Is Definio AI: Multi-Modal AI Sidebar safe?
Definio AI can send selected page text, screenshots, and account identifiers to Definio and analytics endpoints.
When you use its sidebar chat, the extension can include selected text from the page along with the page URL and title in requests to ai.definio.org. If you trigger screenshot capture, it uploads active-tab images to ai.definio.org; authenticated users are also identified to api.analytics.dterm.ai with account and install identifiers plus browser/device context.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Definio account identifiers are sent to an analytics endpoint.
Using the Definio AI side panel while signed in checks your session and sends account identifiers to api.analytics.dterm.ai: product ID, a stored install ID, your Definio user ID, email, and browser/device context.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user interacts with the Definio AI side panel while signed in.
The extension checks the account session and sends identifiers to the separate analytics endpoint.
- Stored install dataza_install_id: d7f3a1b2-... (illustrative)
The extension sends an install identifier from local extension storage, which can link analytics events to the same browser installation.
The DB verification also records that the identify request includes the product ID, Definio user ID, email address, and browser or device context when a signed-in session is present.
Where it sends data
Destinations our analysis observed Definio AI: Multi-Modal AI Sidebar contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- ai.definio.org
Definio AI: Multi-Modal AI Sidebar sends data to ai.definio.org. No other extension we have analysed sends data here.
- api.analytics.dterm.ai
Definio AI: Multi-Modal AI Sidebar sends data to api.analytics.dterm.ai. No other extension we have analysed sends data here.