Privacy Policy — LeadSync (Contact Saver for WA Web)

Last updated: July 2, 2026

LeadSync ("the extension", "we") is an unofficial browser extension that helps you save phone numbers you see on WhatsApp Web into your own Google Contacts. It is not affiliated with, endorsed by, or connected to WhatsApp Inc., Meta Platforms, or Google LLC.

In one sentence: All processing happens locally in your browser. Numbers you scan go only to your own Google Contacts, via Google's own API, using your own Google sign-in. We do not operate servers that receive, store, or process your contacts or WhatsApp data.

What the extension reads

WhatsApp Web page content (web.whatsapp.com): the extension's content script reads visible text in the chat list and group-member panels to find phone-number-looking strings. It does not read message contents, media, or anything outside the list/member views it scans.
Your Google Contacts (read + write, via the Google People API, scope https://www.googleapis.com/auth/contacts): used to list your existing contacts' phone numbers (so we can skip duplicates) and to create new contacts from numbers you choose to save.

What never leaves your device

Scraped WhatsApp numbers and your Google Contacts data are processed entirely in your browser. They are sent only to Google's People API (over HTTPS, using your own OAuth token) — never to any server we operate.

What our backend does see (paid tier only)

If you upgrade to the paid tier, our license-check backend receives your Google account email address and a payment confirmation from our payment processor (Razorpay), so it can mark your email as licensed. It does not receive WhatsApp numbers, contact names, or contact phone numbers. See the "Data we store" section below.

Data we store

Locally, in your browser (via chrome.storage): your settings (name prefix, default country, sequence number), a local cache of numbers you've already saved (to prevent duplicate saves), and your connection/plan status.
On our backend (paid tier only): a record mapping your Google email to a paid/unpaid license flag and a payment ID, for as long as your license is active. We do not store WhatsApp numbers or contact details server-side.

Permissions we request, and why

storage — save your settings and local dedupe cache.
identity — get a Google OAuth token via Chrome's built-in flow.
scripting / activeTab — run the scanner on the WhatsApp Web tab you're actively using.
host_permissions for web.whatsapp.com — read visible chat/member list text.
host_permissions for people.googleapis.com — talk to the Google People API.

Your controls

Disconnect your Google account at any time from the extension popup.
Revoke access entirely at myaccount.google.com/permissions.
Uninstalling the extension removes all locally stored data.

Honest risk disclosure

Reading WhatsApp Web's page content is not an officially supported integration and may be against WhatsApp's Terms of Service. Using this extension, including any automated behavior it enables, is at your own risk, including the risk of action taken against your WhatsApp account. This extension performs read-only scanning; it does not send messages on your behalf.

Changes to this policy

We'll update the "Last updated" date above whenever this policy changes materially.

Contact

Questions about this policy or your data: ayaanmotiwala786@gmail.com