Privacy Policy

Effective date: 17 September 2026

Overview

Thrive WAP Sender is a Chrome extension and backend service operated by Thrive Digital Labs. The extension helps users prepare WhatsApp Web campaigns, import opt-in contacts, manage message templates, track local reports, verify licenses, and request support.

Information we collect

• Account and license data: license key, WhatsApp number, plan, status, expiry date, device ID, and usage limits.
• Trial data: WhatsApp number and browser/device ID used to prevent repeated free trials.
• Support data: support topic and message submitted by the user.
• Campaign metadata: campaign name and aggregate counts such as total contacts, sent, skipped, and failed.
• Local extension data: contacts, message drafts, templates, campaign state, and reports are stored in Chrome local storage on the user's browser.

How we use information

• Verify licenses and subscription status.
• Provide a 3-day trial and prevent repeated trial abuse.
• Operate campaign progress and reporting features.
• Provide support and billing assistance.
• Protect the service from unauthorized access or misuse.

Sharing

We do not sell user data. Data may be processed by service providers needed to run the product, including Hostinger for website/hosting and Supabase for database storage (the earlier Vercel deployment processed data only during the transition and is being retired). WhatsApp Web is operated by WhatsApp/Meta and is subject to their own terms and policies.

WhatsApp message content and contacts

The extension stores contacts, message drafts, templates, and campaign reports locally in the user's Chrome browser. The backend is designed to store license, trial, support, and aggregate campaign data. Users are responsible for ensuring they have permission to contact recipients.

Chrome permissions

The extension requests access to Chrome storage, tabs, alarms, downloads, WhatsApp Web, wa.me links, and the Thrive WAP Sender backend. These permissions are used to save local extension data, open prepared WhatsApp Web chats, schedule the next contact, export reports, and verify licenses.

Data retention

License and trial records are retained while required to provide access, prevent abuse, and support billing. Local browser data can be cleared by removing extension data or uninstalling the extension.

Security

Admin access is protected by email/password login using environment variables and a secure HttpOnly session cookie. Sensitive backend keys are stored only as server-side environment variables on the hosting platform (Hostinger) and in the Supabase project.

Contact

For privacy requests, contact Thrive Digital Labs through the support link on the website or extension.