This policy applies to the Zektrx web application, its connected services and the Zektrx Compliance Autofill Chrome extension. Zektrx provides construction compliance, operational paperwork and evidence-management tools to business customers and their authorised users.

A customer company normally decides why its workforce and business records are processed. Zektrx operates the platform and processes that information to provide the service.

Account and workspace information may include names, work email addresses, roles, company identifiers, authentication records, subscription details and security events.

Customer content may include company details, compliance evidence, policies, certificates, RAMS, job records, workforce records and other material a customer chooses to store in Zektrx.

Service information may include device and browser details, IP address, timestamps, feature usage, audit events, support messages and diagnostic or security logs.

When an authorised user scans a paperwork page or opens the extension sidebar, the extension identifies visible, supported form controls. It can process the page URL, a portal/provider guess, field labels, nearby question text, placeholders, input types, required flags and available select, checkbox or radio options.

Before the first scan, the extension presents this data-use disclosure in its sidebar and requires the user to choose “I agree — enable page scanning”. Until that consent is recorded, scanning and suggestion controls remain disabled.

That field metadata is sent to app.zektrx.com only when the user requests Zektrx suggestions. The service uses it with the connected company workspace to return proposed answers and supporting evidence. The extension does not send the values already typed into detected form fields.

The extension stores the connected user, company, role and short-lived access and refresh credentials in Chrome session storage. Chrome clears that session data when the browser session ends, or when the extension is reloaded or updated. Disconnecting Zektrx clears it immediately.

Detected fields, suggestions, edits and approvals are held in the extension interface while it is being used. Suggestion responses are marked no-store by the Zektrx service and are not intentionally retained as a separate browsing or form-history record.

The extension excludes login forms, passwords, one-time codes, payment and bank details, and government-identity fields such as passport, driving-licence and National Insurance numbers from detection and autofill.

The extension never clicks Submit, Continue, Finish, Pay, Apply, Send, Confirm or Complete. It does not upload files. Users must review and approve suggested values and remain responsible for checking and submitting the form themselves.

The extension does not sell data, build advertising profiles, track browsing for advertising or use information for credit decisions. Its page access is used only to provide the user-requested compliance-autofill function.

Zektrx uses information to authenticate users, enforce company and role access, operate requested features, retrieve company evidence, generate reviewable suggestions, maintain audit and security controls, provide support, prevent abuse and improve service reliability.

We rely on the customer contract, legitimate interests, legal obligations and, where applicable, consent or another lawful basis selected by the customer. Customers are responsible for giving workers and other data subjects any notices required for their use of Zektrx.

Information is shared only where needed to operate Zektrx, comply with law, protect the service or follow the customer's authorised instructions. Infrastructure, authentication, database, storage, hosting, monitoring, support and other service providers may process limited information on our behalf under appropriate contractual and security controls.

Approved values are inserted into the current third-party form in the user's browser. If the user then submits that form, the receiving portal processes the submitted information under its own privacy policy.

We do not sell personal information or transfer Chrome extension data to third parties for advertising, marketing, data brokerage, creditworthiness or unrelated purposes.

Customer records are kept according to the customer's plan, configured retention controls, operational needs and legal or audit requirements. Temporary extension connection data follows the shorter Chrome-session retention described above.

Zektrx uses access controls, company scoping, encrypted connections, session expiry, input validation, audit controls and service monitoring to protect information. No internet service can guarantee absolute security, so users should report suspected unauthorised access promptly.

Users can disconnect Zektrx from the extension, clear the extension interface, close the browser session or remove the extension. Company administrators control workspace access and should remove users who no longer need it.

Depending on applicable law, individuals may request access, correction, restriction, objection, portability or deletion. Some records may need to be retained for legal, contractual, safety, payroll, insurance, fraud-prevention or audit reasons.

Zektrx uses Chrome extension data only to provide and improve the extension's single, user-facing compliance-autofill purpose. Our handling of extension data follows the Chrome Web Store User Data Policy, including its Limited Use requirements where applicable.

We may update this policy when the service, legal requirements or data practices change. Material changes will be reflected by a new effective date and, where appropriate, an in-product notice.

For privacy questions, data-rights requests or security concerns, contact support@zektrx.com or help@muirdigital.com.