FedSafe Retirement Copilot — Privacy Policy

Effective date: June 24, 2026  ·  Last updated: June 24, 2026

FedSafe Retirement Copilot ("the extension") is a Google Chrome extension used by authorized FedSafe Retirement agents inside the Act! CRM web application (*.act.com). It reads the fields of the Act! contact record the agent is currently viewing in order to display contact information, auto-calculate derived federal-retirement values (for example, age from date of birth and years of service), and validate FEGLI codes — all within the Act! page. This policy explains what data the extension accesses, how it is used, and how it is protected.

1. Information the extension accesses

• Act! contact field data shown on the current contact page (e.g., name, contact details, date of birth, and federal-retirement fields) — accessed so the extension can display, validate, and compute values for that record.
• Act! database name / contact identifier from the current page, used to request the correct record and to cache the field layout for that database.
• Field-layout metadata (field names and types) retrieved from the Act! Web API to map the form fields.

The extension operates only on Act! CRM pages. It does not access, read, or inject into any other websites, and it does not track your browsing activity.

2. How information is used

• To render the Copilot panel and show the current contact's information.
• To compute derived fields (such as age and years of service) and write them back into the corresponding Act! fields.
• To validate FEGLI codes against an approved reference list.

Information is used solely to provide this in-CRM functionality for the authorized agent viewing their own organization's records. It is not used for advertising or profiling.

3. Backend service & data transmission

The extension communicates over HTTPS with our backend at https://fedsafe-retirement.vercel.app, which acts as a secure server-side proxy to the Act! Web API. Act! API credentials are held only on the server and are never stored in or exposed to the extension. The backend is used to retrieve contact data, field metadata, and FEGLI reference codes.

4. Local storage

The extension uses Chrome's storage.local to cache a per-database field map (field names and types) so it does not re-scan the page on every load, and to remember user interface preferences and auto-fill rules. It does not store contact personal information, financial details, or Act! passwords in browser storage.

5. Data we do not collect or do

• We do not sell user or contact data.
• We do not use data for personalized, retargeted, or interest-based advertising.
• We do not collect data from sites other than Act! CRM.
• We do not execute remotely-hosted code; all extension logic ships in the package.

6. Service providers

Contact data is processed within the infrastructure that supports the FedSafe Retirement platform — including Act!/Swiftpage (the CRM of record), Vercel (backend hosting), and Supabase (backend data services) — each acting as a processor for the purposes described above. Data is transmitted over encrypted (HTTPS) connections.

7. Data retention

The field-map cache and preferences remain in your browser's local storage until you clear it, use the in-panel "Remap" action, or remove the extension. Contact records themselves live in Act! CRM and are governed by your organization's Act! data policies.

8. Your choices

You can remove the extension at any time from chrome://extensions, which deletes its local storage. Access to contact data is controlled by your Act! CRM login and your organization's permissions.

9. Human access

Personnel access customer data only when necessary for support, security, or legal compliance, or with the customer's consent.

10. Changes to this policy

We may update this policy as the extension evolves. Material changes will be reflected by updating the "Last updated" date above.

11. Contact

Questions about this policy or your data: support@fedsaferetirement.com.