Privacy Policy

1. Who we are

Kashif is a website auditing platform and browser extension provided by Beitbit. Throughout this Privacy Policy, “Kashif”, “we”, “us”, and “our” refer to Beitbit and the Kashif services.

2. Information we collect

We collect information you provide directly, information generated through your use of Kashif, and limited technical data needed to operate the service.

3. Data collected by the Chrome extension

The Kashif Chrome extension is designed to help you create audits for protected pages using your current browser session.

• The extension may read the current active page URL to identify the page you want to audit.
• The extension may collect same-origin links from the current page if you ask it to build a larger protected-page scan.
• The extension may read cookies for the current site so Kashif can reproduce your authenticated session for the requested audit.
• The extension stores limited local configuration such as your Kashif app URL, extension token, and last opened audit link inside the extension context.
• The extension does not sell browsing data and does not use collected data for advertising.

4. How we use your information

• To create, run, manage, and rerun website audits and reports.
• To provide private user workspaces, report history, and PDF exports.
• To authenticate users and secure accounts, sessions, and extension access.
• To access protected pages only when you instruct Kashif to do so.
• To troubleshoot errors, monitor service performance, and improve reliability.
• To respond to support requests, legal requests, and platform security incidents.
• To enforce our Terms & Conditions and protect the rights, property, and safety of Beitbit, our users, and third parties.

5. Legal bases for processing

Where applicable, we process personal data on one or more of the following legal bases:

• Performance of a contract, including operating your account and providing requested audits.
• Legitimate interests, including maintaining security, improving service quality, and preventing misuse.
• Consent, where you explicitly provide protected access data or choose to use the browser extension for authenticated scanning.
• Compliance with legal obligations.

6. Sharing of information

We do not sell your personal data. We may share information only in the following limited cases:

• With service providers that host, secure, or support Kashif infrastructure.
• With third-party services required to generate audit data, such as Google PageSpeed Insights where applicable.
• With legal authorities or regulators where required by law or to protect rights and safety.
• With affiliates or successors in connection with a merger, financing, acquisition, or sale of assets, subject to appropriate confidentiality and legal safeguards.

7. Retention

We retain account information, audit configurations, reports, and related logs for as long as reasonably necessary to provide the service, preserve account history, comply with legal obligations, resolve disputes, and enforce agreements. Protected access data such as cookies or extension tokens may be retained only as long as necessary for the requested audit workflows, account management, or security operations.

8. Security

We use reasonable administrative, technical, and organizational safeguards to protect information against unauthorized access, disclosure, alteration, and destruction. These measures may include access controls, encryption for sensitive stored fields, environment isolation, authenticated access restrictions, and operational logging. No system is completely secure, so we cannot guarantee absolute security.

9. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export certain personal data. You may also have the right to withdraw consent where processing is based on consent.

To exercise any privacy request, contact us at info@beitbit.com. We may request reasonable identity verification before completing the request.

10. International transfers

Kashif infrastructure, support providers, or technical subprocessors may operate in countries other than your own. Where personal data is transferred internationally, we will take reasonable steps to apply appropriate safeguards consistent with applicable law.

11. Children’s privacy

Kashif is not directed to children, and we do not knowingly collect personal data from children in violation of applicable law. If you believe a child has provided us with personal data, contact us so we can review and delete the information where required.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. When we do, we will post the revised version on this page and update the “Last updated” date.

13. Contact us

If you have any privacy questions, requests, or complaints, contact us using the details below: