Privacy Policy
WATools Hub is built on one principle: your data belongs to you and stays on your device. This policy explains exactly what we collect, where it lives, and who can access it.
1. What Data Is Processed & Where It Lives
| Data Type | Where Stored | Sent to Us? | Purpose |
|---|---|---|---|
| Chat folder names & assignments | chrome.storage.local — your browser only | Never | Organise chats into folders |
| Blur & privacy settings | chrome.storage.local — your browser only | Never | Remember privacy preferences |
| Password hash (blur unlock) | chrome.storage.local — SHA-256 hash only, never plain text | Never | Protect blurred chats with PIN |
| Saved notes & annotations | Browser IndexedDB (watoolshub_db) — your device only | Never | Store notes on messages |
| Reminder metadata | chrome.storage.local — your browser only | Never | Fire Chrome Alarm at scheduled time |
| Exported CSV / HTML backup files | Your local hard drive (Downloads folder) | Never | Group export and chat backup files |
| License / paid status cache | chrome.storage.local — XOR-encrypted, checksummed | Only to ExtensionPay for verification | Feature gating for free vs. paid |
| Payment information | ExtensionPay servers (not our servers) | Handled by ExtensionPay | Process and verify payment |
2. Data We Do NOT Collect
- The content of your WhatsApp messages
- Your WhatsApp contacts list or phone numbers
- Your WhatsApp account details, phone number, or profile information
- Media files — images, voice notes, videos go directly to your machine only
- Usage analytics, crash reports, or telemetry of any kind
- Your IP address, browser fingerprint, or device identifiers
- Browsing history on any website
3. How Data Is Stored & Secured
Local-Only Storage
All user data is stored exclusively using Chrome's chrome.storage.local API and browser IndexedDB. This data is sandboxed to the extension — no other website or extension can access it.
Password / PIN
If you set a blur unlock password, only the SHA-256 hash of that password is stored locally. The plain text password is never stored or transmitted anywhere.
License Cache
Paid status is cached locally using an XOR-encrypted, FNV-1a checksummed entry in chrome.storage.local. The cache expires every 6 hours for paid users and is re-verified against ExtensionPay on each check.
Data Retention
Your data persists until you uninstall the extension (Chrome clears chrome.storage.local automatically) or manually clear browser storage. Export your notes before uninstalling to preserve them.
4. Third-Party Services
ExtensionPay — Payment Processing
We use ExtensionPay (extensionpay.com) to process payments and verify licenses. The extension makes one outbound network call to ExtensionPay's server to verify your paid status. This call includes your ExtensionPay account identifier only — no WhatsApp data is included. ExtensionPay's privacy policy governs their data handling.
Chrome Web Store
The extension is distributed via the Google Chrome Web Store. Google's privacy policy governs data collected during installation.
No Analytics or Tracking
WATools Hub does not integrate Google Analytics, Mixpanel, Sentry, or any analytics or monitoring service. We have zero visibility into how you use the extension.
WA-JS Library
The extension includes the open-source WA-JS library, which runs entirely locally in your browser and makes no external network calls.
5. Your Rights
- Access: Export all your notes anytime via Notes panel → Export (JSON or CSV)
- Deletion: Uninstall the extension to permanently delete all locally stored data
- Portability: Export notes and folders to JSON/CSV — no account needed
- Payment data: Contact ExtensionPay directly for payment-related data rights
GDPR
Because we do not process personal data on our servers, WATools Hub does not act as a data controller for your WhatsApp data. The only personal data we process is your email address via ExtensionPay for payment purposes, based on contractual necessity (Art. 6(1)(b) GDPR).
Children
WATools Hub is not directed at children under 13. We do not knowingly collect data from children.
6. WhatsApp / Meta Disclaimer
WATools Hub is an independent third-party Chrome extension. It is not affiliated with, endorsed by, or connected to WhatsApp LLC or Meta Platforms, Inc. in any way. The extension operates on the WhatsApp Web browser interface exactly as a human user would — it does not use the WhatsApp Business API or any official API.
7. Changes to This Policy
If we introduce server-side data collection in the future, we will update this policy, change the effective date, and notify users via the Chrome Web Store listing. Check this page periodically for updates.
8. Contact
Zyn Technology
We respond to all privacy inquiries within 48 business hours.