5.1 Alibaba Cloud (log storage and processing)
Recipient: Alibaba Cloud (Alibaba Cloud Log Service / related cloud services used under our account).
Region example: Log ingestion for this Extension is configured for us-west-1 (United States).
Role: Service provider / processor that stores and processes telemetry and diagnostic logs on our behalf.
Data may include: Event type, timestamps, UUID, install time, language, browser type, user agent, platform, Extension version, WhatsApp phone number and derived country label (when available), and API diagnostic fields described in section 2.4.
Retention: We configure automatic deletion of log data on a seven (7) day rolling basis (subject to our cloud configuration).
Not for sale: We do not permit Alibaba Cloud to use this data for its own advertising.
5.2 Our websites and APIs (watools.ai)
Recipient: Our services hosted under watools.ai (and dev.watools.ai for development/testing builds if applicable).
Role: Controller / operator of backend services.
Examples of processing:
- Entitlement API — Receives your WhatsApp number to return license/entitlement status.
- License bind API — Receives your WhatsApp number and activation code to bind a license.
- Uninstall URL — When you uninstall the Extension, Chrome may open a URL such as
https://watools.ai/waplus-privacy-uninstall?... which can include query parameters such as WhatsApp number, install time, country name/label, UUID, and Extension version, so we can understand uninstall patterns and improve support.
5.3 wawebsender.com API
Recipient: wawebsender.com (API host).
Role: Third-party API used for new-user guide / permission check with limited parameters (for example, extension type).
Transport: HTTPS.
5.4 Webhook endpoints you configure
Recipient: The operator of each URL you enter (which may be you or a third-party vendor).
Role: User-directed transfer — not controlled by us beyond sending what you configured.
5.5 Legal, safety, and business transfers
We may disclose information if we believe in good faith that disclosure is required by law, regulation, legal process, or governmental request, or to protect rights, safety, or security.
If we are involved in a merger, acquisition, or asset sale, we will provide notice and continue to protect personal information consistent with this policy or notify you of changes.