Cobo — Privacy Policy

Last updated: June 4, 2026

Cobo (“Cobo”, “we”, “us”) is a browser extension and service that lets teams leave comments on web pages — like Figma comments, but for any site. This policy explains what we collect, how we use it, and the choices you have.

1. Information we collect

We only collect what is needed to run the commenting service.

Account information. When you sign in with Google, we receive and store your Google account identifier, email address, display name, and profile-picture URL. We use Google solely to verify your identity; we never receive your Google password.
Content you create. We store your comments and replies, the URL of the page a comment is on, the comment’s position (anchor) on that page, an optional status and version label, and — if you create a “region” comment — a screenshot of the area of the page you chose to capture.
Workspaces and membership. We store the workspace name, the site it applies to, member roles (owner/member), and invite links you create.
Developer / AI access tokens. If you generate a token to connect an AI agent (e.g. Claude Code or Codex), we store the token’s name and a hashed form of the token.

2. What we do not collect

We do not collect your browsing history, and we do not track your clicks, keystrokes, scrolling, or mouse movements. We do not collect your location or GPS data, passwords, financial or payment information, or health data. Cobo contains no third-party analytics or tracking, and runs no remote code — all of the extension’s code ships inside the package.

3. How we use your information

We use the information above only to provide and operate Cobo: to authenticate you, to show your comments to other members of the same workspace, to attribute comments to their author, to attach comments to the correct page, and to operate features you request (such as copying a comment for an AI agent). We do not use your data for advertising.

4. Browser permissions

identity — to sign you in with Google.
storage — to keep you signed in and remember your language and interface preferences, stored locally in your browser.
tabs — to read the address of your active tab so comments can be scoped to the page and site you are viewing.
clipboardWrite — to copy text you ask to copy (e.g. “Copy for AI”, an invite link, or a workspace id).
host access (websites) — so the extension can display comments on the page you are viewing. The on-page features only activate on sites where the workspace owner has enabled Cobo.

5. How your information is shared

Your comments and the members of a workspace are visible only to members of that same workspace.

We do not sell your personal data, and we do not transfer it to third parties except as needed to run the service. We do not use or transfer your data for purposes unrelated to Cobo, for advertising, or to determine creditworthiness or for lending.

We rely on a small number of service providers (“processors”) that handle data on our behalf, strictly to operate the service: Google (to verify your sign-in token) and our cloud hosting and storage providers (to run the backend and store comment images).

6. Storage, security and retention

Data is stored on Cobo’s backend and transmitted over encrypted connections (HTTPS). Access is restricted to members of the relevant workspace. We keep your content until it is deleted — you can delete individual comments, and workspace owners can remove members or delete a workspace. When you delete content or your account, the associated data is removed.

7. Your rights and choices

You can review and delete your comments at any time from within Cobo, leave a workspace, or ask a workspace owner to remove you. To request access to, export of, or deletion of your personal data, contact us at the address below and we will respond within a reasonable time.

8. Children

Cobo is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

9. International users

Your information may be processed and stored in countries where we or our providers operate. By using Cobo you consent to this transfer.

10. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above and, for material changes, provide notice within the product.

11. Contact

Questions about this policy or your data: smallseven@gmail.com.

Cobo — 隱私權政策

最後更新:2026 年 6 月 4 日

Cobo(以下稱「Cobo」「我們」)是一款瀏覽器擴充功能與服務,讓團隊可以在網頁上留言 —— 就像 Figma 的留言,但適用於任何網站。本政策說明我們收集哪些資料、如何使用,以及你擁有的選擇。

1. 我們收集的資料

我們只收集營運留言服務所需的資料。

帳號資訊。當你使用 Google 登入時,我們會接收並儲存你的 Google 帳號識別碼、電子郵件地址、顯示名稱與大頭貼網址。我們僅以 Google 驗證你的身分;我們不會取得你的 Google 密碼。
你建立的內容。我們會儲存你的留言與回覆、留言所在頁面的網址、留言在該頁面上的位置(錨點)、選用的狀態與版本標籤,以及 —— 若你建立「區域」留言 —— 你所擷取的該頁面選取範圍的截圖。
Workspace 與成員。我們會儲存 workspace 名稱、其對應的網站、成員角色(擁有者/成員),以及你建立的邀請連結。
開發者 / AI 存取權杖。若你產生權杖以連接 AI agent(如 Claude Code 或 Codex),我們會儲存權杖名稱與其雜湊後的形式。

2. 我們不收集的資料

我們不收集你的瀏覽紀錄,也不追蹤你的點擊、按鍵、捲動或滑鼠移動。我們不收集你的位置或 GPS 資料、密碼、財務或付款資訊,或健康資料。Cobo 不含任何第三方分析或追蹤,也不執行遠端程式碼 —— 擴充功能的所有程式碼都包含在套件內。

3. 我們如何使用你的資料

我們僅將上述資料用於提供與營運 Cobo:驗證你的身分、將你的留言顯示給同一 workspace 的其他成員、標示留言的作者、把留言對應到正確的頁面,以及執行你要求的功能(例如把留言複製給 AI agent)。我們不會將你的資料用於廣告。

4. 瀏覽器權限

identity —— 用於以 Google 為你登入。
storage —— 用於讓你保持登入狀態,並記住你的語言與介面偏好,儲存在你本機瀏覽器中。
tabs —— 用於讀取你目前作用中分頁的網址,讓留言能對應到你正在瀏覽的頁面與網站。
clipboardWrite —— 用於複製你要求複製的文字(例如「Copy for AI」、邀請連結或 workspace id)。
網站存取權限 —— 讓擴充功能能在你正在瀏覽的頁面上顯示留言。頁面上的功能只會在 workspace 擁有者已啟用 Cobo 的網站上運作。

5. 我們如何分享你的資料

你的留言與 workspace 中的成員,只有該 workspace 的成員看得到。

我們不會販售你的個人資料,也不會將其轉移給第三方,除非是營運服務所必需。我們不會將你的資料用於與 Cobo 無關的目的、用於廣告,或用於判斷信用等級或貸款。

我們仰賴少數服務供應商(「處理者」)代表我們處理資料,且僅用於營運服務:Google(驗證你的登入權杖),以及我們的雲端代管與儲存供應商(營運後端並儲存留言截圖)。

6. 儲存、安全與保留

資料儲存於 Cobo 的後端,並透過加密連線(HTTPS)傳輸。存取權限僅限於相關 workspace 的成員。我們會保留你的內容直到其被刪除 —— 你可以刪除個別留言,workspace 擁有者可以移除成員或刪除 workspace。當你刪除內容或帳號時,相關資料即會被移除。

7. 你的權利與選擇

你可以隨時在 Cobo 中檢視並刪除你的留言、離開 workspace,或請 workspace 擁有者將你移除。若要要求存取、匯出或刪除你的個人資料,請透過下方地址與我們聯絡,我們會在合理時間內回覆。

8. 兒童

Cobo 並非以 13 歲(或你所在國家的最低年齡)以下的兒童為對象,我們也不會在知情下收集他們的資料。

9. 國際使用者

你的資料可能會在我們或我們的供應商營運的國家被處理與儲存。使用 Cobo 即表示你同意此項傳輸。

10. 本政策的變更

我們可能會不時更新本政策。我們會更新上方的「最後更新」日期;對於重大變更,會在產品內提供通知。

11. 聯絡方式

關於本政策或你的資料的問題:smallseven@gmail.com。