Privacy Policy

This policy explains how the Ideaz AI Chrome extension (the "Extension") and the website ideazai.com handle your data.

The Extension is published and operated by Ideaz AI LLP, which also operates under the brand Effess ("we", "us"). Our servers use the domains ideazai.com and api.ideazai.com. Contact: [email protected].

Ideaz AI is an independent product. It is not affiliated with, endorsed by or connected to WhatsApp LLC or Meta Platforms, Inc.

The Extension runs inside WhatsApp Web (web.whatsapp.com) and adds a CRM, kanban pipeline, message scheduler, auto-reply, templates and an AI assistant on top of the WhatsApp account you are already logged into.

1. Summary

• Your contacts, chats, tags, notes, pipelines, templates, campaigns and settings are stored in your browser, on your device.
• To run the free trial and licence, the Extension sends your WhatsApp number, a random install id, a device fingerprint and the Extension version to our server. This only starts after you agree to it on the Extension's welcome screen.
• Contact sync to your Ideaz AI account is optional and off until you turn it on. If you turn it on, your own contact list is stored in your account so it survives reinstalls and follows you between devices. It is never used for any other user.
• Templates, CRM pipelines, pacing presets and auto-reply rules can be synced to your account so they survive reinstalls. You can turn this off in Settings.
• AI, translation and Google features use your own API keys. That content goes straight from your browser to the provider you chose. We never see those keys or that content.
• We do not sell data, show ads, or include analytics, tracking or advertising SDKs.
• Data sent to our servers is encrypted in transit (HTTPS) and at rest (AES-256).

2. Permissions the Extension requests

The Extension does not request access to any other website, your browsing history, clipboard, camera or microphone.

3. Data stored only on your device

Everything the Extension creates is stored locally in your browser, in an IndexedDB database per logged-in WhatsApp number and in chrome.storage.local. This includes:

• contacts and chat metadata read from WhatsApp Web
• tags, notes, CRM deals and pipelines
• message templates and attachments
• campaign recipients and send logs
• scheduled messages, auto-reply rules and reminders
• voice notes
• API keys and webhook URLs you enter

Backups are JSON files downloaded to your computer. Nothing is uploaded when you create a backup.

Uninstalling the Extension removes its chrome.storage data. The per-number database is stored under the web.whatsapp.com site storage of your browser and is removed when you clear site data for web.whatsapp.com.

4. Data sent to our servers

Our API is hosted at api.ideazai.com on servers we operate. Your WhatsApp number is used as your account identifier. There is no separate username or password.

4.1 Licence and free trial (required to use the Extension)

When you first open the Extension, a welcome screen explains what is sent to our server. Nothing is sent until you click "Agree and start trial". After that, on start-up and periodically, the Extension sends:

• your WhatsApp phone number
• a random install id generated on first run
• a device fingerprint (a one-way hash of your browser user-agent, language, platform and the install id), used only to prevent licence sharing
• the Extension version

The server replies with a signed licence token. The 3-day free trial is activated with this first request.

If you buy a plan, payment is handled by Razorpay and is subject to Razorpay's privacy policy. We store only the order reference and the WhatsApp number the plan was bought for. We never receive or store card or bank details.

If you do not agree on the welcome screen, the Extension does not contact our server and its features stay inactive.

4.2 Contact sync to your account (optional, off by default)

Contact sync is off until you turn it on. The Extension asks you on a separate screen, and you can change your choice at any time in Settings → Account → Contact sync.

If you turn it on, about every 15 minutes the Extension syncs new or changed entries from your own WhatsApp contact list to your Ideaz AI account. For each contact this includes:

• WhatsApp chat id
• display name
• phone number
• WhatsApp internal id ("LID")
• whether the number is saved in your phone contacts
• first-seen and last-seen timestamps

It also includes your own number and an optional account label.

We use this data only to:

• show your contacts in your Ideaz AI account dashboard
• restore your contact list after a reinstall
• make your contacts available when you use the Extension on another computer with the same WhatsApp number
• resolve WhatsApp internal ids to phone numbers using only the contacts in your own account

Your synced contacts are used only for your account. They are never shown to, shared with, or used to answer lookups for any other user, and they are never sold or rented.

If you turn contact sync off, syncing stops immediately and you can choose to delete the contacts already stored in your account from the same Settings screen. Deletion from our servers is completed within 30 days.

The people in your contact list have not agreed to this policy. Where your local law requires it, you are responsible for having a lawful basis to store their details in your account.

4.3 Workspace sync (optional, on by default, can be turned off)

Message templates (including attachments), CRM pipelines and deal cards, bulk-sender pacing presets and auto-reply rules are synced with your account so they survive reinstalls and follow you to another computer. You can turn this off in Settings → Account → Workspace sync.

Campaign recipients, chat contents and send logs are never synced.

4.4 Optional features that send more data

These features only run if you turn them on yourself.

• API Access, webhooks and n8n. The Extension keeps a live connection to our server so your own systems can send messages through your WhatsApp, and incoming messages are forwarded to the webhook or n8n workflow you configured. Message contents pass through our server only to relay them and are not stored after delivery.
• Cloud inbox. If you connect an official WhatsApp Business (Cloud API) number through Effess, those conversations are fetched from and sent through our platform. The Effess platform policy applies to that data.
• Official API portal. The "Official API" button asks our server for a one-time login link to v1.effess.in using your number and licence token.
• Help and bug reports. When you submit the form, your text and the Extension version are sent as a WhatsApp message to our support line, and a support ticket is stored with your number on our server. Our support team reads only what you send in the form.
• Rating prompt. If you answer it, the star rating and comment you type are stored with your number. Reviews on the Chrome Web Store are handled by Google.

5. Third-party services you connect (your own keys)

Some features only work with credentials you provide. The Extension stores them on your device and calls the provider directly from your browser. We never proxy, log or see the key or the content. Each provider's privacy terms apply to what you send:

• AI assistant, message variants, voice-note transcription: OpenAI, Anthropic, Google Gemini, Groq or xAI receive the message text, voice audio or chat context you ask them to process.
• Auto-translate: Google Cloud Translation or DeepL receive the text being translated.
• Google Sheets, Calendar and Contacts: a Google Apps Script web app that you deploy in your own Google account receives the chat rows, events or contacts you choose to sync.
• Your webhooks: any URL you enter receives the events you selected.

6. Limited Use disclosure

The use of information received from the Extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically:

• We use user data only to provide and improve the Extension's features described in this policy.
• We do not transfer user data to third parties except as needed to provide those features (for example, our hosting provider and Razorpay), to comply with the law, for security purposes such as investigating abuse, or as part of a merger, acquisition or sale of assets.
• We do not use or transfer user data for personalised, retargeted or interest-based advertising.
• We do not allow humans to read user data, except when you ask us to (for example, a support request), when needed for security or to comply with the law, or when the data has been aggregated and anonymised for internal operations.
• We do not sell user data, and we do not use it to determine creditworthiness or for lending purposes.

7. Your responsibilities when messaging

You decide who to message, when and what to say. You must follow WhatsApp's Terms of Service and all applicable anti-spam and data-protection laws, including getting consent from recipients where required. The Extension's pacing controls reduce risk but do not guarantee that WhatsApp will not restrict a number. The Extension must not be used to send unsolicited messages.

8. Retention and deletion

• On your device: data stays until you delete it, clear site data or uninstall (see section 3).
• On our servers: licence records, synced contacts (if enabled), workspace data, tickets and ratings are kept while your number has an active trial or licence and for up to 90 days after it ends, then deleted or anonymised. Payment records may be kept longer where tax law requires it.
• Delete now: email [email protected] and include the WhatsApp number in question so we can verify it is yours. We complete deletion within 30 days and confirm back to you.

Depending on where you live, you may have the right to access, correct, export or restrict processing of your data, including under India's Digital Personal Data Protection Act, 2023. Use the same contacts to make a request.

9. Security

• All traffic between the Extension and our servers uses HTTPS (TLS 1.2 or higher).
• Data stored on our servers is encrypted at rest using AES-256.
• Licence tokens are cryptographically signed and verified on your device.
• Data on our servers is isolated per account. One account cannot access another account's data.
• Access to production servers is limited to authorised staff.
• Keys for third-party services never leave your device except to go to that provider.

No method of storage or transmission is completely secure, so please keep your computer and browser profile protected.

10. Children

The Extension is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has used the Extension, contact us and we will delete the data.

11. Changes to this policy

We will post changes on this page with a new "Last updated" date. If a change means the Extension will send new types of data to us, or use data in a new way, the Extension will show a notice and ask for your agreement before that version starts doing so.

12. Contact

Ideaz AI LLP (Effess)
Email: [email protected]
Extension listing: Chrome Web Store