Legal

Privacy Policy — Dimmi Form Filler Browser Extension

Last updated: 9 June 2026

1. What the Extension does

The Extension lets authenticated Dimmi users:

• Sign in to their Dimmi account
• Select an immigration case from their Dimmi workspace
• Fill third-party web forms (for example, Danish government application portals) with case data you choose to apply

The Extension runs only when you interact with it (for example, by clicking "Log in" or "Fill form on this page"). It does not continuously monitor your browsing activity.

2. Information we collect

2.1 Information you provide through Dimmi

When you sign in and use the Extension, we process information already stored in your Dimmi account, including:

Account information

• Email address
• User ID
• Role (for example, case manager, applicant, or client)
• Organisation name and organisation ID

Case and application information (retrieved from the Dimmi API when you select a case or fill a form)

• Applicant identity details (for example, name, date of birth, nationality, passport details)
• Employment and education history
• Contact and address information
• Immigration scheme and application metadata
• Document metadata (file names, types, and download references)

Document contents

• When a form requires file uploads, the Extension may download case documents from Dimmi's secure storage and attach them to form fields on the page you are filling.

2.2 Information collected locally in your browser

The Extension stores the following in your browser's extension storage (chrome.storage.local and short-lived session storage):

• Your Dimmi access token (JWT) used to authenticate API requests
• A cached copy of your user profile
• Your most recently selected case ID
• Temporary session data during login (for example, which tab opened the login flow)

Authentication may also use httpOnly refresh cookies shared with app.dimmi.dk when you are already signed in there.

2.3 Information read from web pages (only when you trigger a fill)

When you click Fill form on this page, the Extension may read information from the active browser tab, including:

• Form field identifiers, labels, placeholders, and structure
• Dropdown option text shown on the page
• Page DOM structure needed to locate and complete form fields

2.4 Information we do not collect

The Extension does not:

• Collect your general browsing history
• Run on pages unless you explicitly trigger an action
• Collect passwords (sign-in is handled by the Dimmi web application and WorkOS)
• Include third-party advertising or analytics trackers
• Sell your personal information

3. How we use your information

We use the information described above to:

• Authenticate you and maintain your Dimmi session in the Extension
• Retrieve your cases and case data from the Dimmi platform
• Fill form fields on third-party websites at your explicit request
• Upload case documents to form fields where required
• Remember your last selected case for convenience
• Operate, maintain, and improve the Extension and related Dimmi services
• Comply with legal and regulatory obligations

We process this data to perform our contract with you and your organisation (GDPR Article 6(1)(b)) and, where case data may include special-category data (for example, immigration or identity information), on the basis that processing is necessary for legal claims or substantial public interest in the context of immigration case management (GDPR Article 9(2)(f)), as applicable.

4. How we store your information

We take reasonable technical and organisational measures to protect information, including encrypted connections (HTTPS), scoped extension permissions, and storage of authentication tokens in extension-only storage (not ordinary website storage).

5. How we share your information

We do not sell your personal information. We share information only as described below.

5.1 Dimmi (data controller)

Dimmi operates the Extension and the api.dimmi.dk / app.dimmi.dk services. Data you access through the Extension is processed on Dimmi's systems in the EU (Germany/Finland via Hetzner Online GmbH).

5.2 Service providers (processors)

We use the following categories of third-party service providers who process data on our behalf:

5.3 Third-party form websites

When you click Fill form on this page, case data and documents are written into form fields on the website open in your active tab (for example, a government immigration portal). That third-party site's own privacy policy governs any data you submit through its forms. Dimmi does not control how those sites collect, store, or share information once you enter or submit it on their pages. Only use the Extension on forms you trust.

5.4 Other disclosures

We may also disclose information:

• With your consent or at your direction
• To affiliates or in connection with a merger, acquisition, or sale of assets
• In response to lawful legal process or to protect rights, safety, and security

6. Chrome Web Store User Data Policy — Limited Use

Dimmi Form Filler's use of information received from Google Chrome APIs and user data accessed through the Extension will comply with the Chrome Web Store User Data Policy, including the Limited Use requirements.

• We use personal and sensitive user data only to provide or improve the Extension's user-facing features (sign-in, case selection, and form filling at your explicit request).
• We do not use this data for personalized or interest-based advertising.
• We do not sell user data.
• We transfer user data only to: (a) Dimmi's own services (api.dimmi.dk, app.dimmi.dk); (b) service providers necessary to operate the Extension (WorkOS for authentication; Hetzner for document storage); (c) third-party form websites when you explicitly trigger form filling; or (d) as required by law or for security purposes.
• Human access to user data is limited to what is necessary for support, security, or legal compliance.

7. Your rights and choices

Under the GDPR and applicable data-protection law, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (subject to legal retention requirements)
• Restrict or object to certain processing
• Data portability where applicable
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local supervisory authority (in Denmark: Datatilsynet)

Extension-specific controls:

• Log out via the Extension popup to clear locally stored tokens and profile data
• Uninstall the Extension to remove all locally stored Extension data
• Exercise broader data rights for case data stored on Dimmi's platform by contacting us (see Section 11)

8. International transfers

Some service providers (WorkOS) are located outside the European Economic Area, primarily in the United States. Where personal data is transferred internationally, we rely on appropriate safeguards, including EU Standard Contractual Clauses and data-processing agreements with each provider.

9. Children's privacy

The Extension is intended for professional use by Dimmi account holders and is not directed at children under 16. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy at this URL and update the "Last updated" date. Material changes may also be communicated through the Extension or Dimmi platform.

11. Contact us

For questions about this Privacy Policy or to exercise your data-protection rights:

Dimmi
Copenhagen, Denmark
Email: privacy@dimmi.dk