Legal

Privacy Policy

Last updated: 25 May 2026

WA Bulk Messenger ("we", "our", "us"), operated by WA Bulk Messenger, provides the WA Bulk Messenger Chrome extension and the website at wabulkmessenger.com. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights over it.

By installing the extension or using the website, you agree to this Privacy Policy. If you do not agree, please uninstall the extension and stop using the Service.

1. Our Core Privacy Commitment

WA Bulk Messenger is designed privacy-first. Your WhatsApp contact data (phone numbers and names) is never stored on our servers. All contact data is encrypted on your device using AES-256-GCM before any local storage operation. When you log out, the encryption key is destroyed, making all stored contact data permanently unreadable — even to us.

2. What Data the Extension Collects

The extension operates on your local device. To function correctly, it stores the following data in your browser:

  • Phone numbers and names you input or import for a campaign
  • Message templates you save within the extension
  • Scheduled campaign tasks and timing preferences
  • Your login token (JWT) to keep you signed in
  • Feature usage counters to enforce plan limits

Contact data is never transmitted to our servers. All campaign operations happen entirely on your device with WhatsApp Web open in your browser.

3. Account & Billing Data We Store

Account Information

When you create an account, we collect:

  • Email address
  • Password (stored as a bcrypt hash — your plaintext password is never stored)
  • Display name (optional)

If you sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password.

Billing Data

  • Messages sent this month (quota counter)
  • Campaign names and creation timestamps (not the message content or phone numbers)
  • Billing plan (FREE or PRO) and Razorpay payment reference IDs

Contact Data (stays on your device)

Phone numbers and names you import are processed entirely on your device. When you use Contact Groups, groups are encrypted with AES-256-GCM before being saved to your browser's local storage. The encryption key is destroyed when you log out.

We do not store your contacts on our servers — ever.

4. How We Use Your Information

  • Account management — authenticate you, reset your password, verify your email.
  • Service delivery — track your monthly quota, enforce plan limits, process billing via Razorpay.
  • Security — detect abuse, prevent fraud, investigate suspicious activity.
  • Transactional emails — welcome email, verification, billing confirmation, password reset. We do not send marketing emails without your explicit consent.

We do not:

  • Sell your personal data to anyone, ever
  • Use your data for advertising or ad networks
  • Read, access, or process your WhatsApp messages
  • Share your data except as described in this policy

5. Data Retention

  • Account data — kept while your account is active. Permanently deleted within 30 days of an account deletion request.
  • Billing records — kept for 7 years to comply with Indian financial regulations.
  • Contact data — lives only on your device. Destroyed when you log out or uninstall the extension.

6. How We Protect Your Data

We use HTTPS for all data transmission, bcrypt for password hashing, AES-256-GCM for contact encryption, and RS256 JWT tokens with version-based revocation. No internet transmission is 100% secure — while we take every reasonable precaution, we cannot guarantee absolute security.

7. Your Rights

You have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Correction — request correction of inaccurate data.
  • Deletion — request deletion of your account and all associated data.
  • Data portability — request your data in a machine-readable format.

To exercise any right, email admin@wabulkmessenger.com. We will respond within 30 days.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has an account with us, contact us at admin@wabulkmessenger.com and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Minor changes will be reflected by updating the "Last updated" date. Material changes will be communicated to registered users via email at least 14 days before they take effect. Continued use of the Service after changes constitutes your acceptance of the revised policy.

10. Contact Us

For any privacy-related questions or requests:

Terms & Conditions → Refund Policy → ← Back to Home