Bulk Sender · WAWebSenderPrivacy Policy for Bulk Sender
Last updated:
This policy explains how Bulk Sender, a WAWebSender product, processes information through its Chrome extension and related activation, checkout, uninstall-feedback, and support services. The Chrome Web Store extension ID is fhkimgpddcmnleeaicdjggpedegolbkb.
WAWebSender is responsible for the Bulk Sender data practices described here. In this policy, “we” and “our” refer to WAWebSender. Bulk Sender is an independent product and is not affiliated with or endorsed by WhatsApp LLC or Meta Platforms, Inc.
Important information about your data
- Bulk Sender works with your signed-in WhatsApp Web session to prepare messages, manage sending tasks, and perform the other features you select. It can store lists, drafts, settings, progress, and selected files in your browser.
- Some information also leaves your device. Diagnostic logs can contain your WhatsApp account number, recipient numbers, message text, personalized content, button text, sending results, and error details. These logs are transmitted to Alibaba Cloud Log Service in the United States.
- AI rewriting sends the text to be rewritten and rewriting instructions through our backend to OpenAI. AI input and returned rewrites can also appear in diagnostic logs.
- Account and purchase information is processed by our backend and the relevant payment and email providers. An IP-location provider receives your IP address when the location lookup runs. The sections below identify these recipients and explain storage and retention.
1. Information used within WhatsApp Web
Depending on your selected features, Bulk Sender reads or processes your account number; available contact names and phone numbers; group, community, label, and membership information; imported spreadsheet rows; recipient lists; message drafts and templates; personalization values; button labels and links; selected images, video, documents, audio, and voice recordings; scheduled tasks; and sending results. Automatic replies also process incoming messages and your reply rules to determine the response you configured.
These inputs are used to prepare and send messages, personalize content, schedule tasks, export information, check accounts, and apply automatic replies or display preferences. Messages and media that you send are transmitted through WhatsApp Web to WhatsApp/Meta and your selected recipients. Those parties handle received data under their own policies.
Lists, drafts, media, settings, and task progress may remain in browser memory or chrome.storage.local so the Extension can operate or resume a task. Selected display preferences are stored in chrome.storage.sync; Chrome may synchronize them through your Google account when Chrome Sync is enabled. Exported files are saved to your selected download location.
2. Information transmitted for operation and diagnostics
Account and license information
Our APIs at wawebsender.com receive your WhatsApp account number when checking access or plan status. Activation requests include the number and activation code. Transaction and subscription requests can include transaction identifiers and related account information. Our backend maintains records used to provide paid access, activate or rebind licenses, manage subscriptions, and process cancellations or support requests.
Usage, sending, and failure records
The Extension sends diagnostic events to Alibaba Cloud Log Service. Fields can include event names and times; installation and first-send times; installation UUID; installed and current Extension versions; browser type, user agent, platform, and language; account number; country inferred from that number; selected features and settings; task, chat, and message identifiers; recipient numbers; sending status; delivery acknowledgements; and errors.
Sending diagnostics can include the message body, resolved personalization values, button text, and recipient numbers. Some validation or export-diagnostic events include entered or invalid recipient numbers. Failure investigation can also record relevant dialog text and HTML, chat identifiers, and the state of the message composer. These records can contain information about the people you contact.
API diagnostics can record request URLs, request parameters, response bodies, errors, and timing. Depending on the API, these records can contain account, activation, transaction, location, or AI information. Truncation of a field does not make it anonymous.
Selected media is processed for sending through WhatsApp Web. The Extension does not routinely upload the selected attachment or audio files themselves to our application servers; diagnostic records can still contain media types, results, related text, and other information described above.
Location and connection information
When the Extension requests IP-based location, ip-api.com receives the connection's IP address. Its response may contain that IP address, country and region, city, approximate coordinates, timezone, and network or internet-provider details. Bulk Sender caches this information for regional availability and related functionality. The response can also be included in API diagnostic logs sent to Alibaba Cloud.
Configuration and style requests to cdn2.waplus.io, and connections to our APIs and selected help pages, expose ordinary connection information such as IP address, request time, and browser headers to the destination and its hosting or delivery providers. Those providers are identified in section 6.
3. AI rewriting
When you use AI rewriting, Bulk Sender sends the draft text, the requested number of alternatives, and applicable access context to our backend. Your WhatsApp account number accompanies that request for access checks and service diagnostics. Our backend sends the text and rewriting instructions through its configured AI gateway to OpenAI to generate alternative wording. Retries may send the same prompt again.
The model request contains the draft text and instructions. Your account number is not added as a separate field in that request, but any names, phone numbers, or other personal information included in the draft remain part of the text sent to OpenAI. This integration uses text generation to produce rewrites and does not submit model-training or fine-tuning jobs.
OpenAI's API data policy states that API inputs and outputs are not used to train or improve its models by default, unless the API customer explicitly opts in to data sharing. See OpenAI API data controls. OpenAI's retention rules are described in section 7.
The frontend API logs can contain the original rewrite text, your account number, and returned alternatives. Backend error logs can also contain the prompt and account context. Those log copies follow the relevant diagnostic retention rules below.
4. Purchases, activation emails, uninstall feedback, and support
When you purchase access, we process information such as your email address, account number when available, selected plan and price, payment method category, transaction reference, payment status, and subscription or activation details. Hosted payment services collect the payment credentials you enter on their own pages. The Extension's popup does not collect full card credentials.
The supported payment integrations include Stripe and ClinkBill, depending on the payment route offered. Checkout information such as email, order or plan references, amount, and currency is provided as required by that route. We receive transaction results to fulfill access and administer subscriptions. The payment provider shown during checkout supplies its own privacy information for the payment information it collects.
We use Resend to deliver Bulk Sender license and transaction-related emails. It receives the destination email address and email content, which can include license keys and subscription-related links or transaction references.
After uninstalling the Extension, Chrome may open our feedback page at wawebsender.com/waplus-sender-uninstall/. The URL can include your WhatsApp account number in the utm_source parameter, installation UUID, installation time, country, Extension versions, product name, and language. These values are sent to that website when opened and can appear in browser history, access logs, and feedback records.
If you contact support, we process the contact details, issue description, correspondence, and any screenshots or files you provide. WAWebSender support personnel process this information to respond to your request. We do not use an external customer-support service provider.
5. Purposes
We process information to perform requested WhatsApp Web actions; maintain lists, drafts, schedules, and task progress; generate AI rewrites; check license access; fulfill purchases and send activation emails; administer subscriptions; investigate sending, compatibility, and service failures; measure feature reliability; provide regional functionality and configuration; respond to support and privacy requests; and meet applicable legal obligations.
Collection and use are limited to the disclosed features and supporting services. We do not sell personal data, transfer it for personalized or interest-based advertising, or use it for lending or creditworthiness decisions.
6. Recipients
| Recipient | Information and reason for receiving it |
|---|---|
| WAWebSender service infrastructure, including Alibaba Cloud hosting and database services | Account, license, order, subscription, purchase, uninstall, support, AI-service, and connection information needed for the services described above. |
| Alibaba Cloud Log Service | Account and installation identifiers, device details, recipient numbers, message and button text, API input and output, sending diagnostics, and failure information. Frontend and backend diagnostic logs are stored in the United States us-west-1 region, retained for up to seven days, and automatically deleted when that period expires. |
| OpenAI (AI rewriting) | Draft text, rewriting instructions, generated alternatives, and service connection information needed to generate rewrites. Text is sent through our backend's configured AI gateway. Our backend uses your account context for access checks and diagnostics. OpenAI's retention rules are described in section 7. |
| ip-api.com | Your IP address for location lookup; the returned location and network details are used by the Extension and can enter our diagnostic logs. |
| WhatsApp/Meta and selected message recipients | Contact or group identifiers, messages, attachments, and audio you direct the Extension to send. |
| Stripe and/or ClinkBill, as offered at checkout | Relevant checkout and order details, information you enter on the hosted payment page, and transaction outcomes. |
| Resend | Your email address and the content of license, activation, or subscription emails. |
| Google, through Chrome Sync | Display preferences stored in chrome.storage.sync when synchronization is enabled. |
WAWebSender / WAPlus product-family configuration and support infrastructure, including cdn2.waplus.io and user-selected support destinations | Connection metadata and support information needed to deliver configuration, styles, or assistance. |
Where legally necessary, information may also be provided to authorities, legal advisers, or parties involved in a corporate transfer, subject to applicable legal requirements and safeguards.
7. Storage, retention, and deletion
| Category | Location and retention |
|---|---|
| Local lists, drafts, media, settings, and task progress | On your device in browser memory or Extension storage, until removed through available controls, cleared in Chrome, or removed with the Extension. Downloaded exports remain until you delete those files. |
| Synced display preferences | Through Chrome Sync, according to your Google account and Chrome Sync controls. |
| Frontend diagnostic logs | Alibaba Cloud, United States us-west-1. Diagnostic logs are kept for up to seven days and removed automatically by the configured rolling-retention policy. |
| Backend logs and request/error records | Alibaba Cloud, United States us-west-1, under the same retention policy as frontend diagnostic logs: retained for up to seven days and automatically deleted when that period expires. This includes AI prompt or request/response records contained in backend logs. |
| Orders, licenses, subscriptions, and transaction records | Stored in WAWebSender's order, license, and subscription systems using Alibaba Cloud infrastructure. Records are kept while needed to provide and audit paid access, resolve billing disputes, and meet accounting or legal duties, then deleted or anonymized when no longer required. |
| OpenAI API records | OpenAI handles processing locations, retention, and deletion under its API data controls. Abuse-monitoring logs may include prompts and responses and are normally kept for up to 30 days, with longer retention for legal or safety reasons. The Responses API stores response data for at least 30 days by default. Applicable account controls can change retention. These provider records have separate retention from our seven-day diagnostic logs. |
| Uninstall, support, and privacy-request records | Stored in WAWebSender feedback and support systems, operated by our own team without an external customer-support service provider. Records are retained to investigate feedback, resolve requests, and document the response, then deleted or anonymized unless legal obligations require longer retention. |
| Payment, email, location-provider, and other service-provider records | Retained by the relevant providers under the applicable service arrangements, their privacy policies, and legal obligations. |
We do not maintain separately exported or archived copies of frontend or backend diagnostic logs.
Uninstalling Bulk Sender or clearing Extension storage does not automatically erase cloud logs, completed order records, emails, exported files, or messages already sent through WhatsApp. Contact us to request deletion of information we control, subject to identity verification and applicable retention obligations.
8. Permissions and access
| Permission | Function |
|---|---|
storage and unlimitedStorage | Store settings, identifiers, lists, drafts, selected media, and task state. |
activeTab and scripting | Support interaction with the permitted WhatsApp Web page and Extension features. |
alarms | Trigger scheduled sending and Extension maintenance tasks. |
*://*.whatsapp.com/* | Run the Extension on WhatsApp Web and access information needed for the selected features. |
Optional *://*/* host access | Allow additional network requests for service features after site access is granted. Optional permissions can be managed in Chrome. |
9. International processing and security
Data may be processed outside your country. Frontend and backend diagnostic logs are stored in the United States. OpenAI and other service providers may process information outside your country under their applicable service arrangements and data policies. Where required, international processing is subject to the safeguards applicable to our service arrangements and legal obligations.
The production application API at wawebsender.com and frontend Alibaba Cloud log ingestion use HTTPS. In version 1.3.33, the configured IP-location lookup uses HTTP. The backend AI-gateway connection is also configured with HTTP. These connections do not, by themselves, provide TLS transport protection. Uninstall URL parameters may be recorded in history or access logs even when the page uses HTTPS.
Local data is stored through Chrome's Extension storage interfaces. We restrict access to server records and logs according to the human-access rules in section 11. No system can guarantee absolute security.
10. Choices and requests
You choose the contacts, drafts, files, and sending actions used with Bulk Sender. You can remove local information using available feature controls, clear Extension storage, manage optional site permissions, control Chrome Sync, delete exports, or uninstall the Extension. Avoid triggering AI rewriting if you do not want draft text sent to OpenAI; other diagnostic processing can still occur while the Extension is used.
For requests to access, correct, delete, restrict, or export personal information where applicable, contact the Bulk Sender team. Include enough information to locate the relevant records, such as your account number, purchase email, or installation ID. We may request identity verification and explain any applicable retention requirements. Do not send payment credentials or account passwords.
Where consent is required, we provide the applicable notice and obtain your affirmative choice before the relevant collection or use.
11. Chrome Web Store Limited Use and human access
Information obtained through Chrome APIs and WhatsApp Web is used and transferred only for the disclosed Bulk Sender features and supporting operations, subject to Chrome Web Store requirements. It is not sold, used for personalized advertising, or used to determine creditworthiness or for lending.
Human access to personal information, including message content in diagnostic logs, is limited to the circumstances permitted by the applicable Chrome Web Store Limited Use requirements, such as specific user consent to read particular data, necessary security investigation, legal compliance, or appropriately aggregated and anonymized internal operations.
12. Legal bases, children, updates, and contact
Where applicable, our legal bases are providing requested services and paid access under our contract with you; legitimate interests in operating and securing the service where permitted; consent where required; and compliance with legal obligations. These bases do not replace Chrome Web Store disclosure or consent requirements.
If you believe a child's personal information has been processed without legally required authorization, contact us so we can investigate and take the appropriate action under applicable law.
We will update this policy when the Extension or its data practices change and revise the date above. Material changes will receive any additional notice or consent required by applicable law or Chrome Web Store policy.
For privacy questions, contact the Bulk Sender team at WAWebSender. Website: WAWebSender. Please identify the product as Bulk Sender.