Privacy Policy for Autofill Factorial

Last Updated: 16 September 2026

Autofill Factorial is a browser extension that helps you fill in your own monthly work schedule in FactorialHR. This policy explains what data the extension handles, where that data goes, and how you can remove it.

1. Information the extension handles

• Authentication information. When you connect the extension, it completes an OAuth 2.0 authorization with your own FactorialHR account. The resulting access token and refresh token are stored only on your device, in the browser's local extension storage. They are used to call FactorialHR's official API on your behalf and are refreshed automatically.
• Your schedule preferences. The shift times, pauses, randomization settings and related options you configure are stored only on your device.
• Your timesheet data. To calculate your monthly balance and to avoid creating duplicate shifts, the extension reads your attendance data (shifts, worked times, estimated times, leaves and company holidays) from FactorialHR's official API.

2. Data usage

All data is used exclusively for the extension's single purpose: filling in the monthly schedule you configure in your own FactorialHR account. The extension contains no analytics, telemetry, crash reporting or advertising.

3. Where data is transmitted

The extension sends requests only to FactorialHR's own services, authenticated with the token issued for your account:

• https://api.factorialhr.com — to read your timesheet and create the shifts you configured.
• https://mcp.factorialhr.com — only once, for the OAuth client registration endpoint that FactorialHR publishes for third-party applications.

Your data is not sent to the developer, and there is no developer-operated server. Nothing is sold or transferred to third parties, nothing is used for purposes unrelated to the extension's single purpose, and nothing is used to determine creditworthiness or for lending purposes.

4. Permissions and why they are needed

• Identity: runs the OAuth sign-in flow with FactorialHR.
• Storage: stores your preferences and the OAuth tokens on your device.
• Active tab and scripting: detect that the active tab is your FactorialHR timesheet page and inject the script that fills in the shifts there.
• Host access to app.factorialhr.com: detect and operate on your timesheet page.
• Host access to api.factorialhr.com: read your timesheet and create the shifts you configured.
• Host access to mcp.factorialhr.com: only for the OAuth client registration endpoint.

The extension does not read or modify any other website.

5. Third-Party Services

Autofill Factorial does not use any third-party services, analytics or advertising tools. The only external services it contacts are FactorialHR's own API endpoints listed above.

6. Retention, deletion and revocation

Your tokens and preferences live only in your browser's local storage for this extension. Removing the extension deletes them. You can also disconnect from inside the extension, which revokes the refresh token at FactorialHR, and you can revoke the extension's access at any time from your FactorialHR account settings.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page with the date updated above.

8. Contact

If you have any questions about this Privacy Policy or the extension, please contact us at:

Email: jesusmejias.jm@gmail.com