Privacy policy

Last updated: November 12, 2026

ConversoCRM is a Chrome extension that adds CRM tools to WhatsApp Web. This policy explains what data the extension and its server handle, why, and for how long. Contact: programatica@gmail.com.

1. What we store on our server

• WhatsApp phone number of the account you use the extension with. It identifies your licence and devices and keeps each number's data separate.
• Licence data: the licence key, its status, its dates and the device limit. If you buy a licence, also the name and email you give us to manage it.
• Device data: a random installation identifier, a technical browser fingerprint, the user agent (browser and operating system), and the first and last time it was used. These are only used to enforce the licence's device limit.
• Session token: a signed token that expires after 15 minutes and renews automatically. It authorises the extension's requests.
• Content you save and sync: notes, reminders, templates, quick replies, tabs, webhooks (and their delivery history) and the backups you export.
• Attachments you upload to templates or messages. They are kept in our file storage and can be reached through their link while the licence is valid. If the licence expires, they stop being reachable.
• Licence activity log: events such as a device being added or a session being issued, with the number and the date.
• Technical server logs: date, path and response code of each request. Licence keys and tokens are removed before they are written.

The sales pipeline board (Kanban) and local settings are stored only in your browser and are never sent to our server. We do not collect your contacts or your conversations, except in the AI case described below.

2. AI assistant

Only when you press an AI button does the extension send the recent messages of that chat to the provider you configured (OpenAI, Anthropic or Google Gemini), using your own API key. The request goes through our server, which forwards it to the provider and returns the answer to you. We do not store those messages or the answer. The provider handles them under its own privacy policy.

Your API keys are stored encrypted (AES-256-GCM) on our server and are never returned to the extension or to anyone else.

3. What we use the data for

Only to provide the extension's features: checking your licence, syncing your content across your devices, sending the webhooks you configure, hosting your attachments and answering your support requests.

• We do not sell your data.
• We do not use it for advertising or profiling.
• We do not use or transfer it for any purpose unrelated to the extension's single purpose, nor to determine creditworthiness or for lending.

ConversoCRM's use of information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

4. Who it is shared with

• DigitalOcean: hosts the server, the database and the attachments (United States).
• Cloudflare: the network that carries traffic to our server.
• The AI provider you choose, only when you use AI and with your own key.
• The webhook addresses you configure, which receive the data you choose to send them.

We share data with no one else unless the law requires it.

5. How long we keep it and how to delete it

• When you delete an item in the extension, it stops being shown and synced immediately. It stays marked as deleted in the database until you ask for permanent deletion.
• Licence data, device data and synced content are kept while the licence exists. We do not delete them automatically when it expires, so you can renew without losing anything.
• Attachments stop being reachable when the licence expires. Those no stored data uses any more (for example, because you removed them from a template) are erased automatically after 14 days, and all of them are erased when you ask for deletion.
• Technical server logs are erased after 90 days. Backups are kept for at most 14 days.

To ask for deletion of all your data, write to programatica@gmail.com from the email linked to your licence, or include your WhatsApp number and licence key. We will erase it permanently within 30 days and confirm it to you. You can also ask us for a copy of your data or to correct it.

6. Security

All communication with our server is encrypted (HTTPS). Requests are authorised with your licence and a short-lived session token, and each number's data is kept separate from the rest.

7. Children

ConversoCRM is a business tool and is not directed at children under 16.

8. Changes

If we change this policy, we will publish the new version on this page and update the date above.