🛡️ PromptKavach — Privacy Policy

Effective date: June 2026  ·  Last updated: June 2026

1. Who we are

PromptKavach is a browser extension developed by AIKavach. It detects and redacts personally identifiable information (PII) from text before it is sent to AI chat interfaces such as Claude, ChatGPT, Gemini, and others.

2. What data we process — and where

When you type a message into a supported AI chat interface, PromptKavach scans the text for sensitive information including:

• Email addresses
• Indian phone numbers (with or without +91 prefix)
• Aadhaar numbers
• PAN numbers
• Passport numbers
• Credit and debit card numbers (Visa, Mastercard, Amex, RuPay, JCB)
• Bank account numbers and IFSC codes
• API keys, AWS access keys, JWT tokens, and inline passwords
• Public IP addresses
• Dates of birth (when labelled)
• Custom keywords you define in the extension settings

All of this processing happens entirely within your browser, on your device. The text you type is never sent to any PromptKavach server, API, or third party for analysis. The detection engine runs as local JavaScript code with no network calls.

3. What we store

PromptKavach stores the following data locally on your device using Chrome's built-in storage APIs:

• Extension settings (chrome.storage.sync): whether the extension is enabled, whether auto-redact is on, and your custom keyword list. These are synced across your Chrome devices via your Google account — PromptKavach does not handle this sync directly.
• Session log (chrome.storage.local): a log of redaction events including timestamp, website hostname, count of items redacted, types of PII found, and a short snippet of the original text (first 60 characters). This log stays on your device and is capped at 200 entries. It is never transmitted anywhere.

We do not store the full text of any message you type. We do not store the actual values of any PII found. We do not store your redacted output.

4. What we do not do

• We do not send your text to any external server for processing.
• We do not collect analytics, telemetry, or usage statistics.
• We do not use cookies.
• We do not share any data with third parties.
• We do not display advertisements.
• We do not have access to your Google account or Chrome sync data.
• We do not track which AI sites you visit or how often.

5. Permissions we request and why

• storage — to save your extension settings (on/off, auto-redact, custom keywords) and the local session log.
• activeTab — to detect the input field on the currently active AI chat page and intercept text before submission.
• scripting — to inject the detection script into supported AI chat pages.
• Host permissions (claude.ai, chat.openai.com, gemini.google.com, etc.) — to run the content script only on the AI chat sites PromptKavach supports. We do not request broad host permissions like <all_urls>.

6. Children's privacy

PromptKavach is not directed at children under 13. We do not knowingly collect any information from children.

7. Changes to this policy

If we make material changes to this privacy policy, we will update the effective date at the top of this page and, where appropriate, notify users via the Chrome Web Store listing. Continued use of the extension after changes constitutes acceptance of the updated policy.

8. Contact

If you have questions about this privacy policy or how PromptKavach handles data, please open an issue on our GitHub repository.