Redact Agent · Effective 2 October 2026

Privacy Policy

Redact Agent is a Chrome extension that detects and redacts personally identifiable information on web pages. This page explains what the extension sees, where it goes, and how long it stays.

01Who we are

Redact Agent is built and maintained by Redact Rosters as part of Smart India Hackathon problem statement SIH26171. For questions about this policy or your data, contact iamiq07@gmail.com.

02What the extension accesses

Redact Agent only acts on the page you explicitly run it on, after you click Run in the side panel. It never reads tabs or pages in the background.

Page content

Text and DOM of the active tab, so PII patterns (emails, phone numbers, names, IDs) can be detected and visually redacted in place.

Page metadata

URL and title of the active tab, used to let the agent report which page a task was run on.

Your task input

The natural-language instruction you type into the side panel ("redact all PII on this page", "scan & report").

Local settings

Enabled redaction categories, allowlisted domains, selected mode, and recent task history. Stored with chrome.storage on your device.

03What we do not collect

Passwords, PINs, or any value typed into a password field
Payment or financial details
Health information
Geolocation, GPS, or precise location
Keystrokes, mouse movements, scroll positions, or any form of behavioural telemetry
Analytics identifiers, advertising IDs, or third-party trackers

04Server-side processing

To perform redaction and page understanding, the extension sends your task instruction, the extracted page text, and a screenshot of the active tab to a backend service operated by Redact Rosters. The backend runs a vision-language model that returns the final redaction plan, which the extension then applies locally in your browser.

Pre-redaction before upload. The screenshot is scanned on-device first. PII that our local detector finds (emails, phone numbers, identifiers) is visually masked in the image before it leaves the browser, so the server never receives an unredacted image of your page. The backend only sees what the local pass could not confidently resolve.

What leaves your browser: page text, the locally pre-redacted screenshot of the active tab, and your typed instruction. What does not leave: content from any tab you have not explicitly run the agent on, your Chrome history, cookies, or any form input you have not submitted to Redact Agent.

Backend communication happens over HTTPS. The server receives the standard IP address and user-agent attached to any web request; these are used only to serve the response and are not combined with content payloads.

05Retention

Content you send to the backend is processed in memory and discarded as soon as the response is returned. The server does not write page text, screenshots, or instructions to disk, and keeps no logs of their contents. The only server-side records are aggregate request counts for capacity planning, which contain no page data of any kind.

Local settings and task history remain in your browser until you clear them by removing the extension from chrome://extensions.

06We do not sell or share your data

We do not sell user data to anyone.
We do not share it with third parties for marketing, advertising, or any purpose unrelated to redaction.
We do not use it to determine creditworthiness or for lending.
We do not use your page content, screenshots, or instructions to train, fine-tune, or evaluate any model — ours or anyone else's — under any circumstances.

The only parties who process your data are Redact Rosters and the hosting provider our backend runs on, strictly to deliver the redaction response.

07Your choices

Pause the extension. Redact Agent only acts on explicit Run clicks. Not clicking Run keeps your pages untouched.
Allowlist domains. Add domains you never want the extension to run on in the side panel settings.
Clear local data. Remove the extension from chrome://extensions to wipe all settings and task history stored in your browser.
Contact us. Email iamiq07@gmail.com for any question or request about your data. Because the backend keeps no logs of content, there is nothing server-side to delete.

08Children

Redact Agent is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has used the extension and you want their data removed, contact us.

09Changes to this policy

If this policy changes, the Effective date at the top of this page will change too. Material changes will also be noted in the extension's description on the Chrome Web Store before they take effect.

10Contact

Email iamiq07@gmail.com for any question about this policy, a data request, or a security report.