WAWebSender Privacy Policy

This Privacy Policy applies to the WAWebSender Chrome extension, the WAWebSender website, plan purchase and activation flows, product feedback and support interactions. WAWebSender is the service operator referenced as we, us or our in this policy.

WhatsApp, Meta, Chrome and other third-party services have their own privacy practices. WAWebSender is independent software and is not affiliated with, endorsed by or sponsored by WhatsApp Inc., Meta Platforms, Inc. or Google.

When you open the extension on WhatsApp Web and choose a feature, the extension accesses only the data needed to display and perform that user-facing workflow.

• Account state: the currently signed-in WhatsApp account identifier and phone number, connection state and available WhatsApp Web capabilities.
• Audience data: numbers entered manually or imported from Excel, selected groups and their members, selected labels and their members, related names or identifiers and duplicate entries.
• Campaign content: message text, saved templates, Excel-column variables, number and time variables, message variations, images, videos, documents and contact attachments.
• Task data: sending intervals, chat-deletion choice, current progress, successful and failed recipients, failure state, retry lists and exported result files.
• Normal campaign content is processed in the browser and is not uploaded to WAWebSender telemetry or account services. WhatsApp processes messages and attachments when you instruct WhatsApp Web to send them under WhatsApp's own terms and privacy policy.

The extension uses Chrome local storage and local browser storage to preserve the state needed for the features you use. Depending on your actions, this may include the following information.

• WhatsApp account number and identifier, connection status, installation time, locally generated UUID, language, browser and platform details.
• Recipient sources, imported Excel data, group and label choices, message text and templates, attachment data, sending settings, task progress, aggregate and item-level results, failed-send retry state and interface preferences.
• Account-specific quota records, review-prompt state, notices and feature state.
• Activation code, purchase date, plan, expiry date and account-bound license state. Optional WADesk sign-in may store an access token and related account state locally.
• Files exported by the extension remain in the download location you select until you delete them.

The extension sends limited event-level telemetry to Alibaba Cloud Log Service to operate the product, measure feature reliability, investigate failures, enforce plan or quota behavior and improve the user-facing workflow.

Telemetry may include the current WhatsApp account number or identifier, locally generated UUID, installation timestamp, extension version, language, event time, platform, user agent, browser type and a country inferred from the account phone number. Event-specific fields may include the feature or entry point used, source and sending type, attachment type, recipient count, aggregate totals for successful, failed and duplicate entries, plan or remaining-quota state, activation expiry and non-content error or result codes.

Telemetry does not include normal campaign message text, uploaded attachments, Excel cell contents, contact lists, group-member lists, label-member lists or exported result files.

The extension connects to WADesk-hosted APIs and CDN resources for plan permission, optional account sign-in, service notices, pricing and activation journeys, configuration and selected optional features.

If you choose WADesk sign-in, the extension may request optional cookie and WADesk host access, exchange the relevant WADesk identity cookie for an access token and store the returned account state locally. It does not request or store your WhatsApp password.

Installation, pricing, feedback and uninstall journeys may open a WAWebSender or WADesk page containing your WhatsApp account identifier, extension version, install time, browser language, event type and campaign-source parameters in the URL. An optional user-confirmed reward task can send your WhatsApp identifier to retrieve a specific recipient and message supplied by the service, and return the task record identifier and success or failure status.

The WAWebSender website uses Google Analytics to understand aggregate page and link activity. Google may receive standard device, browser, approximate location and interaction information under Google's own terms. The website also stores a language cookie and, when you begin a purchase, a randomly generated visitor ID in local storage and a first-party cookie for up to 400 days.

To create and complete a purchase, we process the WhatsApp account you enter, country or region, email address, selected plan, product, currency, visitor ID, browser language, order and payment-session identifiers, payment status and activation-delivery status. Payment credentials are entered into and processed by the payment provider; WAWebSender receives transaction and fulfillment information needed to deliver the activation code.

If you contact support or submit feedback, we process the information you choose to send, such as your account or order details, screenshots, error information and conversation content. Do not send passwords, full payment-card information, private messages, contact lists or activation codes unless support specifically requests limited information and you have removed unrelated sensitive content.

The published extension package declares the following required and optional permissions.

• activeTab: to interact with the WhatsApp Web tab associated with the action you request.
• storage: to save account state, preferences, templates, task data, results, quotas, activation state and other local product state.
• unlimitedStorage: to support locally stored task and attachment data that may exceed Chrome's standard extension storage quota.
• Host access for *.whatsapp.com: to run the extension on WhatsApp Web, read the recipient and account information needed for the selected feature and instruct WhatsApp Web to perform actions you confirm.
• Optional cookies and WADesk host access: requested only for optional WADesk account and related service flows, including reading the relevant WADesk identity cookie after permission is granted.

We use data only to provide and improve WAWebSender's disclosed single purpose and related operational functions: performing the workflow you request, maintaining local state, recognizing the relevant account and plan, delivering purchases and activation codes, enforcing quotas, supporting users, measuring reliability, preventing fraud or abuse and complying with law.

Where applicable law requires a legal ground, processing is based on performing our agreement with you, our legitimate interests in operating and securing the service, your consent for optional permissions or data practices, and compliance with legal obligations. You may withdraw consent for optional processing, but the related optional feature may stop working.

We do not sell or rent user data, use it for personalized advertising, provide it to data brokers, or use it for credit, lending, employment, insurance or similar eligibility decisions.

The limited data described above may be processed by WADesk-hosted API and infrastructure providers, Alibaba Cloud Log Service, CDN and hosting providers, Google Analytics, payment processors and transactional email providers only to operate, secure, measure or deliver the service. Data may also be disclosed when required by law, to investigate security or abuse, or in a corporate transaction subject to applicable safeguards.

WAWebSender's use and transfer of information received through Chrome APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Humans are not permitted to read user data except with explicit consent for a specific support request, when necessary for security or legal compliance, or when data is aggregated and de-identified for permitted internal operations.

Extension data stored locally remains until you clear the extension's storage, reset the relevant state or uninstall the extension. Exported files remain until you delete them from your device. The website purchase visitor ID is configured to remain for up to 400 days unless you clear browser storage and cookies sooner.

Alibaba Cloud operational telemetry is retained for 30 days and then deleted according to the logging configuration. Order, activation, payment, email-delivery, fraud-prevention and support records are retained only as long as reasonably necessary to deliver the purchase, resolve disputes, maintain security and satisfy accounting, tax or other legal obligations, after which they are deleted or de-identified.

We use reasonable technical and organizational measures designed to protect information, including browser-local processing for campaign content and secure connections for service APIs where implemented. No method of storage or transmission is completely secure, and users remain responsible for securing their device, Chrome profile and WhatsApp session.

Service providers may process information in countries other than your own. Where required, we use appropriate contractual, technical or legal safeguards for international processing.

You can stop a task, remove exported files, clear site cookies and local storage, clear Chrome extension data, decline optional permissions, disconnect optional WADesk account access or uninstall the extension. Clearing data may remove templates, task state, activation information or preferences and may require reconfiguration.

Depending on your location, you may request access, correction, deletion, restriction, objection, portability or information about personal data we hold. We may need to verify your identity and may retain information where law or a valid exception requires it. Browser-local data must generally be deleted through your own browser because WAWebSender does not possess that local content.

Campaigns may involve personal information belonging to recipients or group and label members. You are responsible for having a lawful basis and any required consent to access, use and message those people, honoring opt-out requests and complying with applicable privacy, marketing and anti-spam laws.

WAWebSender is not directed to children under the age required by applicable law to consent to data processing. Do not use the service if you are not legally permitted to agree to its data practices and Terms of Service.

We may update this policy when product functionality, data practices, service providers or legal requirements change. We will publish the revised policy on this page and update the effective date. Where required, material changes will also be disclosed through an appropriate website, store-listing or in-product notice before the new practice takes effect.