01
Scope and product identity
This Privacy Policy applies to WAContact, including the Chrome extension with ID jminpmjfkocfcnaginmfdkcpbgfehpah, the wacontact.wadesk.io website, free and paid features, activation, quota, support and feedback services. In this policy, WAContact, we and us refer to the service operator WAContact.
The extension includes contact, chat and group-member export features, and Max may include media export from chat history. Although this website focuses on WhatsApp Contact Export, this policy covers the complete extension because those features are delivered in the same Chrome Web Store item.
02
WhatsApp Web data processed locally
When you choose an export, WAContact accesses the WhatsApp Web data needed to perform that action. This content is processed in your browser and used to create the file or folder you request. WAContact does not upload or retain a server copy of exported content.
- Contact export data may include contact identifiers, phone numbers, names, labels, business or saved-contact status, blocked status, country code derived for the exported file and recent Chat List fields.
- Chat export data may include selected chat metadata, message text, timestamps, sender or recipient identifiers and, when selected and available to a Max plan, associated media.
- Group-member export data may include selected group names, member identifiers, phone numbers, names, business or administrator status and export filters.
- Generated Excel, CSV, VCard, HTML, text, media or other supported export files are saved to the destination you select and remain under your control.
03
Information stored on your device
WAContact uses Chrome extension storage and popup local storage to maintain product state. This information remains in your browser until you clear it, reset the relevant setting or uninstall the extension.
- The current WhatsApp account number or identifier, connection state, installation timestamp and a locally generated installation UUID.
- Account-scoped export settings, selected formats, sources, groups, labels and filters, onboarding and review state, interface preferences and cached public service notices.
- Encrypted daily quota records and locally validated activation information, including activation code, plan, purchase date and expiry state bound to the relevant WhatsApp account.
- Your optional analytics choice and, only after consent, a short-lived retry queue containing allowlisted operational events. Export content is not stored in this queue.
04
Optional usage and diagnostic analytics
Optional analytics is disabled by default. On first use, WAContact asks you to choose between allowing limited analytics and local-only use. No option is preselected. Declining does not disable export, activation, licensing or quota features, and you may change the choice later.
Only after affirmative consent, WAContact may send the current WhatsApp account number or identifier, installation UUID and timestamp, extension version and language, event time, plan and quota state, feature or entry point used, export type, selected filter counts, aggregate exported or failed counts, results and stable non-content error codes to Alibaba Cloud Log Service.
Withdrawing consent cancels pending logging work and deletes unsent events. Events created while analytics was declined are not collected later. Analytics records are retained for no more than 30 days.
- Analytics does not include message text, attachments, media contents, exported files, contact or group-member details, group names or third-party phone numbers.
- Analytics does not include full activation codes, signatures, payment credentials, passwords, cookies or WhatsApp login credentials.
- WAContact does not send a country or location inferred from your phone number as an analytics field.
05
Essential service-flow parameters
Some account context is transmitted when you intentionally open a purchase, activation-support, bug-feedback or uninstall-feedback flow. This is separate from optional analytics and is necessary to preserve the relevant account or installation context.
Purchase and bug-feedback links may include the current WhatsApp account as waid or whatsapp_id. The uninstall-feedback URL may include that account, extension version, language and installation time. Guide, privacy and community links do not require contact lists, message contents or exported files.
06
Website, purchase, activation and support data
The website stores a language preference cookie. When you begin a purchase, it also creates a random visitor ID in local storage as wacontact_visitor_id and in the first-party wacontact_vid cookie for up to 400 days unless you clear them sooner.
To create and complete a purchase, WAContact processes the WhatsApp account and country or region you enter, email address, selected plan, product, currency, visitor ID, browser language, order and payment-session identifiers, payment status and activation-email delivery status. Payment credentials are entered into and processed by the third-party payment provider; WAContact receives only the transaction and fulfillment information needed to deliver and support the activation code.
If you contact support or submit feedback, WAContact processes the information you choose to provide, which may include account or order details, redacted screenshots, error information and conversation content. Do not send passwords, full payment-card information, private messages, third-party contact lists or full activation codes.
07
How information is used
WAContact uses locally accessed WhatsApp Web data only to perform the export, filtering and file-generation actions you request. Account, activation and quota data is used to identify the relevant account, validate plan access, enforce free allowances and deliver paid features.
Limited service data is used to create and fulfill purchases, send activation information, provide support, measure reliability after consent, diagnose errors, prevent fraud or abuse, maintain security and comply with applicable law. WAContact does not use extension data for personalized advertising, data brokerage, credit scoring, lending, insurance, employment or other eligibility decisions.
08
Service providers and disclosure
WAContact does not sell or rent user data. Limited information may be processed by providers that help operate the service: hosting and CDN infrastructure, Alibaba Cloud Log Service for consented operational telemetry, payment processors, transactional email providers and support infrastructure.
Providers may process information only to perform services for WAContact and are subject to applicable contractual and legal safeguards. Information may also be disclosed when required by law, to protect users or the service from fraud and security threats, or as part of a corporate transaction subject to applicable safeguards.
09
Chrome permissions and why they are needed
WAContact requests the permissions declared in its Chrome Web Store package only for the purposes below.
- tabs: to find, focus, reload or open WhatsApp Web, communicate with the content script for an export you request, avoid duplicate service pages and open a page only after you choose the related action. It is not used to collect general browsing history.
- storage: to save local account state, export settings, activation and plan state, encrypted quota records, onboarding state, analytics consent, cached notices and the consent-dependent retry queue.
- Host access to *.whatsapp.com: to run on WhatsApp Web, verify connection state and locally access only the chats, contacts, groups and media needed for the export you select.
- Host access to cdn.wadesk.io: to retrieve a public urgent-notice configuration with credentials omitted and without sending WhatsApp account or export content.
10
Retention and deletion
Local extension information remains until you clear Chrome extension data, reset the relevant state or uninstall WAContact. Exported files remain in the location you selected until you delete them. The website purchase visitor ID may remain for up to 400 days unless browser storage and cookies are cleared sooner.
Alibaba Cloud operational telemetry is retained for no more than 30 days. Order, payment, activation delivery, fraud-prevention, support and feedback records are retained only as long as reasonably necessary to fulfill purchases, resolve disputes, secure the service and meet accounting, tax or other legal obligations, after which they are deleted or de-identified.
11
Security and international processing
WAContact uses reasonable technical and organizational safeguards. Export content is processed locally, activation and quota state uses local validation and encryption where implemented, and transmitted service data uses HTTPS. No method of storage or transmission is completely secure, so absolute security cannot be guaranteed.
Service providers may process information in countries other than your own. Where required, WAContact relies on applicable contractual, legal and technical safeguards for these transfers.
12
Your choices and privacy rights
You may choose local-only use, later grant or withdraw analytics consent, delete exported files, clear website cookies and local storage, clear Chrome extension data or uninstall WAContact. Clearing local data may remove settings, quotas or activation information and require reconfiguration.
Subject to applicable law and identity verification, you may request access, correction, deletion or information about personal data WAContact holds. Use the Contact Us page and provide enough account or order context to locate the relevant record without sending passwords, full payment information, private messages or third-party contact lists.
13
Chrome Web Store Limited Use compliance
WAContact's use of information obtained through Chrome extension permissions complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only to provide or improve the extension's disclosed single purpose and necessary operational functions.
WAContact does not transfer user data except where necessary to provide or improve the service, maintain security, comply with law or complete a permitted corporate transaction. Humans are not permitted to read exported user content unless you explicitly provide specific information for support, access is necessary for security or law, or data has been aggregated and de-identified for permitted internal operations.
14
Third-party data, children and external services
The extension may process information about other people because you choose to export it. You are responsible for having the legal basis, permissions and authority needed to export, store, use or share that information.
WAContact is not directed to children below the age required by applicable law to consent to data processing. Do not use the service if you are not legally permitted to agree to this policy.
WhatsApp, Chrome, payment providers and other external services operate under their own terms and privacy policies. This policy does not govern their independent data practices.
15
Changes to this policy
WAContact may update this policy when product behavior, providers or legal obligations change. The revised policy will be posted here with a new effective date. Material changes will be communicated where required, and any new optional data practice will follow the disclosure and consent requirements that apply at that time.
Privacy questions and requests
Contact WAContact
Use the Contact Us page for privacy questions or data-rights requests. Include enough information to identify the relevant account or order, but do not send passwords, complete payment details, private messages or third-party contact lists.