Privacy Policy – Zaploop Chrome Extension

Last Updated: January 2025

1. Overview

Zaploop is a Chrome extension that provides visual workflow building tools for WhatsApp Web. We are committed to protecting your privacy. This policy explains what information is handled by the extension, how it is stored, and your rights regarding it.

2. Data Collection, Processing, and Transmission

• We do not collect, store, or transmit any personal data to Zaploop servers or any third-party servers.
• The extension:
  • Does not send any data to remote servers
  • Does not use analytics or tracking services
  • Does not communicate with external APIs
  • Operates entirely within your browser environment

3. Local Data Storage

The extension stores the following data locally in your browser using Chrome’s storage API:

• Workflow templates and conversation flows you create
• Extension settings and preferences
• UI customization preferences

This data never leaves your device unless you manually export or share it.

Important: If you include personal information (such as names, phone numbers, or message text) in your workflow templates, this will remain stored locally on your device. Zaploop has no access to it.

4. WhatsApp Web Integration

Zaploop integrates with WhatsApp Web’s user interface to provide workflow functionality. We explicitly do not:

• Read, access, or store your WhatsApp messages
• Collect contact information or phone numbers
• Monitor conversation content or activity
• Access authentication data for WhatsApp
• Transmit any WhatsApp-related information externally

Zaploop only adds visual interface elements and does not process message content in any way.

5. Permissions Justification

• tabs: Required for inter-component communication within the extension (minimized where possible)
• activeTab: Necessary to inject UI components into WhatsApp Web
• storage: Used exclusively for local storage of user-created workflow templates and preferences
• https://web.whatsapp.com/: Required to integrate with the WhatsApp Web interface

No permissions are used for data collection, tracking, or external communication.

6. No Remote Code Execution

The extension contains only locally bundled code. We do not:

• Load external JavaScript files at runtime
• Execute remote code
• Use eval() with external content
• Download or update code from remote sources

7. Third-Party Libraries

The extension includes locally bundled, sandboxed third-party libraries (e.g., jQuery, Drawflow).

• These libraries do not make external connections
• Libraries are version-controlled and periodically updated to patch known vulnerabilities

8. Data Security and Isolation

• All data processing occurs within Chrome’s sandboxed extension environment
• Workflow templates are stored using Chrome’s secure local storage API
• No network requests are initiated by the extension
• Other websites or extensions cannot access your Zaploop data

9. User Control and Data Deletion

You have full control over your data:

• Workflow templates and preferences can be deleted manually through the extension interface
• All extension data is permanently removed when the extension is uninstalled
• No recovery is possible after uninstallation as no external backups exist

10. Your Rights (GDPR & CCPA)

Even though we do not process or store your data remotely, you have the following rights:

• Access: You can view all extension data stored locally at any time
• Deletion: You can delete your local data through the extension or by uninstalling it
• Correction: You can edit or replace your workflows and preferences at any time
• Data Portability: You can manually export your workflows if desired

Since Zaploop has no access to your local data, exercising these rights is entirely in your control.

11. Compliance with Chrome Web Store Policies

• Maintaining a single, clearly defined purpose
• Requesting minimal necessary permissions
• Operating without external data transmission
• Providing transparent, documented functionality

12. Updates to This Policy

If we make material changes to this policy that affect your rights or our practices, we will notify you via the extension interface before the changes take effect.
The “Last Updated” date at the top reflects the latest revision.

13. Contact

For privacy-related inquiries: https://zaploop.web.app

14. Legal Disclaimer

Zaploop is an independent tool and is not affiliated with, endorsed, or authorized by WhatsApp Inc. Use of Zaploop is subject to WhatsApp’s own terms of service.