Privacy Policy

Last updated: September 6, 2026

SafePace ("the extension," "we," "us") is a Chrome extension that sends personalized bulk messages on WhatsApp Web, auto-paced to a safety limit based on whether your number is Personal or Business, with optional WhatsApp group import/export and a paid Pro/Pro Max tier. This page explains what data the extension and its backend (ig.nexoraai.co.in) collect, why, and how to get it removed.

What never leaves your browser

What actually moves — the recipient list you build, the message text you write, and any WhatsApp group member list you choose to import or export — happens entirely inside your browser, through your own signed-in WhatsApp session, and is stored only in your browser's local extension storage (chrome.storage.local) and, if you download it, the file that lands on your own computer. None of that data is ever sent to our servers. We have no way to see who you messaged or exported, or what was in it, beyond the numbers-only counters described below.

What we do collect, and why

1. Account data, only if you sign in

The free tier — 20 messages a day per WhatsApp number, on a rolling 24-hour window — works with no sign-in at all. Past that — or to unlock Pro features — you sign in with Google. We receive and store, in our Supabase database:

• Your Google account's stable ID, email address, name, and profile picture URL
• When you first signed in and when you last signed in

We never receive your Google password, and we never request access to your Gmail, contacts, or any other Google data beyond basic profile info (name, email, avatar) needed to identify your account.

2. Subscription status

If you subscribe to SafePace Pro or Pro Max (via Dodo Payments) or qualify for a promotional free period, we store your subscription status and its expiry date so the extension knows whether to unlock Pro features. We do not store your card or payment details — that is handled entirely by Dodo Payments, our payment processor, and only a subscription ID and status reach us.

3. What's stored locally on your device

• How many messages you have sent from each WhatsApp number in the last 24 hours, used only to enforce the safety pacing limit for that number.
• Whether each linked WhatsApp number is a Personal or Business account (detected automatically), used only to apply the correct daily limit.
• Which WhatsApp numbers are linked to your subscription, so a released number can be reused after a short cooldown rather than letting one subscription be shared across unlimited numbers.

None of this leaves your device except indirectly, as part of deciding whether your account should be shown as under or over the free limit.

4. Aggregate usage counters, only if you sign in

If you sign in, if you send a message, export a group, or import a group’s numbers, we log a numbers-only count of that action against your account — never the recipients, the message text, or the exported data itself. This exists purely so we can understand real-world usage and decide what to build next. This is numbers only — the data itself is never sent to us or stored here. If you never sign in, no counter of this kind exists for you at all.

5. Bug reports, only if you send one

The "Report a bug" / feedback form is optional. If you use it, your message and optional reply-to email are sent via EmailJS to our support inbox. We use this only to fix the issue you reported and, if you gave an email, to reply to you.

6. Uninstall feedback, only if you give it

If you uninstall the extension, Chrome may open a short, optional feedback page. If you submit it, we store the reason you selected, any comment you typed, and a few anonymous usage numbers (extension version, days installed, export count) — never your name, email, or any exported data. This is not linked to your account.

What we never do

• We never sell your data to anyone.
• The extension never sends a message without you pressing Start, and never sends more than the safety limit allows for that number.
• We never read or store your recipient list, message text, or exported group member data — those stay in your browser and are never sent to our servers.
• We don't track you across other websites, and the extension has no analytics or advertising SDKs.

Third parties involved

• Google — sign-in only (OAuth), per Google's own privacy policy.
• Dodo Payments — payment processing for Pro subscriptions, per Dodo Payments' own privacy policy.
• Supabase — hosts our database (account records, subscription status, uninstall feedback).
• Vercel — hosts this website and its backend API.
• EmailJS — delivers bug reports to our support inbox.

None of these third parties receive your WhatsApp data — that never reaches our backend at all, as described above.

How long we keep data

Account and subscription records are kept for as long as your account exists. Uninstall feedback and bug reports are kept indefinitely for product improvement, since they aren't linked to an identifiable account unless you voluntarily included your email.

Deleting your data

Email us (below) from the address you signed in with and we'll delete your account record, subscription record, and any linked data within a reasonable time. There is no self-serve deletion flow yet.

Changes to this policy

If this policy changes materially, we'll update the date at the top of this page. Continued use of the extension after a change means you accept the update.

Contact

Questions about this policy or your data: use the feedback form inside the extension, or reach us through the Chrome Web Store listing support link.

SafePace is not affiliated with, endorsed by, or connected to WhatsApp or Meta Platforms, Inc.