Privacy Policy

WA Bulk Messenger ("we", "our", "us"), operated by WA Bulk Messenger, provides the WA Bulk Messenger Chrome extension and the website at wabulkmessenger.com. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights over it.

By installing the extension or using the website, you agree to this Privacy Policy. If you do not agree, please uninstall the extension and stop using the Service.

1. How the Service Works

WA Bulk Messenger runs as a Chrome extension that operates inside your own WhatsApp Web session, and is backed by an account-based cloud service. Messages are delivered through your own WhatsApp Web session in your browser — we never connect to WhatsApp on your behalf and we never read your incoming WhatsApp conversations.

To provide features such as campaign management, scheduling, follow-up sequences, reporting, and cross-device access, the extension transmits certain data to our servers, where it is stored to operate your account. This section explains exactly what we store and why.

2. Data Stored in Your Browser

Some data is kept locally in your browser by the extension:

• Your login token (JWT) to keep you signed in
• A local AES-256-GCM encryption key used to protect cached data; this key is destroyed when you log out
• Cached copies of your campaigns, templates, and settings for performance
• Feature usage counters

3. Data We Collect and Store on Our Servers

Account Information

• Email address
• Password (stored only as a bcrypt hash — your plaintext password is never stored)
• Display name and profile picture (optional)
• The WhatsApp phone number you send from, used to enforce fair-use limits and prevent abuse

If you sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password.

Campaign & Contact Data

To create, run, schedule, and report on your campaigns across devices, we store the following on our servers:

• Recipient details — the names, phone numbers, country codes, and any custom fields you import or add for a campaign
• Message content — your campaign message text, saved templates, and follow-up sequence messages
• Attachment metadata — file name and type of media you attach (the media files themselves are sent through your WhatsApp Web session, not stored by us)
• Delivery results — per-recipient sent/failed/delivered status and timestamps
• Opt-out list — phone numbers (and optional names) you blacklist so they are automatically skipped

This recipient and message data is stored to operate the Service for you. We do not sell it, share it for advertising, or use it for any purpose other than providing the Service.

Contact Groups (end-to-end encrypted)

When you save Contact Groups, the group contents are encrypted on your device using AES-256-GCM before being uploaded. Our servers store only the encrypted blob, a group name, and a count — we cannot read the contents of your saved Contact Groups.

Billing Data

• Your plan (FREE or PRO) and monthly usage counters
• Payment and subscription reference IDs from our payment processor, Razorpay

Card and payment details are handled directly by Razorpay; we do not receive or store your full card information.

4. AI Features

If you use the optional AI message assistant (available on paid plans) to rewrite a message or generate variations, the message text you submit is sent to our third-party AI provider to generate the result. We do not send your contact lists or phone numbers to the AI provider, and the text is sent only to fulfil your request.

5. Third Parties We Share Data With

We use a limited set of service providers strictly to operate the Service:

• Cloud hosting & database — to host the application and store your account data
• Google — for optional Google Sign-In
• Razorpay — to process payments
• AI provider — only when you use the AI assistant, and only the text you submit
• Email provider — to send transactional emails (verification, billing, password reset)

We do not:

• Sell your personal data to anyone, ever
• Use your data for advertising or ad networks
• Read or store your incoming WhatsApp conversations
• Share your data except with the providers above or as required by law

6. Data Retention

• Account, campaign, and contact data — kept while your account is active. Permanently deleted within 30 days of an account deletion request.
• Billing records — kept as required to comply with applicable financial and tax regulations.
• Locally cached data — removed from your browser when you log out or uninstall the extension.

You can delete individual campaigns, contacts, templates, and Contact Groups at any time from within the extension.

7. How We Protect Your Data

We use HTTPS for all data transmission, bcrypt for password hashing, AES-256-GCM encryption for Contact Groups, and signed JWT tokens with version-based revocation. No method of internet transmission or storage is 100% secure — while we take every reasonable precaution, we cannot guarantee absolute security.

8. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate data.
• Deletion — request deletion of your account and all associated data.
• Data portability — request your data in a machine-readable format.

To exercise any right, email [email protected]. We will respond within 30 days.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has an account with us, contact us at [email protected] and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Minor changes will be reflected by updating the "Last updated" date. Material changes will be communicated to registered users via email at least 14 days before they take effect. Continued use of the Service after changes constitutes your acceptance of the revised policy.

11. Contact Us

For any privacy-related questions or requests:

• Email: [email protected]
• Website: wabulkmessenger.com