OAuth tokens are retained only for as long as necessary to maintain an active session

• Tokens are deleted when:

• You log out

• You disconnect your Google account

• You uninstall the application or extension
  
  We do not retain historical Google API data beyond what is required for active functionality.

Compliance with Google API Services User Data Policy

Action Model’s use of information received from Google APIs complies with the **Google API Services User Data Policy**, including the Limited Use requirements.

Specifically:

• Data is used only to provide user-facing features

• Data is not sold or shared with third parties

• Data is not used for advertising

• Data is not used to train models outside of core product functionality

Contact Us

Have questions or concerns?

Email: privacy@actionmodel.com
Dashboard: https://train.actionmodel.com

We are committed to protecting your privacy and empowering you to control your data.

Happy Training!