Privacy policy

Okta Max doesn't collect any information. There are no accounts, analytics, tracking or telemetry, and we run no servers that your data could reach.

1. What we collect

   Nothing. Okta Max never sends us your data, your Okta data or anything about how you use the extension.

2. Where Okta Max connects

   The extension talks to your Okta org using the session you're already signed in with, the same way the admin console does. Okta still decides what you're allowed to see. It downloads nothing at runtime. The on-device assistant, including Gemini Nano and Okta's MCP server, runs inside Chrome.

3. What stays in your browser

   Your settings, theme, API console history and assistant chats are saved in Chrome's own extension storage on your computer. Chrome may sync your settings across your signed-in browsers. Uninstall the extension to remove all of it.

4. If you use a chat server

   If you or your IT team set up a chat server, the assistant sends your questions, the page you asked from and your Okta access token to that server. Whoever runs that server and the model it uses handle that data, not Okta Max. With the on-device assistant, nothing leaves your computer.