Kavach Privacy Policy

Kavach browser extension · Effective 16 October 2026

In short: Kavach checks the text you paste or send on ChatGPT, Claude and Gemini on your own device. It does not collect, store, sell or transmit your messages or any personal data. It makes no network requests at all.

What Kavach does

Kavach is a browser extension that warns you before you send Indian personal details, such as Aadhaar, PAN, UPI ID, IFSC, bank account, mobile number, GSTIN or email address, to an AI chatbot, and can replace them with placeholders like [PAN_1] before the message leaves your browser.

How your text is handled

When you paste into or send from the message box on chatgpt.com, claude.ai or gemini.google.com, Kavach reads that text and checks it for personal details using rules that run inside your browser.
The text is processed in memory only. It is never saved, logged, or sent to Kavach, the developer, or anyone else.
If you choose Mask, the details are replaced with placeholders in the message box. The link between a placeholder and the original value is kept in that browser tab's memory only and disappears when you close or reload the tab.
Kavach does not run on any other website and does not read pages, browsing history or chatbot replies.

What is stored on your device

Kavach stores only the following, in your browser's local extension storage:

Item	Example	Purpose
On/off setting for each supported site	ChatGPT: on	Remembers where you want protection
Count of items caught, by type	PAN: 3	Shown to you in the extension's popup

These are numbers and on/off flags only. No text, values, website addresses or identifiers are stored. This data stays on your device and is not synced. You can clear the counts with Reset counts in the popup, and removing the extension deletes everything.

What Kavach does not do

No network requests, analytics, tracking, cookies or advertising.
No collection, sale or sharing of personal data with anyone.
No remote code: all of Kavach's code is included in the extension package.
No account or sign-in.

Permissions

Access to chatgpt.com, claude.ai and gemini.google.com: needed to check the text in those sites' message boxes before it is sent. Kavach has no access to other sites.
Storage: to save the on/off settings and counts described above, on your device.

Limitations

Kavach reduces the risk of sharing personal details, but it cannot guarantee that every detail is caught. Please check your messages before sending. Kavach is not legal advice and does not by itself make you or your organisation compliant with any law.

Open source

Kavach's source code is public, so anyone can verify these statements: github.com/harshita1615/kavach-pii (MIT licence).

Changes to this policy

If this policy changes, the updated version will be published at this address with a new effective date. The history of changes is visible in the public repository.

Contact

Questions: open an issue at github.com/harshita1615/kavach-pii/issues or email work.harshitachaudhary@gmail.com. Please never include real personal data in an issue.