Privacy Policy — LeadSync (Contact Saver for WA Web)

Last updated: September 7, 2026

LeadSync (“the extension”, “we”) is an unofficial browser extension that helps you save phone numbers you see on WhatsApp Web into your own Google Contacts. It is not affiliated with, endorsed by, or connected to WhatsApp Inc., Meta Platforms, or Google LLC.

What the extension reads

• WhatsApp Web page content (web.whatsapp.com): the extension’s content script reads visible text in the chat list or an opened group-member list to find phone-number-looking strings. It does not read message contents or media, and it cannot collect numbers that WhatsApp Web does not render in the open list.
• Your Google Contacts (read + write, via the Google People API, scope https://www.googleapis.com/auth/contacts): used to list your existing contacts’ phone numbers (so we can skip duplicates) and to create new contacts from numbers you choose to save.

What never leaves your device

Scraped WhatsApp numbers and your Google Contacts data are processed entirely in your browser. They are sent only to Google’s People API (over HTTPS, using your own OAuth token) — never to any server we operate.

What our backend does see (paid tier only)

If you upgrade to a paid plan, our licensing and account services receive the licensed Google email address, the WhatsApp account number bound to that license, plan and account status, and payment identifiers. Razorpay processes checkout. This binding record is separate from scanning: our backend does not receive the phone numbers or names discovered in chat or group-member lists, your Google Contacts, messages, or media. See the “Data we store” section below.

Data we store

• Locally, in your browser (via chrome.storage): your settings (name prefix, default country, sequence number), a local cache of numbers you’ve already saved (to prevent duplicate saves), and your connection/plan status.
• On our backend (paid tier only): the licensed Google email, bound WhatsApp account number, plan/account status, and payment identifiers for licensing, support, fraud prevention, and transaction records. We do not store the contact numbers or names discovered by a scan, your Google Contacts, messages, or media.

Permissions we request, and why

• storage — save your settings and local dedupe cache.
• identity — get a Google OAuth token via Chrome’s built-in flow.
• scripting / activeTab — run the scanner on the WhatsApp Web tab you’re actively using.
• host_permissions for web.whatsapp.com — read visible chat/member list text.
• host_permissions for people.googleapis.com — talk to the Google People API.

Your controls

• Disconnect your Google account at any time from the extension popup.
• Revoke access entirely at myaccount.google.com/permissions.
• Uninstalling the extension removes all locally stored data.

Honest risk disclosure

Reading WhatsApp Web’s page content is not an officially supported integration and may be against WhatsApp’s Terms of Service. Using this extension, including any automated behavior it enables, is at your own risk, including the risk of action taken against your WhatsApp account. This extension performs read-only scanning; it does not send messages on your behalf.

Website analytics

The public website asks for consent before loading optional Google Analytics or Microsoft Clarity. These services may receive page paths, referral/campaign information, device category, Store-link clicks, and interactions such as starting the demo or checkout. We configure analytics without advertising personalization and never include WhatsApp numbers, contact names, messages, or Google Contacts in event payloads. You can decline analytics and continue using the public website.

Changes to this policy

We’ll update the “Last updated” date above whenever this policy changes materially.

Contact

Questions about this policy or your data: ayaanmotiwala786@gmail.com