The tool/extension will generate the formatted text based on the input, which can be used to update the Service Desk case title. Once text is generated it will copy to the clipboard. It will not access or store any PI information or Auth details, credentials or anything else. If you put the case number, it will redirect to the Service Desk portal (https://servicedesk.microsoft.com/) where you can login to access case information. The tool doesn't capture any information. It's just static text generation and redirection feature. This doesn't need any privacy policy as it's just static string formatter tool. And it doesn't read any personal info. I have removed permissions from manifest file as suggested.