AiT.KO is a browser extension that lets Okta administrators describe what they want to look up in the Okta Admin API (for example users, groups, applications, or system log events) in plain language. It turns the request into a read-only API request, runs it against the administrator's own Okta organization, and lets them export the results to CSV or JSON. This policy explains what data the extension handles and where it goes.
In short: the developer does not operate any server, does not collect any data, and does not receive any data from the extension. The only data that leaves your browser, other than requests to your own Okta organization, is the text of your request and your API key, which are sent to the AI provider that you choose and configure.
AiT.KO is developed by Cândido Pereira. Contact: cpereirarui@gmail.com.
AiT.KO is an independent project. It is not affiliated with, endorsed by, or sponsored by Okta, Inc., Google LLC, or Anthropic PBC. Those names are used only to describe what the extension works with.
| Data | Purpose | Where it goes | Stored? |
|---|---|---|---|
| Okta data (for example users, groups, applications, or log events) returned by your Okta organization | Shown in the results table and exported to CSV or JSON when you click Export | Stays in your browser. Requests go only to your own Okta organization, using your already-open admin session. It is not sent to the developer or to any AI provider. | Held in memory until you close or reload the page. Not saved by the extension. A CSV or JSON file is created on your device only when you export. |
| The text you type in the request box | Converted into a read-only Okta API request | Sent, together with fixed instructions and today's date, to the AI provider you selected (Google Gemini API or Anthropic Claude API) | Not stored by the extension. The provider's own retention rules apply (see section 4). |
| Your AI provider API key | Authenticating your requests to the provider | Sent only to the provider you selected, as an authentication header | Stored locally in your browser (chrome.storage.local) until you change or delete it |
| Your settings (provider and model name) | Remembering your configuration | Stays in your browser | Stored locally in your browser |
The extension's use of information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.
When you click "Generate request", the text you typed is sent directly from your browser to the provider you selected in the extension options:
We do not control how these providers handle data. Do not include personal data (such as a specific person's name or email address) in your requests unless you are comfortable with it being processed by the selected provider. Generic requests such as "active users in the Finance department with country code PT" contain no personal data.
*.okta.com and *.oktapreview.com: to display the AiT.KO panel on the Okta Admin Console and to call your own Okta organization's read-only Admin API with your existing session. The panel activates only on hostnames that contain -admin.; on all other Okta pages it does nothing.generativelanguage.googleapis.com: to send your request text to the Google Gemini API, if you select that provider.api.anthropic.com: to send your request text to the Anthropic API, if you select that provider.The extension keeps no data other than your API key, provider, and model name, all stored locally. You can delete them at any time by clearing the fields on the options page, or by removing the extension, which deletes all of its local data. Data held by an AI provider is governed by that provider's policies.
AiT.KO is a tool for IT administrators and is not directed at children.
If the extension's data practices change, this page will be updated and the "Last updated" date above will change. Material changes will be reflected in the extension's Chrome Web Store listing.
Questions about this policy: cpereirarui@gmail.com.