OctoFlowOctoFlow
HomeAboutContactAdd to Chrome →
HomeAboutContactAdd to Chrome →
OverviewQuick FactsPermissions Requested and WhySite AccessData HandlingWhat OctoFlow Does Not DoFor IT Administrators
◂OCTOFLOW/SECURITY

Security Overview

LAST UPDATEDJuly 21, 2026
APPLIES TOOctoFlow v1.5.7 and later
CONTACTsupport@octoflowus.com
Download the one page PDF for your IT team
§01

Overview

OctoFlow is a Chrome side panel productivity extension for individual salespeople. It helps a user track their own professional relationships, log their own outreach activity, and manage a personal to do list. It is a personal productivity tool. It does not integrate with, modify, or extract data from company systems. This page exists so IT and security teams can review OctoFlow quickly when an employee requests it on a managed browser.

§02

Quick Facts

Everything on this page can be verified against the Chrome Web Store listing and our privacy policy.

Extension nameOctoFlow, Sales Productivity
Extension IDaaobogaacakidgajkkfkkafjoeelakdc
PlatformChrome Manifest V3, Chrome's current extension security standard. Minimum Chrome 114.
DeveloperOctoFlow, octoflowus.com
Supportsupport@octoflowus.com, responses within one business day
§03

Permissions Requested and Why

OctoFlow requests four narrow Chrome permissions:

storageSaves the user's own notes, contacts, and settings in Chrome's local extension storage
alarmsPowers daily reminders and the focus timer completion notice
notificationsShows productivity reminders as desktop notifications
sidePanelRenders the app inside Chrome's built in side panel
§04

Site Access

OctoFlow requests no access to any corporate website or system and injects no scripts into any web page. Its only network access is to its own backend:

Google Firebase endpointsfirebaseapp.com, firestore.googleapis.com, identitytoolkit.googleapis.com, securetoken.googleapis.com: account sign in and optional cloud sync of the user's own data
hooks.slack.comOptional Slack notifications the user configures themselves. Inactive unless the user sets it up.
§05

Data Handling

The user's data (their contacts, notes, activity history, tasks) is stored locally in Chrome and optionally synced to Google Firebase under the user's own account. Sign in uses an email and PIN flow through Google Identity Platform. Data is encrypted in transit (TLS 1.2+) and at rest on Google Cloud. No data is sold or shared with third parties. Users can delete their account and all associated data from the extension's Settings at any time. Full details, including every data category we process and our sub processor list, live in our privacy policy.

§06

What OctoFlow Does Not Do

No collection of browsing history. No keystroke logging. No reading or scraping of corporate systems, email, or CRM data. No content scripts on any website. No remote code execution: all code ships inside the Chrome Web Store reviewed package. No advertising or tracking SDKs.

§07

For IT Administrators

To allow OctoFlow on a managed browser: Google Admin console, then Chrome browser, then Apps and extensions, then add the extension ID aaobogaacakidgajkkfkkafjoeelakdc and set it to Allow install (or approve the employee's pending request). This follows standard Chrome Enterprise extension management. If your review process needs anything else, write to support@octoflowus.com and we will respond within one business day.

OctoFlowOctoFlow

A Chrome extension that keeps you connected to the people that matter. Log a touch in one click. Stay top of mind. Keep your network healthy.

Product

  • Home
  • Install

Company

  • About
  • Contact
  • Terms of service
  • Privacy policy
  • Security

Elsewhere

  • LinkedIn
© 2026 OCTOFLOW · ALL RIGHTS RESERVEDBETA · MONITORING