Effective October 1, 2026

This policy explains how MultiTEL LLC processes information through the MultiTEL OTP AutoFill browser extension, including its optional password-vault feature. It supplements the MultiTEL Privacy Policy. The separate MultiOTP mobile-app policy applies to the mobile application; this policy applies to the browser extension.


The extension connects an authorized browser to selected SMS-enabled MultiTEL telephone numbers. It offers recent verification codes for user-initiated filling of website fields. An individually authorized browser can use a number for personal use or share access to that number with other authorized devices. The account owner controls number assignments and can revoke browser access.

Separately, you may connect an authorized MultiTEL password vault, unlock it with your vault passphrase, and choose a saved login to fill eligible website username and password fields. OTP access alone does not authorize access to a password vault. Neither feature submits website forms.


Pairing and authentication: the connection code you enter, the browser/device name, platform, issued device credentials, internal account or person identifiers, access grants, and connection/revocation status. Credentials authenticate requests to MultiTEL services.

Number assignments and verification codes: assigned telephone numbers and their descriptions, or limited assignment metadata depending on the connection type; extracted verification codes; message identifiers; receiving-number suffixes; receipt times; and a website domain when included in a supported incoming verification message. The complete SMS message and sender are not delivered to this extension. The underlying messaging service processes and may retain the original SMS separately.

Optional password vault: authorized vault identifiers, names, roles and access status; encrypted identity/key bundles, encrypted login records and wrapped keys; and item identifiers and revisions used for synchronization and authorization. Decrypted login data can include titles, usernames, passwords, website origins and notes. Your passphrase is used locally to unlock the encrypted identity bundle. The extension does not send that passphrase or decrypted vault passwords to MultiTEL.

Website information: the extension examines page fields to identify verification-code fields. For vault filling it reads the active page origin and checks eligible login fields and form destinations. Origin matching occurs locally. The extension does not transmit browsing history or the active website URL/domain to MultiTEL. Vault fill authorization requests identify the vault and saved item, which can reveal which stored item was requested, without sending the active page URL.

Operational information: requests to MultiTEL services expose ordinary network and security metadata, such as IP address, request timing and user agent where supplied by the browser. MultiTEL also processes device status and access records to authenticate, enforce permissions, prevent abuse and support the service.


The extension communicates over encrypted HTTPS with MultiTEL's portal and device-provisioning services to pair devices, obtain authorized code candidates, check assignments and versions, synchronize encrypted vault information, authorize saved-item access and disconnect devices.

When you choose to fill a code or login, that value is placed in the selected website's form fields. The website and its page scripts can then access those fields. The extension does not press Submit for you.

MultiTEL uses information to provide these features, enforce account-owner and vault access decisions, secure the service, investigate failures and meet legal obligations. Information may be disclosed to authorized account/vault administrators, service providers supporting hosting/security/support, and authorities or other parties as described in the general MultiTEL Privacy Policy. Vault contents synchronized by this extension remain encrypted in transit to and from MultiTEL; intended authorized recipients decrypt them locally. MultiTEL does not sell this extension's personal information, use it for third-party targeted advertising, or send browsing-history analytics through the extension.


The extension stores its device credentials, assignment/status information, language preference and synchronization cursor in browser extension local storage. An optional vault connection also stores its device credential, encrypted identity bundle and vault access metadata there. This browser storage is not the mobile operating system's secure credential store.

Decrypted vault records are held in extension memory while unlocked, rather than persisted to extension storage. The current vault session expires after five minutes, and the popup locks it after a successful fill or when you choose Lock. Clearing references is not a guarantee that all copies of plaintext have been erased from system memory.

Verification-code candidates are short-lived, generally approximately five minutes. Underlying SMS, account, access and security records have separate retention under the general MultiTEL Privacy Policy. Disconnecting a browser does not delete underlying SMS or server audit records. Disconnect controls remove the corresponding local connection data; the account owner or vault administrator can revoke server access. Uninstalling removes the extension's browser-managed local storage, subject to the browser's handling of profiles and backups.


Website access allows the extension to recognize verification fields and, for an unlocked authorized vault, fill supported login fields. Storage retains the connection information described above. Tabs and scripting support selection and inspection of the active page and user-requested login filling. The extension does not request contacts, camera, microphone, precise location or payment-card access.

You can decline pairing, leave the optional vault disconnected, lock or disconnect the vault, disconnect OTP access, restrict website access in browser settings where supported, ask an owner/administrator to revoke grants, or uninstall the extension. Restricting permissions may prevent corresponding features from working. Protect your browser profile and device because extension credentials remain in local storage while connected.


Material changes will be reflected in an updated effective date and additional notice where required. For questions or privacy requests, contact MultiTEL LLC, 4103 Oak Tree Cir, Rochester, Michigan 48306, United States; legal@multitel.net; +1 888-686-8581.