Privacy Policy
Last updated: 7 July 2026
Behtar (behtar.co.in) is operated by Shreyansh Gupta, an individual sole proprietor based in India — the data fiduciary / data controller for the processing described here. Contact: shreyiitkgp96@gmail.com.
This policy covers the behtar.co.in website and both Behtar products — the Behtar: Prompt Improver browser extension (Sections 2–4) and the Behtar Card Scanner web app (Section 4A). Each product collects different data for different purposes, described separately below.
The two promises that matter most: your prompt content is never collected or stored by Behtar — it is processed transiently to generate an improvement and never retained. And your email address (collected once the upcoming account system launches) is used solely to track your free-tier usage and, for subscribers, billing — never for marketing.
1. This website
The behtar.co.in website sets no cookies and runs no analytics scripts. It is static content hosted on Cloudflare Pages; Cloudflare may process standard request data (such as IP addresses) to serve and protect the site, per Cloudflare's Privacy Policy.
2. Data the extension collects and processes
Behtar: Prompt Improver is designed around data minimisation: prompts are scored locally in your browser, and only a limited set of identifiers and usage metrics is processed to operate and improve the service.
Today (invite-code beta)
| Data point | Purpose | Retention |
|---|---|---|
| Invite code | Access verification; pseudonymous identifier in analytics | Analytics retained up to 3 months |
| Install ID | Daily rate limiting; abuse detection | Not retained in analytics |
| IP address | Rate limiting, handled by Cloudflare infrastructure | Not stored by us; Cloudflare may retain per its own policy |
| Prompt text | Forwarded to the Anthropic API to generate the improved version | Never stored by us — processed transiently and discarded (see Section 3) |
| Usage analytics | Per-event metrics: platform, mode, extension version, model used, browser, prompt length (character count only), score, response time, action taken (accepted/dismissed/etc.), optional NPS rating | Up to 3 months |
Aggregate usage counts (daily/lifetime improvement counts, per-platform totals, mode preference, session stats) are stored only in your browser's local storage and never transmitted. Only lengths and counts are ever stored locally — never the prompt text itself.
Upcoming (free/paid accounts — launching soon)
When the freemium version launches, activating the extension will require a verified email address. There is no password and no account to manage — just an email so we can track your free usage. Specifically, we will store, on our servers (Cloudflare infrastructure in our account):
- Your email address — the account identifier. Purpose: enforcing the free tier's monthly limit and, if you subscribe, associating your subscription and billing status. It is never used for marketing, never sold, and never shared beyond the sub-processors listed below.
- Usage counters — how many improvements you have used in the current period (counts only, never content).
- Subscription status — for paid accounts, references from the payment processor (e.g. a customer ID). We never see or store your card, UPI, or bank details — those go directly to the payment processor.
- Install ID — retained as a secondary signal to detect abuse of the free tier (e.g. one browser cycling through multiple emails). Once accounts launch, this account and usage state is stored server-side, keyed to your email.
Legal basis (GDPR): performance of a contract (Art. 6(1)(b)) — the email is necessary to provide the free/paid service you request, not collected for any secondary purpose. Analytics data is processed under legitimate interest (Art. 6(1)(f)) in operating and improving the service, using pseudonymous identifiers and minimal data. Under India's DPDP Act, we act as a Data Fiduciary and collect this data for the specific stated purpose, with notice at the point of collection.
3. What the Prompt Improver does NOT collect
- We never log or store the content of your prompts — only the character count appears in analytics. Prompt text is processed transiently to generate the improvement and is not retained on servers we control.
- We do not track browsing history outside the four supported AI platforms (ChatGPT, Claude, Gemini, Perplexity).
- We do not collect keystrokes, clipboard contents, or any page content beyond the specific prompt input field.
- We do not sell data to anyone, and we do not use data for advertising or marketing.
- The Prompt Improver does not collect names, passwords, or payment card details (payments, once live, are handled entirely by the payment processor). Behtar Card Scanner has its own sign-in and is covered separately in Section 4A.
4. How your prompts are processed
Before any network request is made, your prompt is scored locally in your browser — no data leaves your device during scoring. A prompt is only sent onward if it scores below the weak-prompt threshold and the extension is active. If your prompt scores above the threshold, it is never sent anywhere.
When a weak prompt is improved, the prompt text is sent to our relay server (Cloudflare Workers), which forwards it to the Anthropic API (Claude) for rewriting and returns the result to your browser. The relay is a pass-through: we do not log or store prompt content on servers we control. Anthropic may retain API inputs for up to 30 days under its data handling and safety practices — see Anthropic's Privacy Policy.
4A. Behtar Card Scanner
Behtar Card Scanner is a separate product with its own account system and different data practices — unlike the Prompt Improver, storing your data is its core function (it keeps your scanned contacts for you).
- Account: signing up collects your email, your name, and either a password (stored only as a salted hash, never in plain text) or your Google sign-in identifier if you use "Sign in with Google."
- Card images and extracted contacts: the card photos you upload are sent to the Anthropic API (Claude) to extract contact details, and are then stored in your account together with the extracted fields (name, title, company, email, phone, and similar) so you can view and search them later. This data is scoped to your account — it is never shared with other users, never sold, and never used for marketing.
- Third-party data on cards: the cards you scan contain other people's contact details. You are responsible for scanning and using that information appropriately — typically, business cards are shared for exactly this purpose.
- Deletion: you can delete individual contacts in the app at any time. To delete your entire account and all stored data, email shreyiitkgp96@gmail.com.
5. Sub-processors and third-party services
The following third parties process data on our behalf. This is the complete list; it will be kept current here.
| Sub-processor | What it processes | Why |
|---|---|---|
| Cloudflare | Relay traffic, account/usage records, site hosting; IP addresses in transit | All of our infrastructure (Workers, Pages, storage) runs on Cloudflare's network |
| Anthropic | Prompt text (Prompt Improver) and card images (Card Scanner), transiently — no user identifiers or account information attached | AI processing: generates improved prompts and extracts contact details from card images; may retain inputs up to 30 days per its policy |
| Resend | Your email address (once accounts launch) | Sends the one-time verification code email |
| Razorpay and/or Stripe | Your email and payment details (once paid subscriptions launch) | Payment processing and subscription billing; payment details go directly to the processor, never to us |
International transfers: Cloudflare, Anthropic, Resend, and Stripe are US-based; data may be processed in the United States and other countries where they operate. Where EU/EEA data transfer rules apply, transfers rely on appropriate safeguards such as Standard Contractual Clauses documented in each provider's data processing terms.
6. Data retention
- Prompt content: never retained by us — no retention period applies because it is not stored.
- Usage analytics: up to 3 months (90 days).
- Account data (once launched): kept while your account is active. Free-tier accounts inactive for 24 months have their email deleted or anonymised.
- Billing records: for paid accounts, retained as required by tax and accounting law.
- Card Scanner contacts and card images: kept while your account is active, so you can access them — that is the product. Deleted when you delete a contact or your account.
- Local extension data: deleted automatically when you uninstall the extension.
7. Your rights and data deletion
Depending on where you live (including under GDPR and India's DPDP Act), you have the right to access, correct, delete, or restrict processing of your personal data, to object to processing based on legitimate interest, and — in the EU/EEA — to lodge a complaint with your supervisory authority.
To have your data deleted, email shreyiitkgp96@gmail.com from the relevant address. We will delete your account record (email, usage counters) and, for subscribers, delete or anonymise the corresponding customer record with the payment processor. We aim to respond within 7 business days. You can also stop all processing at any time by disabling or uninstalling the extension — no prompt is ever sent while it is disabled.
8. Data breach notification
In the event of a personal data breach likely to result in a risk to your rights, we will notify the relevant supervisory authority within 72 hours of becoming aware, and affected individuals without undue delay, where required by applicable law.
9. Children
The service is not directed at children under 16 in the EU/EEA, or under 13 elsewhere (under 18 where required by India's DPDP Act for processing requiring verifiable parental consent). We do not knowingly collect information from children below these ages.
10. Changes to this policy
We may update this policy from time to time — for example, when the account system and paid subscriptions described above go live. The "Last updated" date at the top reflects the latest version.
11. Contact us
For any privacy question or request: shreyiitkgp96@gmail.com. We aim to respond within 7 business days.