Privacy Policy

This Privacy Policy explains how Rocket Sender handles information when you use the Rocket Sender browser extension (the "Extension"), visit rocketsender.co or dev.rocketsender.co (the "Website"), create or monitor a sending task, or contact us. In this policy, "Rocket Sender," "we," "us," and "our" refer to these services and the people responsible for operating and supporting them.

Rocket Sender is an independent product and is not affiliated with, endorsed by, sponsored by, or operated by WhatsApp or Meta.

The information Rocket Sender handles depends on the pages and features you use. The main categories are:

Rocket Sender does not independently collect the contents of unrelated WhatsApp conversations, and it does not request general access to your device contacts or browsing history.

We use information only for Rocket Sender operations and related support, including to:

• Provide the Website and Extension features requested by the user.
• Prepare recipients, import Excel data, personalize messages, process selected attachments, and apply sending intervals.
• Open WhatsApp Web, execute the user's sending instructions, display progress, and provide task results.
• Connect Website actions with the installed Extension and restore supported task states after a refresh.
• Understand product usage, installation conversion, workflow completion, feature adoption, failures, and recovery behavior.
• Detect compatibility issues, diagnose errors, maintain security, prevent duplicate task execution, and improve reliability.
• Respond to support, privacy, and deletion requests.

We do not use recipient, message, Excel, task, or attachment data for advertising, data brokerage, credit decisions, or unrelated profiling.

The older WhatsApp Web editor uses chrome.storage.local for settings and selected workflow data. In website task mode, drafts, imported Excel rows, selected attachment files and previews, task recipients, and per-recipient results are stored in extension-origin IndexedDB within your current browser profile. Small active and pending task pointers remain in chrome.storage.local. The Website reads this data through the installed Extension; it does not store your task or file contents in a Rocket Sender website database.

Completed local tasks have a default 30-day and 50-task retention limit, enforced during local cleanup when the task workspace next connects. You can delete drafts and completed tasks from the Website workspace and export results before deletion. Clearing Extension storage or uninstalling the Extension removes locally stored task and attachment data. There is no cross-device sync or cloud backup, and already sent WhatsApp messages are not removed by deleting local results.

When you start a send, the Extension acts on your instructions within your authenticated WhatsApp Web session. The recipient numbers, message text, personalization, and selected attachments are transmitted through WhatsApp to the recipients you chose. WhatsApp and each recipient then handle that information under their own practices.

Rocket Sender does not choose your recipients, create your message content, or initiate a transmission without your direction.

To adapt to changes in the WhatsApp Web interface, the Extension may make an HTTPS request to the following compatibility configuration endpoint:

https://cdn2.waplus.io/

The configuration is restricted to validated CSS selector strings used to locate interface elements. It does not provide executable content or remote code. The request does not include recipient numbers, message text, attachments, active queue information, results, or other private messaging payloads.

The Website and Extension send product analytics, user journey, sending result, connection, and diagnostic events to Alibaba Cloud Log Service in the United States. These events are designed to reconstruct business workflows from Website entry, Extension detection or installation, task preparation, WhatsApp execution, individual recipient attempts, task completion, result review, retry, export, deletion, and relevant errors or recovery states.

Depending on the event, logs can include a Website visitor identifier, Extension installation identifier, session, page, journey, trace, draft, task, command and attempt identifiers; page URL, referral and campaign information; feature views and actions; WhatsApp account context; recipient phone numbers; manual recipient input; message templates and personalized messages; Excel column names and row values; sending intervals; attachment names, MIME types, sizes and hashes; task progress and recipient results; WhatsApp ACK information; Bridge requests and responses; and technical error details or filtered snapshots.

Analytics logs do not include attachment binary files or base64 attachment contents. Passwords, cookies, Authorization values, private keys, refresh tokens, reusable WhatsApp tokens, and reusable session secrets are excluded or masked. Logs are used for product analysis, workflow completion analysis, troubleshooting, security, compatibility, and service improvement. They are not a cloud task backup and are not intended to recreate downloadable attachment files.

The Extension does not require a Rocket Sender account. Drafts, attachment files, and browsable task history remain in the current browser profile and are not synchronized to a Rocket Sender cloud account. Analytics identifiers may associate Website activity with the installed Extension in the same browser profile, but they do not provide guaranteed identification of a natural person across devices.

Local task data remains in the browser until it is deleted by the user, removed by local cleanup rules, cleared with browser or Extension storage, or removed when the Extension is uninstalled. Messages already delivered through WhatsApp and copies held by recipients are outside Rocket Sender's local deletion controls.

Analytics, diagnostic, security, and support information is retained for the period reasonably needed for the purposes described in this policy, subject to the configured lifecycle of the relevant service, operational requirements, dispute resolution, security investigation, and applicable obligations. Data may be deleted, aggregated, or de-identified when it is no longer needed.

The Extension uses Chrome "storage" for local settings and active task pointers, "scripting" for controlled Website and WhatsApp Web refresh, and "unlimitedStorage" for local IndexedDB attachment, Excel, and result data. It accesses web.whatsapp.com for sending, rocketsender.co for the Website task bridge (dev.rocketsender.co in development builds), and the Alibaba Cloud Log Service endpoint used for analytics and diagnostics. Product file and task size limits still apply.

The Extension does not request permission to read your general browsing history, device contacts, precise location, camera, or microphone. Selecting an attachment through a file picker does not give the Extension unrestricted access to other files on your device.

The Website does not offer user accounts, payments, or a contact form, and it does not keep a server-side task database. It uses first-party browser storage for Website visitor, session, language, installation-intent, and Extension-link identifiers. These identifiers support continuity, analytics, and linking Website activity with the installed Extension in the same browser profile.

The Website may use Google Analytics and Google Fonts and relies on ordinary hosting, content delivery, domain, and network providers. Those providers can receive connection metadata such as an IP address, browser and device information, requested URL, referring page, and request time. Their handling of that metadata is governed by their own policies.

If you email support, we receive your email address and any information that you choose to include. We use it to respond, investigate the issue you describe, maintain the security of the service, and keep a reasonable record of the support exchange.

Support communications are retained only as long as reasonably needed for those purposes or to meet applicable obligations, then deleted or de-identified when no longer needed. You can request deletion of a support communication, subject to any necessary security or record-retention exception.

These parties process information under their own terms and privacy policies. Internet services can process connection metadata, analytics, or user-directed content in countries other than the country where you are located. Those countries may apply different data-protection standards.

Rocket Sender limits data handling through local storage, user-directed actions, HTTPS connections, and a narrow selector configuration format. The executable Extension code is distributed in the installed Chrome Web Store package; the Extension does not download or execute remote code.

If the selector configuration service is unavailable or a selector is invalid, the Extension uses its packaged compatibility behavior or may leave the affected feature unavailable rather than execute untrusted content. No storage or transmission method can be guaranteed completely secure, so users should protect their browser profile, device, and WhatsApp account.

Rocket Sender's use and transfer of information received from Google APIs complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. Information is used only to provide or improve the prominent, user-facing Extension features described in this policy.

We do not sell Extension data, use it for personalized advertising, use it to determine creditworthiness or lending eligibility, or transfer it for an unrelated purpose. Human access is limited to information a user deliberately sends for support, access the user consents to, security investigation when necessary, or access required by applicable obligations.

Depending on where you live, privacy law may provide rights to request access, correction, deletion, restriction, objection, or a portable copy of certain personal information. Rocket Sender does not use product accounts, so we may need information from you to locate relevant records and verify that a request relates to you. Some requests may be limited where data cannot reasonably be linked to you, has already been deleted or de-identified, or must be retained for security or applicable obligations.

• Remove recipients, message text, personalization values, or attachments before starting a send.
• Stop an active task through the Extension controls, or delete saved drafts and completed task results in the Website workspace; export results before deletion when needed.
• Uninstall the Extension to remove its locally stored Extension data from Chrome.
• Clear Website storage through your browser to remove Website visitor, session, language, and installation-intent values stored in that browser profile.
• Use WhatsApp controls for messages already sent and contact recipients where appropriate.
• Contact us to ask about information in analytics, diagnostics, or support communications and request deletion where the information can reasonably be located and the request can be fulfilled.

Uninstalling the Extension removes its access and local Extension storage but does not automatically delete messages already delivered through WhatsApp, analytics already transmitted before uninstall, or copies held by recipients and third-party services.

Rocket Sender is not directed to children under 13, and we do not knowingly seek personal information from children. If you believe a child has sent personal information in a support communication, contact us so we can review and delete it as appropriate.

We may update this Privacy Policy when Rocket Sender features, data practices, service providers, applicable requirements, or third-party services change. The revised policy will be posted on this page with a new last-updated date. Material changes apply prospectively from the date stated on the updated policy.

For privacy questions, support requests, or deletion requests, email [email protected]