This policy explains how your personal data is processed when you use the Watzle Chrome extension and website. The data controller is Watzle ([email protected]). This text also serves as the information notice under Turkish Personal Data Protection Law No. 6698 (KVKK).
In short: your contact lists, messages, chats and reports are stored only on your computer, inside your browser, and are never sent to us. Our server keeps only a few account details and daily usage counts.
1. Data that stays on your computer (never reaches us)
- Contact lists and phone numbers you upload,
- Messages, attachments, saved messages and auto-reply rules you write,
- Send reports, delivered/read/reply status and chat backups,
- Your WhatsApp account and session (Watzle does not access or store your WhatsApp password or session keys).
This data lives in the storage area your browser gives the extension, and is deleted when you remove the extension.
2. Data we process on our server
| Data | Why | Legal basis |
|---|---|---|
| Email address, name and profile picture link from your Google account | To create your account, sign you in and contact you | Performance of contract |
| Plan, subscription status, Paddle customer and subscription IDs | To unlock Pro features and manage the subscription | Performance of contract |
| Daily message and number check counts (not content), your time zone | To apply plan limits and reset the day in your time zone | Performance of contract |
| A random ID for each signed-in device, browser name and last seen time | To manage sessions and sign a device out | Legitimate interest (security) |
| Messages you send with “Contact us”, an optional screenshot and technical details (extension version, plan, browser, WhatsApp connection state) | To solve your problem and reply to you | Performance of contract; your consent (screenshot) |
Your payment details (card number, billing address) are processed directly by Paddle and never reach us. Paddle processes them as Merchant of Record under its own privacy policy.
3. Service providers we share data with
- Google — sign-in with Google (authentication).
- Cloudflare — hosting of our server and database.
- Paddle — payments, invoices, tax and subscription management.
Some of these providers may process data outside Türkiye (for example in the EU or US); transfers rely on the safeguards required by KVKK and GDPR. We do not sell your data, use it for advertising, or share it with third parties for marketing.
4. Retention
- Account data is kept while your account is open. When you ask us to delete your account, we delete it within 30 days.
- Daily usage counts are kept for at most 13 months.
- Feedback conversations are kept for at most 2 years after they are closed.
- Invoice and payment records are kept by Paddle as required by law.
5. Your rights
Under Article 11 of KVKK and, where it applies, the GDPR, you have the right to learn whether your data is processed, to request information, correction or deletion, to object to processing, to receive a copy of your data, and to complain to a supervisory authority (in Türkiye, the Personal Data Protection Board). Send requests to [email protected] from your account’s email address; we answer within 30 days.
6. Cookies
This website does not use cookies or tracking tools. The extension keeps your settings and session in your browser’s local storage; this information stays on your device.
7. Security
All communication with the server is encrypted (HTTPS). Sessions are protected with signed keys, and we take reasonable technical and organisational measures against unauthorised access.
8. Children
The Service is not intended for anyone under 18 and we do not knowingly collect data from children.
9. Changes
When we update this policy the date above changes; we announce important changes in the extension.