📄 Legal

Privacy Policy

Last updated: June 2025 · Effective immediately upon use of the WAScanner Chrome extension or website.

WAScanner ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information the WAScanner Chrome extension and website collect, how that information is used, and how it is protected. By using WAScanner, you agree to the practices described here.

1. Information We Collect

1.1 Information You Provide Directly

License key - entered by you during activation and stored locally on your device
WhatsApp phone number - entered during activation to bind your license, stored locally and sent to our license server for validation
Contact form submissions - name, email address, WhatsApp number, and business details submitted via the WAScanner website

1.2 Information Collected Automatically by the Extension

Phone numbers from WhatsApp Web - unsaved phone numbers visible in your WhatsApp chat list. These are read from the WhatsApp Web interface in your browser and stored locally on your device using Chrome's storage API. They are never transmitted to our servers.
Contact series settings - your preferred naming prefix for Google Contacts (e.g. "LEAD"), stored locally
Saved contacts list - a record of which numbers have already been exported to Google Contacts, stored locally
Debug logs - brief operational logs (scan counts, timestamps) stored locally for troubleshooting. These are never transmitted externally.

1.3 Information Sent to Third-Party Services

License server - your license key and bound WhatsApp phone number are sent to our license validation server (wasavelicense.nirosha.dev) on each extension launch to verify your subscription is active
Google People API - when you choose to save contacts, the phone numbers you select are sent to Google's People API using your authenticated Google account. This is governed by Google's Privacy Policy.

2. How We Use Your Information

To validate your license and ensure continued access to the extension
To save phone numbers to your Google Contacts when you request it
To respond to support requests and enquiries submitted via the website
To send you license keys and onboarding information after purchase

We do not use your data for advertising, profiling, or any purpose beyond what is described above.

3. Data Storage and Retention

All WhatsApp phone numbers are stored only on your device. They are never uploaded to our servers. Uninstalling the extension removes all locally stored data.

Local storage (your device): All collected phone numbers, license credentials, series settings, and debug logs are stored in Chrome's local extension storage on your device only. This data is removed when you uninstall the extension or clear extension data.

License server: We store your license key, bound WhatsApp phone number, and subscription status on our secure server to manage your license. This data is retained for the duration of your subscription and up to 90 days after cancellation.

Website enquiries: Contact form submissions are retained for up to 12 months and used solely to manage your customer relationship.

4. Chrome Extension Permissions Explained

WAScanner requests the following Chrome permissions. We only request permissions that are strictly necessary for the extension to function.

Chrome Web Store - Permission Justifications

The following are the exact justifications for each permission as required by the Chrome Web Store Privacy Practices tab.

Single Purpose Description

WAScanner scans the WhatsApp Web chat list to identify unsaved phone numbers and allows users to save them directly to Google Contacts with one click.

Host Permissions

https://web.whatsapp.com/* - Required to inject the content script that reads phone numbers displayed in the WhatsApp Web chat list interface. The extension cannot function without access to the WhatsApp Web page.

https://people.googleapis.com/* - Required to make authenticated API calls to Google People API to save collected phone numbers as contacts in the user's Google account.

https://wasavelicense.nirosha.dev/* - Required to validate the user's license key against the license server on each extension launch to confirm their subscription is active.

Identity Permission

Required to authenticate the user with Google OAuth2 so they can save collected phone numbers directly to their own Google Contacts via the Google People API. No authentication data is stored by the extension beyond what Chrome's identity API manages natively.

Remote Code Execution

This extension does not execute any remote code. All JavaScript is bundled entirely within the extension package and is reviewed at install time. The extension makes outbound network requests to the Google People API and a license validation server, but no code is fetched, injected, or executed from any remote source.

sidePanel Permission

Required to display the extension's user interface as a persistent Chrome Side Panel alongside WhatsApp Web. Unlike a popup that closes when the user switches tabs, the Side Panel stays open so users can monitor scanning progress, view collected numbers, and trigger saves while continuing to browse normally.

Storage Permission

Chrome's local storage API is used to persist collected phone numbers, the user's license key, bound WhatsApp phone number, Google Contacts series prefix, the list of already-saved contacts, and operational debug logs. All data is stored locally on the user's device and is never transmitted to our servers except for license validation as described above.

Tabs Permission

Required to identify the active WhatsApp Web tab, send messages to the content script running within it, detect when WhatsApp Web reloads so the extension can automatically reconnect, and open new tabs for OAuth authentication flows and support links.

5. Data Sharing

We do not sell, rent, or trade your personal information. We do not share your data with any third party except:

Google - when you explicitly choose to save contacts via Google People API, under your own authenticated Google account
Legal requirements - if required to comply with applicable law, regulation, or valid legal process

6. Security

We take reasonable technical measures to protect your data. Our license server uses HTTPS for all communications. Phone numbers collected by the extension are stored only in Chrome's local extension storage on your own device and are not accessible to websites or other extensions.

No method of transmission or storage is 100% secure. We encourage you to keep your license key confidential and not share it with others.

7. Children's Privacy

WAScanner is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from minors.

8. Your Rights

You may request deletion of your personal data held on our license server at any time by contacting us. Upon cancellation of your subscription, your license data is deleted within 90 days. All locally stored extension data can be cleared instantly by uninstalling the extension or using Chrome's "Clear data" option for the extension.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of WAScanner after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us:

WhatsApp: +91 90284 46832

Website: nirosha.org