Privacy Policy

DragonChat Chrome Extension

Last updated: April 20, 2026

DragonChat ("we", "our", "us") operates the DragonChat Chrome Extension (the "Extension"). This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information.

1. Data We Collect

1.1 Account Information

When you log in to the Extension, we collect your email address and password, used exclusively for authentication against our servers. These credentials are transmitted securely over HTTPS and are never stored locally in plain text.

1.2 Device Information

  • Device ID — a unique identifier generated locally on your browser to identify your extension session. This is a random UUID stored in chrome.storage.local.
  • Device name — derived from your browser's User-Agent string (e.g., "Chrome on macOS"). Used to help you identify your active sessions.

1.3 IP Address

Your public IP address is obtained via a third-party service (api.ipify.org) during login. This is used solely for session identification and security purposes. If the lookup fails, the Extension continues to function normally without it.

1.4 WhatsApp Web Data

The Extension operates within the WhatsApp Web interface (web.whatsapp.com). It accesses contact names and chat identifiers to provide its features (bulk messaging, quick responses, scheduled sends, notes).

We do not extract, store, or transmit your WhatsApp messages, media, or conversation content to our servers.

1.5 Usage Data

Message send counts (number of messages sent via the Extension per day) are tracked on our servers to enforce plan limits. Scheduled sends and notes are stored on our servers and associated with your user account.

2. How We Use Your Data

  • Authenticate your identity and manage your session.
  • Provide Extension features: bulk messaging, quick responses, scheduled sends, notes, and contact management.
  • Enforce subscription plan limits (daily message quotas).
  • Identify and manage active device sessions for your account.

3. Data Storage

  • Local storage: Authentication tokens, user preferences, and UI state are stored in chrome.storage.local on your device.
  • Server storage: Account data, notes, scheduled sends, sequences, and usage metrics are stored on our servers with industry-standard security practices.

All communication between the Extension and our servers uses HTTPS encryption.

4. Data Sharing

We do not sell, trade, or share your personal data with third parties, except:

  • api.ipify.org — used solely to obtain your public IP address during login. No personal data is sent to this service.
  • DragonChat servers (*.dragonchat.io) — our own backend services that power the Extension.

5. Data Retention

  • Your account data is retained as long as your account is active.
  • Session data is retained until you revoke it or it expires.
  • Message history records are retained for usage tracking and billing purposes.
  • You can request deletion of your account and all associated data by contacting us.

6. Your Rights

You have the right to:

  • Access your personal data stored on our servers.
  • Delete your device sessions from your profile settings.
  • Request deletion of your account and all associated data.
  • Withdraw consent by uninstalling the Extension and revoking sessions.

7. Permissions Justification

The Extension requests the following Chrome permissions:

  • activeTab — to detect when you are on WhatsApp Web and activate Extension features.
  • storage — to securely store your authentication token and preferences locally.
  • Host permissions (web.whatsapp.com) — to inject the Extension interface into WhatsApp Web.
  • Host permissions (*.dragonchat.io) — to communicate with our backend API.

8. Children's Privacy

The Extension is not intended for use by children under the age of 13. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this document.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at: