Privacy Policy

Effective 10 September 2026

Who we are

Kashif is an automated website-audit service run by Chatwiser Inc., a limited liability company registered in Delaware, USA. Kashif scores a website and lists what to improve, and it can re-audit a verified domain on a schedule. This policy explains what personal data we collect when you use Kashif at https://kashifaudit.com, how we use it, and the choices you have.

Chatwiser Inc. is the controller of the personal data described here. If you have any question about this policy, email us at hello@kashifaudit.com. If you need our registered mailing address for a formal request, ask us by email and we will provide it.

What we collect

We keep the data to a minimum. We collect:

Your account email. You give us an email address to create and sign in to your account.
The website URLs you submit. These are the sites you ask Kashif to audit.
Audit results. The scores and the list of improvements Kashif produces for the sites you submit.
Usage and log data. Basic technical records such as your IP address, browser type, the pages you open in Kashif, and the dates and times of your actions. We use these to run the service and keep it secure.

Payments. If you subscribe to Pro, your payment is handled by Stripe. Stripe collects and stores your card details. Chatwiser Inc. never sees or stores your full card number. We receive limited billing information from Stripe, such as your subscription status, so we can manage your subscription.

How and why we use your data

To create your account and sign you in.
To run the audits you request and show you the results.
To run recurring re-audits on a domain after you have verified it (see below).
To give you the 14-day free trial of Pro. The trial needs no card and does not go through Stripe. Nothing is billed unless you choose to subscribe.
To manage your Pro subscription and billing through Stripe if you subscribe.
To send you transactional email, such as sign-in help, audit results, and account or billing notices.
To keep the service secure, prevent abuse, and fix problems.
To meet our legal and accounting obligations.

We do not use your data to build advertising profiles, and we do not sell it.

Domain verification

Recurring re-audits only run after you prove you control the domain. You do this by adding a DNS TXT record we give you. We read that record to confirm you control the domain before we schedule any recurring audit.

Legal bases

Where the law requires a legal basis to process personal data, we rely on:

Performance of a contract. We need your email, submitted URLs, and audit results to give you the service and manage your subscription.
Legitimate interests. We use log data to keep Kashif secure, prevent abuse, and improve how it works.
Legal obligation. We keep certain records, such as billing records, to meet tax and accounting rules.
Consent. Where we ask for your consent for a specific purpose, you can withdraw it at any time.

We serve customers in Saudi Arabia, the United Arab Emirates, and Jordan, and we also work to meet the data protection laws of those countries. These include Saudi Arabia's Personal Data Protection Law (PDPL), overseen by the Saudi Data and AI Authority (SDAIA), and the personal data protection laws of the United Arab Emirates and Jordan.

Who we share it with

We do not sell your personal data. We share it only with the service providers we need to run Kashif, and only for that purpose. These sub-processors are:

Stripe — payment processing. Stripe handles your card details and subscription billing.
Our hosting provider (VPS) — the server that runs Kashif and stores its data.
Our email delivery service (SMTP) — sends the transactional email described above.

We may also disclose data if the law requires it, or to protect our rights, our users, or the public. If Chatwiser Inc. is involved in a merger or sale, data may be transferred as part of that, and this policy will continue to apply.

International data transfer

Chatwiser Inc. is based in the United States, and we serve customers in Saudi Arabia, the United Arab Emirates, and Jordan. When you use Kashif, your data is processed in the United States and in other countries where our sub-processors operate. Data protection laws in those countries may differ from the laws where you live. We put data-processing terms in place with our sub-processors that require them to protect your data and to use it only for the services they provide to us. When your data moves from your country to the United States, we rely on those contractual protections to keep it safe.

Data retention

We keep your data for as long as your account is open and you use Kashif. If you close your account or ask us to delete your data, we delete your account email, submitted URLs, and audit results within 30 days, unless we must keep some of it to meet a legal obligation. We keep basic log data for up to 12 months to run the service and keep it secure. We keep billing records for as long as tax and accounting rules require, which is usually several years.

Your rights

Depending on where you live, you have the right to:

Access the personal data we hold about you.
Correct data that is wrong or out of date.
Delete your data.
Export a copy of the data you gave us.
Object to processing we base on our legitimate interests.
Restrict how we process your data while we look into a request.
Withdraw consent at any time, where we rely on your consent. This does not affect processing we did before you withdrew it.
Complain to a data protection authority.

To exercise any of these, email us at hello@kashifaudit.com. We will respond within a reasonable time. You can also update your account email from within Kashif, and you can manage or cancel your subscription in the Stripe billing portal. If you believe we have not handled your data properly, you can complain to a data protection authority — for example, the Saudi Data and AI Authority (SDAIA) in Saudi Arabia, or the relevant authority in the United Arab Emirates or Jordan.

Cookies and sessions

Kashif uses cookies to keep you signed in and to remember your session. These are needed for the service to work. We do not use advertising cookies or third-party tracking cookies. If you block the cookies Kashif needs, you may not be able to sign in.

Security

We protect your data with reasonable technical and organizational measures. Traffic to Kashif is encrypted with HTTPS. Access to the systems that hold your data is limited to people who need it. Stripe handles card data on its own secure systems, so we never store card numbers. No service can promise perfect security, but we work to keep your data safe and to fix problems quickly. If a breach affects your personal data, we will act quickly to contain it, and, where the law requires it or the risk to you is significant, we will tell you and the relevant data protection authority without undue delay.

Children

Kashif is for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, email hello@kashifaudit.com and we will delete it.

Changes to this policy

We may update this policy from time to time. If we make an important change, we will update the date at the top of the page and, where appropriate, tell you by email. If you keep using Kashif after a change, that means you accept the updated policy.

Contact

For any question about this policy or your data, email hello@kashifaudit.com. You can learn more about the company at https://bottletech.net.

العربية