← Back

Privacy Policy

Nodient PA — Chrome Extension · Last updated: 26 March 2026

1. Introduction

Nodient PA ("the Extension") is a Chrome extension developed by Nodient ("we", "us", "our") that provides an advanced JSON editor for Microsoft Power Automate flows. This policy explains what data the Extension accesses, how it is used, and how it is protected.

2. Data We Access

The Extension accesses the following data solely to provide its core functionality:

• Power Automate flow definitions — Retrieved via Microsoft's Power Automate APIs using your own Microsoft account credentials. Flow data is processed locally in your browser and is never sent to Nodient servers.
• Microsoft account authentication — We use OAuth 2.0 via the Chrome Identity API to authenticate with Microsoft. We do not store or have access to your Microsoft password.
• Browser tab URLs — The Extension reads tab URLs to detect open Power Automate flows. No browsing history is collected or stored.

3. Payment Processing

Subscription payments are processed by Stripe through ExtensionPay. When you subscribe:

• Your email address is stored by ExtensionPay to manage your subscription.
• Payment details (credit card, billing address) are handled entirely by Stripe. We never see or store your payment information.
• A payment status flag is stored locally in Chrome's extension storage to verify your subscription.

4. Data We Do NOT Collect

• We do not collect analytics, telemetry, or usage data.
• We do not use cookies or tracking technologies.
• We do not sell, share, or transfer any user data to third parties.
• We do not store your Power Automate flow data on any external server.

5. Local Processing

All flow editing, JSON processing, and diff operations happen entirely within your browser. The Extension communicates only with:

• Microsoft APIs (api.flow.microsoft.com, api.powerplatform.com) — to read and save your flows, using your own credentials.
• ExtensionPay (extensionpay.com) — to verify your subscription status.

6. MCP Server (Optional)

The Extension includes an optional MCP (Model Context Protocol) bridge that enables AI-assisted flow editing via local tools such as Claude Code. This bridge runs entirely on your local machine and does not transmit data to any external server beyond the Microsoft APIs listed above.

7. Data Storage

The Extension uses Chrome's built-in chrome.storage API to store:

• OAuth tokens (encrypted by Chrome, scoped to the extension)
• Subscription status
• User preferences (theme, editor settings)

All stored data is removed when the Extension is uninstalled.

8. Permissions

The Extension requests the following Chrome permissions:

• identity — To authenticate with your Microsoft account via OAuth.
• tabs — To detect open Power Automate flow tabs.
• storage — To store authentication tokens and preferences locally.
• Host permissions — To communicate with Microsoft Power Automate APIs and ExtensionPay for subscription management.

9. Your Rights

You can:

• Revoke the Extension's access to your Microsoft account at any time via Microsoft Account Permissions.
• Cancel your subscription at any time via the Stripe customer portal.
• Uninstall the Extension to remove all locally stored data.

10. Contact

If you have questions about this privacy policy, contact us at privacy@nodient.nl.

11. Changes

We may update this policy from time to time. Changes will be posted on this page with an updated date.