Orchestrator Toolkit Privacy Policy
Developer: VNCNT Labs · Effective date: October 29, 2026 · Version covered: 1.0 (free) · Contact: [email protected]
This policy covers the browser extension VNCNT Orchestrator Toolkit: Queues, Exports & Job Alerts for Microsoft Edge. It is a free tool for working with UiPath Orchestrator through Orchestrator's documented API, using access you set up yourself. VNCNT Labs has no server for this extension and never receives your token, your Orchestrator data or anything you do with the extension. The extension is not affiliated with or endorsed by UiPath.
1. What you give it
To connect, you enter your Orchestrator address and either a personal access token or an external application client ID and secret that you created in your own Orchestrator or Automation Cloud account. You choose the scopes; your Orchestrator role still limits what the extension can see and do.
2. Where your token goes
- It is stored only in the extension's local storage in this browser profile (
chrome.storage.local). It is not synced to other devices. - It is sent only to the Orchestrator address you entered (and that address's own identity endpoint, if you use an external application), over HTTPS unless you deliberately enter a plain http address, in which case the extension warns you first.
- The extension refuses to attach your token to any other address. It does not use your signed-in Orchestrator browser session or its cookies.
3. What it reads and does
When you open a tab in the toolkit, export, or run a bulk action, it calls Orchestrator's API to read folders, queues, queue items, jobs, logs and time triggers, or to retry or delete the queue items you confirmed. Results are shown on the toolkit page and are held in memory while it is open. Bulk actions only run after a dry-run count and a confirmation you type.
If you turn on Job Watch, the extension checks the folders you picked for faulted, stopped, long-running or long-pending jobs at the interval you set, and shows desktop notifications. It keeps a short list of open alerts (job name, state, folder, time, error message) locally so the toolbar badge and popup can show them; acknowledged and old alerts are removed.
4. What is stored, and where
- Connections (name, address, folder, sign-in type, token or client secret), settings, column choices, saved views and open alerts, in the extension's local storage on this computer.
- Exports (CSV, JSON) are created on your computer and saved where your browser saves downloads. They contain whatever Orchestrator data you chose to export; please handle them according to your organisation's rules.
"Remove" on a connection deletes it and its token. Uninstalling the extension removes everything it stored.
5. Site access
The extension can reach UiPath's Automation Cloud addresses (cloud.uipath.com, staging.uipath.com, alpha.uipath.com and govcloud.uipath.us) to call the API. For an on-premises Orchestrator, your browser asks you to allow that one address when you add it; you can withdraw that access in the browser's extension settings. The extension does not read or change the Orchestrator web pages themselves. The popup checks the address of the current tab only on the UiPath addresses above, to offer adding that tenant.
6. What we don't do
- No analytics, tracking, advertising, account or licence checks.
- No selling or sharing of data. We don't collect it in the first place.
- No remote code: every script is in the extension package.
7. Children
The Orchestrator Toolkit is a tool for automation professionals and is not directed at children under 13.
8. Trademarks
UiPath and Orchestrator are trademarks of UiPath Inc., used here only to describe compatibility.
9. Changes and contact
If this policy changes, we will update this page and its effective date before the change takes effect in the extension. Questions: [email protected].