Privacy Policy

Account data: your email address, and either a password (stored as a salted hash — we never see or store it in plain text) or a Google account link (if you sign in with Google, we receive your Google account ID, email, and name from Google — never your Google password).

WhatsApp contact data you extract: names and phone numbers read from WhatsApp groups or chats you select. By default this stays in your browser's local storage. It's only sent to our server when you take a deliberate further action — creating a sending campaign (so recipients can be queued), or saving contacts to your account.

Campaign data: if you create a sending campaign, we store the recipient list (phone numbers, names), the consent date and source you provide for each recipient, the message template used, and delivery status — this is necessary to actually run the campaign and prove consent was recorded.

Billing data: if you subscribe to Pro, Stripe (our payment processor) handles your card details directly — we never see or store your card number. We only store a Stripe customer reference ID to link your account to your subscription.

Admin activity log: actions taken by Senextrac administrators (such as plan or account changes) are logged for accountability.

We don't automatically collect or upload your WhatsApp group member lists in the background — extraction only happens when you click Extract. We don't sell your data to third parties. We don't use your extracted contacts for our own marketing.

Google — for "Sign in with Google" (OAuth). Stripe — for subscription billing. Meta's WhatsApp Business Platform — to actually deliver campaign messages when you send one; recipient phone numbers and template content are sent to Meta as part of delivering your message, the same as any legitimate WhatsApp Business integration.

The web app uses your browser's session storage to keep you signed in during a browser session — no third-party tracking or advertising cookies. The browser extension stores extracted contacts and settings locally using your browser's extension storage.

We keep account and campaign data for as long as your account is active. To request deletion of your account and associated data, email senextrac@gmail.com — we don't yet have a self-service delete button, so this is handled by request.

Senextrac isn't directed at, and shouldn't be used by, anyone under 18.

If this policy changes materially, we'll update the "Last updated" date above.

Questions about this policy: senextrac@gmail.com.