xop.ai — Autotask Sidebar: Privacy Policy
Last updated: June 14, 2026
Overview
The xop.ai — Autotask Sidebar (“the extension”) embeds your organization’s xop.ai assistant as a sidebar panel inside Autotask ticket pages. The extension runs only on *.autotask.net pages and is configured by your MSP with a company-specific xop.ai URL. This policy explains what the extension accesses, what it stores, and where data goes.
What the extension accesses
- Current ticket identifier. The extension reads the ticket number/ID visible on the Autotask page so the sidebar can load context for the ticket you are viewing.
- Signed-in Autotask user. The extension reads the name and Autotask resource ID of the engineer signed into Autotask so notes and time entries created through xop.ai are attributed to the correct person.
- Your configuration and preferences. The App URL you enter and UI preferences (sidebar width, visibility) are saved locally on your device.
The extension does not read unrelated pages, browsing history, passwords, or content outside Autotask, and it contains no advertising or cross-site tracking.
How data is used and shared
The ticket identifier and signed-in user are passed to the xop.ai sidebar at the URL your MSP configured (loaded in an iframe). They are used solely to render the assistant for the current ticket and to attribute actions you take. Data is sent only to your organization’s configured xop.ai instance. We do not sell or rent personal data, and we do not use it for advertising.
Any call recording, transcription, or AI features you use within the sidebar are processed by the xop.ai platform under your organization’s agreement with xop.ai. The extension itself does not record audio; recording, when used, is initiated inside the xop.ai application.
What is stored on your device
The extension uses Chrome local storage (chrome.storage.local) to keep your configured App URL and UI preferences. These never leave your browser except as the App URL the sidebar loads. Removing the extension clears this storage.
Permissions, and why
- Host access to
*.autotask.net— to run the sidebar and detect the ticket and signed-in user on Autotask pages. - activeTab / scripting — to read the ticket and signed-in user from the active Autotask tab.
- storage — to save your App URL and preferences locally.
Contact
Questions about this policy or your data? Email support@xop.ai.