Browser extension
Privacy policy of the Milo extension
Updated on 2026-10-07
This policy covers the Chrome extension "Milo", formerly "Basely Agent" and "Basely for Facebook". It states plainly what the extension reads, what it sends to Basely, which AI provider processes it, what it never touches, when it acts, what it stores and for how long, who we share it with and how to delete everything.
The permissions it asks for, and why
"storage": keeps in the browser only your account's pairing code and the state of the task in progress. "scripting": enters the tab you asked about, to read its elements and visible text, type, click and attach a file from your Basely account; it has no script running in the background. "tabs": opens and navigates the tab the agent works in. "activeTab": takes a screenshot of the current tab when the model needs to see the screen; the screenshot goes to the model and is not stored. "debugger": clicks and types like a person, with events the sites accept; while the agent works, Chrome shows the bar "Milo is debugging this browser", which goes away when it finishes, pauses or stops; nothing is read from the site beyond what the page shows. "alarms": wakes the extension when it is time to continue a task or open the next group, and checks every 30 seconds, only while a task is running, that it did not stall in the middle of a step. "sidePanel": shows the side panel with the conversation, the steps, the approvals and the documents. Access to all sites ("<all_urls>"): the agent acts on whatever site you ask for, in the tab you are on, and only while a task of yours is running. app.baselyapp.com is where it sends and receives the work. Only app.baselyapp.com and the Milo app, milo.baselyapp.com, can talk to the extension (to send a task or to pause, resume, stop or approve); no other site can. The groups flow keeps posting on facebook.com, as before. "tabGroups": keeps the tabs the agent opens in a group called Basely, apart from yours, and undoes the group when the task ends. When you ask it to organize your browser, it reads the title and address of your tabs (never their content), groups them by subject, and only closes a tab with your OK.
What it reads
When you ask for a task, it reads the tab you are on: the interactive elements (buttons, links, fields, with their labels), the visible text and, when the model asks, a screenshot. When you click Import my groups, it reads the addresses and names of the Facebook groups you belong to. The only identity value it reads is your public Facebook user number, to notice that you signed in with another account and stop the groups queue before it posts in the wrong place; that number never leaves your browser.
What it sends to Basely
Your message, the content of the tab described above (elements, visible text and, when requested, a screenshot), the result of each action (done, failed, why), the lists and documents it builds for you, the notes it keeps in your memory, the list of groups (name, address, member count), the outcome of each group post, the extension version and your computer's time zone. No identifier of your Facebook account is sent. All over HTTPS, authenticated by your account's pairing code.
What it never touches
Passwords, verification codes, captchas and card or payment data: it refuses to type them, in every mode, and hands the screen back to you. Your Facebook session cookie, private messages, your browsing history and any tab other than the one you asked it to work in. Text found on a page is treated as data, never as an instruction to the agent.
When it acts
It acts after you ask, in the side panel, in the Milo app (milo.baselyapp.com) or in your Basely account, and shows every step while it happens. You choose how it asks: automatic (it acts within your request and asks only when it does not recognize the screen), approve what matters (it reads and drafts on its own, and anything that posts, sends, pays or changes waits for your ok) or no approvals. In every mode, clicking on the page stops it, and it never fills in a password, a verification code or a captcha. In the groups flow it opens each group you confirmed in the batch review, writes the text, attaches the image, clicks Post and checks in "Your content" that the post went out. The pace and the daily cap live in your Basely account, not in the extension.
What it stores in the browser
Your account's pairing code, the state of the task in progress (which conversation, which step, which action is pending) and a fingerprint of the Facebook account you used when importing groups, so the extension can warn you if you sign in with another one. All of it stays in the extension's storage and never leaves your browser. Screenshots, page content and documents are not kept in the browser.
How long Basely keeps it
Conversations, tasks, steps, approvals, documents, memory notes and learned recipes stay in your Basely account for as long as it exists or until you delete them, which you can do at any time under Milo in the Hub. Screenshots are never stored: only a marker saying one was sent. Registered groups and the posting history follow the same rule. When you revoke the pairing, the extension stops right away and nothing new is sent. When you delete the account, all of it is deleted with it.
Who we share it with
To decide each step, Basely sends your message and the content of the tab (elements, text and, when requested, the screenshot) to the AI model provider Basely uses, Moonshot AI (the Kimi model), under our agreement with them and solely to process your request. Nothing else is shared with anyone. We do not sell, rent or hand your data to third parties, and we do not use it for advertising.
Security
Communication with Basely is encrypted (HTTPS). The extension carries no Basely credential and no AI provider key: the pairing code only identifies your account, the model is called by Basely's servers, and you can revoke the pairing at any time in the Hub, under Milo, Browsers.
Your rights
You can view, correct, export and delete your account data in Basely at any time from the panel, and you can also request it by e-mail. We honor requests under the LGPD, the GDPR and the CCPA.
Changes to this policy
When the extension asks for a new permission or starts reading or sending something different, this page changes before the new version reaches the store, with the date at the top updated. This version reflects Milo 0.8.1.
Deleting your data
Uninstall the extension and revoke the pairing in the Hub. To delete conversations, documents, memory notes or registered groups, use the remove buttons in Milo and in Groups, or write to privacy@baselyapp.com.
Talk to us
Questions about this policy or about your data: privacy@baselyapp.com