Privacy & Security

Privacy Policy

Last Updated: March 2026 • 100% Local Execution • Codegena / WAXP

Our Privacy Principle: Zero Contact Data on External Servers

WAXP operates on a strict 100% local, client-side execution model. Your WhatsApp contacts, names, phone numbers, and chat data never leave your local browser sandbox and are never transmitted to, viewed, or stored on external servers.

1. Commitment to User Privacy

WAXP ("we", "our", or "extension") is developed and operated by Codegena. We firmly believe that your contact data, customer leads, and WhatsApp communications belong exclusively to you.

This Privacy Policy explains how WAXP operates inside Google Chrome, the minimal telemetry collected to ensure stability, and our commitment to zero data leakage.

2. Local Execution Architecture

Traditional SaaS scrapers and contact extractors route private data through remote cloud servers, creating significant data privacy and security vulnerabilities. WAXP was purposefully engineered from day one to operate differently:

  • Client-Side Extraction: When you click "Export Contacts", WAXP parses the HTML DOM elements already rendered on your active WhatsApp Web screen directly inside your device's memory.
  • Local File Generation: Formatting and creation of the Microsoft Excel (.xlsx) spreadsheet occurs entirely in your browser using local client-side JavaScript.
  • Direct Local Download: The generated file is saved directly to your computer's local Downloads folder without passing through any external API or relay.
  • No Cloud Backend for Contacts: We operate no external databases that store contact records, phone numbers, profile names, or message contents.

3. Information We Collect and Process

Because WAXP executes locally, we collect only the absolute minimum telemetry required to maintain extension reliability:

  • Application Reliability Metrics: Anonymous crash reports, extension version numbers, and error traces to identify when WhatsApp Web DOM updates break extraction selectors, allowing us to publish swift compatibility updates.
  • License Validation Data: When you enter a Pro license key, the extension verifies the key against Gumroad's official API to unlock unlimited export functionality and record active device seats.
  • Website Analytics: On our informational website (getwaxp.com and codegena.com), standard anonymized website traffic analytics (Google Analytics) are used to measure page visits and visitor geography.

4. Chrome Extension Permissions Explained

WAXP adheres to the Principle of Least Privilege, requesting only the specific browser permissions strictly required for its features:

  • activeTab / web.whatsapp.com: Required solely to read contact DOM elements displayed in an active, user-initiated WhatsApp Web browser tab.
  • storage: Used strictly on your local browser to save your extension UI preferences (e.g., "Export only unsaved numbers" toggle state) and remember your activated license key across sessions.
  • downloads: Allows the extension to trigger the native browser download prompt to save the generated Excel spreadsheet directly to your device.

5. Payment Processing & Financial Security

All Pro license transactions are processed securely by authorized merchant of record platforms (such as Gumroad and Stripe).

Codegena does not receive, process, or store credit card numbers, CVVs, or bank account details on our servers. Payment processing adheres to PCI-DSS Level 1 compliance standards managed directly by our payment providers.

6. Data Retention & Storage

Because contact data is never uploaded to Codegena servers, there is no remote contact data retention.

Your license key and extension configuration remain stored locally in your browser's chrome.storage.local until you uninstall the extension or clear your browser data.

7. Third-Party Disclosures

We do not sell, rent, monetize, trade, or transfer your personal data or contact lists to outside parties under any circumstances.

8. User Rights (GDPR & CCPA Compliance)

Depending on your jurisdiction (such as the European Economic Area under GDPR or California under CCPA), you have rights regarding your personal information:

  • Right to Access & Portability: All exported contacts are saved directly into open, portable Microsoft Excel files on your local drive.
  • Right to Deletion: You can completely erase all local data simply by removing the extension from Chrome or clearing Chrome extension storage.
  • Right to Inquire: You may contact us at any time to verify that no personal contact records are held on our infrastructure.

9. Contacting Our Data Privacy Team

If you have questions, concerns, or requests regarding this Privacy Policy or our local execution model, please contact: