Updated and Effective: March 21, 2026
This Privacy Policy ("Policy") applies to the Yantra platform, including the Yantra web application, Yantra Browser Chrome extension, and related services (together, the "Platform"), owned and operated by CDMBase LLC d/b/a Yantra ("Yantra," "we," or "us"). This Policy describes how we collect, use, and disclose your personal information.
By using the Platform, you consent to our Policy, Terms of Use, and any additional applicable policies and terms we post.
1. What Information Does the Platform Collect?
We may collect information from you directly, automatically when you use the Platform, and from your interactions with websites you choose to automate. Some of this information may be considered "personal information" under various applicable laws. We consider information that identifies you as a specific, identified individual (such as your name, email address, or account credentials) to be personal information.
Note that we may de-identify personal information so that it is non-personal, such as aggregating or converting it to a code, sometimes using a function commonly known as a "hash." We will treat de-identified information as non-personal to the fullest extent allowed by applicable law.
Information You Provide Directly
- Account Information: When you create an account or sign in, we collect your name, email address, and user ID. When using the Chrome extension, we access your existing web application session to authenticate you.
- Configuration Settings: You may provide server configuration details, preferences, and settings through the Platform. These are stored locally in your browser or in your account.
- Search Queries: Queries you enter into the Yantra search and AI assistant to receive results and perform tasks.
- Communications: Information you provide when contacting our support team or providing feedback.
Information We Collect Automatically
- Authentication Tokens: The Platform reads session cookies and authentication tokens from Yantra web application domains to authenticate API requests to our backend services.
- Usage Information: We collect information about how you interact with the Platform, including features used, pages visited, and search queries performed.
- Device Information: Browser type, operating system, device type, and screen resolution.
- Tab Metadata (Extension): When using the Chrome extension, we access browser tab information including tab IDs, page URLs, page titles, and window identifiers to route automation commands to the correct browser tabs.
- Page Content (Extension): When you activate browser automation on a tab, the extension captures page content through Chrome DevTools Protocol (CDP), including DOM snapshots, accessibility tree data, page screenshots, and JavaScript execution results.
- Navigation Events (Extension): The extension monitors page navigation events on relay-attached tabs to maintain automation state.
Information We Do Not Collect
The Platform does not collect:
- Browsing history of tabs not actively attached to the relay
- Keystrokes or form input on non-automated tabs
- Personal files from your device
- Location data (GPS or IP-based)
- Financial or payment information (beyond what is processed by our payment provider)
- Health information
- Microphone or camera data
2. How Does the Platform Use the Information It Collects?
We use information collected from or about you, including personal information, as disclosed in this Policy, including to:
- Enable AI Search and Automation: Provide search results, AI-driven browser automation, and task completion services.
- Authenticate Your Session: Verify your identity and maintain secure connections between the Platform and our backend services.
- Personalize Your Experience: Customize search results, recommendations, and interface preferences based on your usage patterns.
- Maintain Relay Connections: Manage WebSocket connections to the relay server, monitor connection health, and automatically reconnect when connections are interrupted.
- Communicate With You: Respond to your questions, send important notices, and provide customer support.
- Improve the Platform: Diagnose technical issues, analyze usage patterns, and improve reliability and performance.
- Comply with Legal Requirements: Fulfill legal obligations and enforce our terms and policies.
4. Third Party Content and Links
This Policy does not apply to the practices of third parties that we do not own or control, including any third-party websites and services that may be linked to or from the Platform. The Platform may interact with websites at your direction, and those websites are governed by their own privacy policies and terms of service. We encourage you to review the privacy policies of any websites you interact with through the Platform.
The Chrome extension accesses the following first-party domains for authentication and configuration purposes only: *.yantra.app, *.cdebase.dev, *.cdebase.io, and dev-cdebase.auth0.com.
5. General Audience Platform
The Platform is not intended for individuals younger than the age of eighteen (18), and we request that these individuals do not use the Platform. We do not knowingly collect information from individuals younger than eighteen (18).
6. How We Handle Data Security
We use commercially reasonable security measures to protect against loss, misuse, and alteration of your personal information under our control, including:
- Encrypted Connections: All communication between the Platform and our backend services uses secure WebSocket (WSS) and HTTPS connections.
- Token-Based Authentication: Authentication tokens are derived using HMAC-SHA256 and are scoped to specific sessions.
- Local Storage Isolation: Configuration and session data stored in your browser uses Chrome's built-in storage APIs, which are isolated per-extension.
- No Persistent Server Storage of Page Content: Page content, screenshots, and DOM data transmitted during automation sessions are processed in real-time and are not permanently stored on our servers after the automation task is completed.
- Access Controls: Strict access controls and authentication requirements for all backend services.
However, no system can be 100% secure. While we strive to safeguard your personal information, we cannot guarantee or warrant the security of any information you disclose or transmit to us. You use the Platform and provide us with information at your own initiative and risk.
7. Your Choices About the Information We Collect
Extension Controls
You can disconnect the Chrome extension from the relay server at any time using the popup interface. You can detach individual tabs from automation. When disconnected, no page content or tab data is transmitted to our servers.
Uninstall
You may uninstall the Chrome extension at any time through Chrome's extension management page. Uninstalling removes all locally stored data, including configuration settings, session state, and authentication tokens.
Clear Data
You can reset the extension's configuration to defaults using the "Reset to Defaults" button on the options page, which clears all stored configuration and authentication data.
Account Deletion
You may request deletion of your Yantra account and associated data by contacting us at support@yantra.app.
8. Consent to International Transfer of Your Information
We are a US-based company. If you are located outside of the United States, please be aware that the information that we collect from you will be transferred to, and stored at, a destination outside of your country. By using the Platform or providing us with any information, you fully understand and unambiguously consent to this transfer to, and processing, usage, sharing, and storage of your information in the United States and other jurisdictions, which may have different or less protective privacy laws than those in your country.
9. Changes to This Privacy Policy
To the extent allowed by applicable law, we reserve the right to change this Policy at any time without prior notice. If we make material changes to this Policy, we will revise the "Updated and Effective" date at the top of this Policy. We may also provide notice through the Platform or via the Chrome Web Store listing. Your continued use of the Platform following these changes constitutes acceptance of the revised Policy.
10. Contact Us
If you have any questions, comments, or concerns regarding our Policy and/or practices, please send an email to: support@yantra.app
CDMBase LLC
d/b/a Yantra
11. Notice to California Residents
California Civil Code Section 1798.83 permits residents of California to request certain details about how their personal information has been shared during the calendar year with third parties for those third parties' own direct marketing purposes. We do not share personal information about you with third parties for their own direct marketing purposes.
If you are a California resident and have questions about our practices, please send your request via email to support@yantra.app with "Your California Privacy Rights" in the subject field. You must include your name, street address, city, state, and zip code.
12. Notice to Nevada Residents
Nevada S.B. 220 provides consumers with the ability to opt out of the sale of their personal information. We do not sell your personal information as defined in S.B. 220. However, you may still submit an opt-out request, and if our practices were to change in the future, we would honor your request. If you are a Nevada resident and would like to opt out, please contact us at support@yantra.app.