Privacy
The SimbaFlow Form Filler is a browser extension for agency staff. It types a candidate’s details — the ones the agency already holds — into the insurance and visa portals and the LMIS contract form, so nobody copies sixteen boxes by hand for each person.
What it sees
The page you are on when you click its button, and a site you switch on yourself for pasting. Nothing else.
What it sends
Nothing to anyone but your own SimbaFlow. No analytics, no third parties, nothing sold.
What it stores
One setting, if you change it, and the sites you switched on. No candidate data, no password, no history.
What it can see
The page you are on, only when you ask. The extension has no standing access to any portal. When you click its toolbar button, the browser grants it access to that one tab, for that one action. It does not watch other tabs.
A paste, on a site you switch on. To fill a form by pasting a candidate copied in SimbaFlow, you turn on Fill when I paste here in the extension on that form, and your browser asks you to allow that one site. From then on the extension listens on that site for a paste. It looks only at what you paste: anything that is not a candidate copied from SimbaFlow is left exactly as it was, and it reads nothing else on the page except the labels that tell it whether this is the right form. Turning the switch off, or removing the site in your browser’s extension settings, takes the access away.
Your SimbaFlow account. It reads from this site using the session you are already signed in with, so it cannot see anything you could not see yourself.
It also runs one small script on SimbaFlow’s own pages, which does a single thing: it marks the page so the settings screen knows the extension is installed and stops offering you the download. It reads nothing.
What it sends, and to whom
Nothing goes anywhere except SimbaFlow. The extension talks to your own agency’s SimbaFlow server and to no other service. There is no analytics, no tracking, no error reporting to a third party, and nothing is sold or shared.
Candidate details travel from SimbaFlow to the form in front of you and stop there. They are not sent to us, stored by the extension, or kept once the tab is closed. Copy to insurance and Copy to LMIS contract put one candidate’s details on your computer’s clipboard, as the copy command does with anything; a copy stops working after twenty minutes, so an old one cannot fill a form with the wrong person.
Bringing your existing list across
The extension can carry the candidate list an agency already holds on another system into SimbaFlow. You open your own list there, narrow it with that system’s own filters or tick the rows you want, and the extension writes what you chose to a file in your Downloads: a spreadsheet, and the photographs beside it.
It reads your own records from your own account, using the session that system has already given your browser. That session is used where it sits and goes nowhere. It is not stored by the extension, not written into the file, and never sent to SimbaFlow or to us. Nothing on the other system is changed, added or deleted — the export only reads.
The photographs sit in a storage service of that system’s own, and a web page there is allowed to show them but not to read them. The extension reads them instead, which is why your browser asks you to allow that one storage address the first time you export with photographs. What is handed over is the temporary link to a single picture — never your sign-in to the system it came from.
The file is yours. Nothing reaches SimbaFlow until you upload it yourself.
What it stores
Two things. The address of the SimbaFlow server to use, only if you change it, which exists so the extension can be pointed at a test installation; and the sites you turned on for pasting, which your browser keeps as the permission you granted. No candidate data, no credentials, no record of what was filled. It holds no password or key of its own — it uses the session your browser already has.
What it will not do
- It never submits a form. It fills boxes; you read them and press the button yourself.
- It never ticks a checkbox or chooses a radio button. Declarations on a government application are yours to make.
- It will not type into a dropdown that is not a standard one, because that leaves a box which reads correctly and has selected nothing. It names those for you instead.
The permissions it asks for
- activeTab
- To fill the form in the tab you are looking at, at the moment you click the button.
- scripting
- To put the values into that page's boxes.
- storage
- To remember the server address described above.
- Optional: a site you allow
- Asked for only when you turn on filling by paste for a form, and only for that form's site. Lets it notice a paste there.
- Access to this site
- To ask SimbaFlow what a form wants and which candidate you chose.
Children
This is a tool for agency staff at work. It is not directed at children and collects nothing from them.
Changes, and getting in touch
If what the extension does changes, this page changes with it and the date at the top moves. Questions, or anything that looks wrong here: support@laba.et.