Privacy Policy - WAMT (WhatsApp Marketing Tools)

Last Updated: January 13, 2025

1. Overview

WAMT (WhatsApp Marketing Tools) is a Chrome extension that helps businesses extract and manage WhatsApp Web contacts with professional features. We are committed to protecting your privacy and ensuring your data remains secure.

2. Data Collection and Processing

2.1 Contact Data (Processed Locally)

• Contact Information: Names, phone numbers, group memberships from WhatsApp Web
• Group Information: Group names, member counts, admin status
• Chat Metadata: Last contacted dates, archived status
• Processing: All contact data is processed entirely within your browser
• Storage: Contact data is never stored on our servers

2.2 Account and Subscription Data

• User Account: Email address, user ID for authentication
• Subscription Status: Pro/Free tier, subscription dates, payment status
• Usage Analytics: Export counts, feature usage (aggregated and anonymized)
• Payment Information: Processed securely by Stripe (we never see card details)

3. How We Use Your Data

3.1 Contact Data

• Extract and format your WhatsApp contacts for export
• Apply filters and formatting based on your preferences
• Generate export files (CSV, Excel, JSON) downloaded to your device

3.2 Account Data

• Authenticate your account and manage login sessions
• Process subscription payments and manage billing
• Provide customer support and technical assistance
• Improve our service through usage analytics

4. Data Sharing and Third Parties

4.1 Trusted Service Providers

• Stripe: Payment processing and subscription management
• Supabase: User authentication and subscription status storage
• Vercel: Backend infrastructure for webhook processing

4.2 What We DO NOT Share

• Your WhatsApp contact data is never transmitted to any server
• We do not sell your data to third parties
• We do not use your data for advertising
• We do not share data with data brokers

5. Security Measures

• Local Processing: Contact data never leaves your browser
• Encrypted Transmission: All server communication uses HTTPS/TLS
• Minimal Data Collection: Only essential account data is collected
• Secure Authentication: JWT tokens and secure session management
• Regular Security Audits: Code and infrastructure security reviews

6. Chrome Extension Permissions

6.1 Required Permissions

• activeTab: Access active WhatsApp Web tab for data extraction
• scripting: Inject contact extraction scripts into WhatsApp Web
• downloads: Save exported contact files to your device
• storage: Store user preferences and subscription status
• identity: Manage user authentication

6.2 Host Permissions

• web.whatsapp.com: Access WhatsApp Web for contact extraction
• supabase.co: User authentication and subscription sync
• vercel.app: Backend API communication
• stripe.com: Payment processing

7. Data Retention

• Contact Data: Never stored, only processed temporarily in browser memory
• Account Data: Retained while your account is active
• Subscription Data: Retained for billing and tax compliance (7 years)
• Usage Analytics: Aggregated data retained for service improvement

8. Your Rights and Controls

• Access: View all data we have about your account
• Rectification: Correct any inaccurate account information
• Deletion: Delete your account and associated data
• Data Portability: Export your account data
• Withdrawal of Consent: Uninstall extension to stop all processing

9. Freemium and Pro Features

9.1 Free Tier

• Limited to 20 contact exports per session
• Basic export formats (CSV, JSON)
• Contact data processed locally only

9.2 Pro Subscription ($7.89/month)

• Unlimited contact exports
• Advanced export formats (Excel, vCard)
• Priority customer support
• Advanced filtering and analytics

10. International Data Transfers

Our service providers (Stripe, Supabase, Vercel) may process data in the United States and other countries. All transfers are protected by appropriate safeguards including:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Industry-standard security measures

11. Children's Privacy

WAMT is not intended for users under 13 years old. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

12. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. We will notify users of material changes through:

• Extension update notifications
• Email notifications (for registered users)
• Updated version posted on this page

13. Legal Compliance

This extension complies with:

• GDPR: European General Data Protection Regulation
• CCPA: California Consumer Privacy Act
• Chrome Web Store Policies: Google's privacy and security requirements
• PCI DSS: Payment card security standards (via Stripe)