> How does this work? Is data sent from browser to homebase (some cloud server?) and then openAI - so two or more third parties

Yes

> Privacy - no policy?

We do have privacy page: https://aiemploye.com/privacy