Your screenshots stay private.

Stored privately.

Screenshots are kept in private storage and never given public links.

Shown only to your team.

They are shown to signed-in people in the team who can see the project, and to agents connected to that team, after checking the team and the project.

Only what you marked.

The extension sends crops around your marks, not your whole screen. A page note sent on its own captures the visible part of the page.

Deleted with the feedback.

Deleting feedback, or its project, deletes its screenshots too.

Checked on every request.

Before it shows or changes any feedback, CircleIt checks which team the person is in and whether they can see the project.

Project access.

A project can be open to the whole team or only to the people you choose. Someone who can’t see a project can’t see its feedback or send to it.

An approval step.

Set a person or a site to Needs approval, and nothing they send reaches a developer until the owner or an approver approves it.

Passwords are hashed.

We store a one-way hash, never the password.

Google sign-in.

Sign in with your Google account instead of a password. We never see your Google password.

Passkeys and two-factor.

Add a passkey, or turn on two-factor authentication with an authenticator app, in Settings.

One key each.

Each browser and each computer you connect gets its own access token, stored as a hash.

You approve every connection.

Connecting Claude Code or Codex opens a page in your browser where you approve it.

Disconnect any of them.

Revoke a browser or an agent on the Setup page, and it stops working straight away.

Nothing until you open it.

It runs on a page only when you click it or press its shortcut, and captures only when you press Send.

Form fields are never read.

Typed values are left out of the text and stripped from the HTML. Password fields are never read.

No browsing data.

It doesn’t collect cookies or your browsing history, and it only talks to CircleIt.

What it receives.

The brief, its screenshots and your comments. Nothing else from your account.

Your code isn’t uploaded.

The plugin sends the session’s details and the replies your agent writes.

Comments are design requests.

The agent is told not to run commands a comment asks for, and never to put secrets or file contents in its replies.

Your agent’s provider.

Once your agent opens feedback, it is part of its conversation, processed by its provider (Anthropic for Claude Code, OpenAI for Codex) under your own agreement with them.