WA Helper privacy policy

Last updated: 31 October 2026

WA Helper is a Chrome extension with the saved message templates of the charcoal.pro team. It is run by charcoal.pro, which also runs the server it loads the templates from (id.charcoal.pro). It works only with an account on that server, given to staff by its administrator. WA Helper is not affiliated with WhatsApp or Meta.

What the extension keeps in your browser

Only in this browser (Chrome's local extension storage, never synced to other devices):

• the server address and your API token, which you paste into the extension's Options page;
• that you agreed to this data handling in Options;
• a copy of the templates from the server, so the list opens at once;
• the category you picked in the panel;
• how often you used each template, so the most used ones are listed first.

While the side panel is open it also holds the templates' attachments in memory, so Insert is quick. They are written to your computer only when you click a file to save it to your Downloads folder.

What the extension sends, and to whom

• Your API token, only to the server address in Options (https://id.charcoal.pro/crm/), over an encrypted (HTTPS) connection, to load your templates and their attachments.
• Nothing else leaves your browser. No analytics, no advertising, no other servers, no remote code.

The extension contacts the server only after you tick “I agree” under the notice in its Options page.

What the extension does on websites

• On WhatsApp Web (web.whatsapp.com) it only pastes the template you chose, text and attachments, into the message box you clicked, when you click Insert. It never reads your chats, contacts or the page, and it never sends a message: you press Send yourself.
• On other websites it runs no code at all. The side panel can only copy a template's text to your clipboard when you click Copy.

What the server stores

• For each account: the username, the role, a hash of the password, a hash of the API token (not the token itself), when the token was made, the time of the last login, and failed login attempts (to lock an account for 15 minutes after too many).
• The templates and their attachments, written by the administrators.
• A login cookie while you use the administration pages.
• Like any website, the server keeps standard access logs (IP address, time, address requested), handled by its hosting company, Hostinger.

Sharing

We do not sell, rent or share your data. The server's data is stored by our hosting company (Hostinger) on our behalf and is used only to run WA Helper. Data from the extension is never used for advertising, never used to decide creditworthiness or for lending, and never read by people except to keep the service secure, to comply with the law, or when you ask us for help with your account.

The use of information received by WA Helper adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

How long it is kept, and your choices

• What the extension keeps in your browser stays until you remove the extension from Chrome, which deletes it.
• A new token (your Account page on the server) makes the old one useless at once.
• Your account and its data on the server stay until an administrator removes them. Write to us to have them removed.

Children

WA Helper is a work tool for adult staff and is not meant for children.

Changes

If what WA Helper keeps or sends ever changes, we update this page and its date, and the extension's Options page asks for your agreement again before the change applies.

Contact

Questions or requests: export@charcoal.pro