Privacy Policy

Last updated: 2026-06-14

This Privacy Policy describes how WA Auto Sender Studio ("we", "us", or "our") collects, uses, and protects information when you use our browser extension and related services (the "Service").

1. Information We Collect

a. License & account data

• Email address (provided at checkout)
• License key (generated when you purchase a plan)
• License activation status (active / revoked / expired)
• Payment metadata from Stripe (we do not see or store your card details)

b. Device activation data

• A random, anonymous device ID generated by the extension (used to enforce the per-plan device limit)
• Last-activation timestamp

c. Usage data (aggregated)

• Daily message-send counts (so you can see your usage)
• Extension version, Chrome version, OS

d. What we DO NOT collect

• The content of your WhatsApp messages
• Your contact lists or media files (these stay in your browser)
• Your payment card details (handled entirely by Stripe)
• WhatsApp credentials or session data

2. How We Use Information

• To activate and manage your license
• To enforce device-count limits per plan
• To send you service emails (license key, payment receipts, important updates)
• To prevent abuse and protect the Service
• To respond to your support requests

We do not sell, rent, or trade your information to third parties for marketing purposes.

3. Data Storage & Security

Data is stored with Supabase (PostgreSQL) using industry-standard encryption in transit (TLS 1.2+) and at rest. Access to production data is restricted to authorized personnel only. We retain your data for as long as your license is active and for up to 24 months afterwards for accounting and fraud-prevention purposes.

4. Third-Party Services

We rely on the following subprocessors to operate the Service:

• Stripe — payment processing (PCI-DSS Level 1 certified). Privacy Policy
• Supabase — database and authentication (Privacy Policy)
• Google (Gmail SMTP) — transactional email delivery (Privacy Policy)
• Firebase Hosting — web page hosting (Privacy Policy)

5. Cookies & Local Storage

The extension uses Chrome's local storage to cache your license status and language preference. Our web pages may use a single, anonymous session cookie for language preference. We do not use advertising or analytics cookies.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to processing or request data portability
• Withdraw consent at any time (by cancelling your license and requesting deletion)

To exercise any of these rights, email support@wass.appza.app. We respond within 30 days.

7. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal data, please contact us so we can delete it.

8. International Data Transfers

Our servers and subprocessors may be located in multiple countries. By using the Service, you consent to the transfer of your information to countries other than your own. We ensure appropriate safeguards are in place in line with GDPR, PDPA, and similar regulations.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the effective date of the current version. Material changes will be communicated via the extension or by email where appropriate. Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes.

10. Contact

If you have any questions about this Privacy Policy, please contact us at support@wass.appza.app.