Privacy Policy

1. Summary

• Your contacts, messages and notes stay in your browser, with the extension. If you turn on the panel on your phone, a copy also stays in your Google Drive.
• We have no server that receives this data, and neither the extension nor the panel has ads or usage analytics.
• Our website's public pages use Google Analytics only if you accept it on the site. It never sees your contacts or messages.
• To send messages you connect an account, which holds your email, subscription status, the country of your connection and, if you sign in with Google, your name.
• We do not sell data, and we share it only with the providers named in this policy.
• Messages are sent through WhatsApp Web, which follows the rules of WhatsApp and Meta.
• Auto-reply is optional. If you turn it on, the extension reads the messages of conversations in progress in order to answer, and what it keeps stays in your browser (section 11).
• The one exception to the above is the Premium plan's AI chatbot, which is optional. If you turn it on, your knowledge base and the recent messages of each conversation pass through our server to Anthropic to write the reply (section 11).

2. What BetterZap stores

All of this is kept in the extension's local storage, in this browser:

• What you type: contacts (name, phone, pipeline stage, notes, follow-up date, consent), scheduled messages and their send history, templates, saved lists, pipeline columns and preferences.
• What the extension reads from WhatsApp Web open in your browser: the name, phone number and profile picture link of your WhatsApp contacts, so you can pick recipients without typing.
• A record of each send: time, result and errors, to show the status and avoid duplicate messages.
• The files you attach to a message (images and PDFs), until it is sent or canceled. They stay in this browser and leave only through WhatsApp, to the person you send them to.
• Your theme choice (light or dark) and whether you answered the request for a review, kept in the browser.

3. What the extension does not do

• It does not send contacts, messages or notes to us. They only leave the browser for your own Google Drive, and only if you turn on the panel on your phone (section 10).
• It does not use tracking cookies, ads, usage analytics or automatic error reports.
• It does not read your conversations beyond what is needed to open the right chat, paste the message and confirm the send. The only exception is auto-reply, and only if you turn it on (section 11).
• If you tick "Cancel if the chat has something new" on a message, the extension looks at the time of that chat's last activity, in WhatsApp Web's own data in your browser, without opening the chat or reading any text. That information does not leave the browser.
• It does not contact any site other than WhatsApp Web and, for your account, BetterZap. With the panel on your phone turned on, it also contacts Google.

4. WhatsApp and Meta

BetterZap works inside WhatsApp Web. When a message goes out, WhatsApp carries it, and how it is handled follows the privacy policy and terms of WhatsApp and Meta, which we don't control.

Profile pictures are loaded straight from WhatsApp's servers. As with any image loaded from the internet, WhatsApp can see that your browser requested them.

5. Browser permissions

• Access to web.whatsapp.com: read contacts, open chats and send scheduled messages. With auto-reply on, also read conversations in progress and answer them.
• Storage: keep your data in this browser.
• Alarms: wake the extension at send time.
• Scripting: place BetterZap into a WhatsApp Web tab that was already open.
• Power: stop the computer from going to sleep by itself in the hours before a scheduled send. This permission gives no access to any data.
• Identity: ask Google for access to BetterZap's folder in your Google Drive, only if you turn on the panel on your phone.
• Notifications: tell you when a conversation needs you. It is optional, and the browser only asks for this permission if you tick that alert in auto-reply.

6. Your data about other people

The contacts and phone numbers you keep are other people's personal data. Under data protection laws such as Brazil's LGPD (Law 13.709/2018) and the GDPR in the European Union and the UK, you decide what to do with them and answer for it (the "controller"). BetterZap is the tool you use and does not receive this data.

So use this data only to contact people who agreed to receive your messages, and honor anyone who asks you to stop or to delete their data. The "Agreed to receive messages" field is there to help you record that.

7. Export and delete

• In Contacts, "Export contacts" and "Export messages" download your data as CSV.
• Also in Contacts, "Download backup" makes a file on your computer with contacts, pipeline, templates, lists, flows and history, which "Restore backup" brings back. That file holds other people's personal data and is not encrypted, so keep it somewhere safe.
• You can delete contacts, templates, lists and messages at any time inside BetterZap.
• When you uninstall the extension, the browser erases all of its data. Export first if you want a copy. If the panel on your phone is on, turn it off first, because uninstalling does not delete the copy in your Google Drive. The browser then opens a page on our website asking why, and answering is optional.
• Because we hold no copy, we cannot recover lost data.

8. Your rights

Data protection laws such as the LGPD and the GDPR give you, among other rights, the right to confirm whether data is processed, and to access, correct, delete and move your data to another service. Because contacts and messages are only with you, you exercise these rights directly in BetterZap through editing, deletion and CSV export. For your account data, contact us.

If you have a question about this policy, write to contato@betterzap.app.

9. Account and subscription

Your account holds your email address, subscription status and the country you last signed in from, on Cloudflare servers. Cloudflare works out the country from your connection, and we do not keep your IP address for this. We use this data to know who our customers are and to support them. When we help you, we may keep a short note about it on your account, such as what you asked, which only we see and which we delete if you ask. About once a day, the extension asks our server to check your subscription. That check includes no contacts or messages.

Payments are handled by Stripe, which receives your payment details directly. Sign-in emails and the notice before your free trial ends are sent through Resend.

When you start the free trial, we keep the page's language, the time zone of your connection, which Cloudflare works out, and whether the page showed Brazil's prices. We use them to send a single email about two days before the trial ends, in your language and with the date in your time. It isn't sent if you already have a paid plan.

If you create your account from another customer's referral link, we keep on your account who referred you and, when you pay for a month or more, the date of that payment, to give that person their reward. They only see how many accounts their link brought, how many paid and how many days they earned, never who they are. Your own link and those counts reach the extension with the subscription check.

To stop sign-in emails being abused, each sign-in request keeps the email address entered and a hash of the requester's IP address for up to two days.

To check that a person is asking, the sign-in form uses Cloudflare Turnstile. When the form appears, your browser loads Turnstile from Cloudflare, which receives your IP address and technical information about your browser and device. We receive only the result of the check and do not keep this information.

If you use the ideas and errors button in the panel, we keep what you write with your account's email, your plan and the name of your browser and system, on Cloudflare servers, to fix problems and improve BetterZap. An error report is seen only by you and us. An idea appears to other customers only after we review it, without your name or email, and we keep each account's votes. We ask you not to write your customers' details there. You can ask us to delete what you wrote.

If you choose to sign in with Google, Google confirms your email address to us and sends an identifier for your Google account, which we keep to recognize you, plus your name and the address of your profile photo. We keep the name with your account and do not keep the photo. We do not receive your Google password, and we do not keep Google access tokens.

The last-updated date is at the top of this page.

10. Panel on your phone

The panel on your phone is optional, stays off until you turn it on from your computer, and requires signing in with a Google account. Anyone who signs in only with an email link does not get it.

When you turn it on, the extension keeps a copy of your contacts, messages, templates, lists and pipeline stages, and of auto-reply (your flows, rules, chatbot knowledge base and the conversations described in section 11), in a hidden BetterZap folder in your own Google Drive account. Only BetterZap can open that folder, and it does not appear among your Drive files. The access you grant is limited to it and cannot see your other files.

Google handles that copy under your Google account's terms, and it may use your account's storage. It does not pass through our servers, which never receive the access you give Google. Your phone talks directly to Google, and what you do on it waits in that folder until your computer picks it up.

Messages still go out only from your computer, through WhatsApp Web: the phone does not open WhatsApp. When you turn off the panel on your phone or disconnect your account, the extension deletes the folder and ends the access. If you remove the access from your Google account instead, stop using the panel on your phone and, to delete the folder, use the option to delete app data in Google Drive's settings.

11. Auto-reply

Auto-reply is optional and stays off until you turn it on. When on, it answers people who write to you following the flow you chose, or only one test number if you choose test mode.

To notice new messages, the extension checks WhatsApp Web's list of chats, which holds who wrote and when, without the text. It opens a chat and reads its messages when something new arrives in a conversation in progress. It does not read groups, archived or muted chats, your chat with yourself, messages from before you turned it on, or conversations already handed to you. The first message of a new conversation is not read.

In this browser, the extension keeps for each conversation: the name, phone number, where it is in the flow and the person's answers, including words BetterZap could not match, to show you when the conversation reaches you. It also keeps who asked to stop receiving messages, even if you delete the contact, so that nobody writes to them again. You can clear that request on the contact's card. A flow can also create contacts, with tags and a pipeline stage.

None of this is sent to us. With the panel on your phone turned on, a copy goes to your Google Drive (section 10), so you can follow and adjust auto-reply from your phone. It still reads and replies only from your computer. In the browser, it stays until you uninstall the extension, which erases it all.

The people who write to you are the subjects of this data, and you are the controller, as section 6 explains. It is up to you to tell them they are talking to automatic replies and to honor anyone who asks you to delete their data.

The Premium plan's AI chatbot is optional and stays off until you turn it on. When on, it opens the chat and also reads the first message, which then shows as read. To write each reply, the extension sends our server your knowledge base and up to the 12 most recent messages of that conversation, and our server passes them to Anthropic, a United States company that provides the AI model and handles them under its own terms. Our server does not keep that text, only your account's count of replies for the month. Your knowledge base stays in your browser and, with the panel on your phone turned on, also in your Google Drive. Do not put anyone's personal data, or anything that must stay secret, in it. It is up to you to tell the people who write to you that they are talking to an AI.

12. Children

BetterZap is a professional tool for adults and is not directed at anyone under 18.

This website

• This website uses no ads. If you sign in, it sets one strictly necessary cookie to keep you signed in, plus a second one for up to 10 minutes while you sign in with Google.
• Its public pages use Google Analytics only if you accept it in the banner, so we can see which pages people visit and where they come from. Google then sets cookies that last up to two years and receives your IP address, the pages you open and technical details about your browser and device, and may process them outside your country. Its ad features are off. If you decline or ignore the banner, it does not load. It never runs on your account or the Panel, on a computer or on your phone. You can change your mind at any time with Cookie preferences in the footer, which also removes those cookies.
• An account holds your email address, subscription status and the country of your connection. Sign-in emails are sent through Resend. If you choose to sign in with Google, Google confirms your email address to us and we keep your name and an identifier for your Google account, but never your Google password. Payments are handled by Stripe, which receives your payment details directly, so they never reach our servers.
• If you arrive through a link from one of our ads or campaigns, a cookie remembers that campaign’s name for up to 30 days, and is removed when you sign in. If you then create an account, we save the name on it, to learn which campaigns bring customers. It only holds the campaign’s name, isn’t sent to any ad network and doesn’t follow you to other sites.
• If you arrive through a customer’s referral link, the same cookie keeps the link’s code, and a second cookie only says that you were referred, so the site can offer the longer trial. Both last up to 30 days and are deleted when you sign in. If you create an account, we keep on it who referred you. That person only sees how many accounts their link brought and how many paid, never who they are.
• Your contacts and messages are not part of your account: they stay in the extension in your browser and, if you use the panel on your phone, in your own Google Drive.
• The Panel page shows the extension’s own screen inside a frame. The website can’t read what appears there, and nothing you do in it is sent to us.
• It also stores your light or dark theme in your browser, your choice about Google Analytics, a note that you are signed in, and briefly a request from the extension to connect or a note that you are signing in. Those are not sent to us.
• We use your browser’s language and the country of your IP address to choose the language and currency you see, and we don’t save them for this. If you pick a language yourself, a cookie remembers that choice for a year.
• When you remove the extension, Chrome opens a page that asks why. Answering is optional. We save the reason you pick, anything you write, the page’s language and the extension’s version, for up to two years, with nothing that points to your account. To limit abuse we also keep a scrambled form of your IP address for up to two days.
• Like any web host, our hosting provider may keep standard server logs, such as IP address and requested page, to run and secure the service.