Nexori FollowUp for WhatsApp Web — Privacy Policy

Effective date: September 28, 2026

This policy explains what the Nexori FollowUp for WhatsApp Web Chrome extension (“Nexori FollowUp”, “the extension”) does with data. The extension is published by Nexori Studio (“Nexori”, “we”). Nexori FollowUp is not affiliated with, endorsed by, or sponsored by WhatsApp or Meta.

Summary

• Your CRM (contacts, notes, reminders, templates) is stored locally in your Chrome profile. Nexori does not receive or keep a copy of it.
• The extension reads only what it needs from WhatsApp Web to match the open chat to your CRM contact and to show stage indicators. It does not collect, store or upload your messages.
• Nothing is sent automatically. There is no bulk or automatic messaging. Quick Replies only put text in the message box; you press Send.
• Data leaves your device only when you use a feature that needs it: billing and license checks (Nexori’s license server, Stripe, Resend) and, if you choose, Google Sheets sync (your own Google Drive).
• We do not sell your data and do not use it for advertising.

1. Data stored on your device

The extension stores the following in your browser’s local extension storage (IndexedDB) in the Chrome profile where it is installed:

• CRM contacts you save: name, phone number, company, pipeline stage, deal value and currency, tags, and created/updated times.
• Notes and follow-up reminders you add (reminder text and due time).
• Quick Reply templates you create.
• WhatsApp identifiers used only for matching a chat to a saved contact: the chat’s WhatsApp ID and the phone number WhatsApp Web shows for that chat, and the display name WhatsApp shows.
• If you activate Pro: your license email address, your license key, and the latest license status (plan, subscription status, renewal/end date, last check time).
• If you connect Google Sheets: the ID and link of the one spreadsheet the extension created, and the last sync time. Google access tokens are kept by Chrome, not by the extension.
• Small settings, such as whether you have finished the first-run introduction.

This data stays on your device. Removing the extension removes it from that Chrome profile; export a Full Backup first if you may need to restore it. The extension does not sync your CRM to other devices.

2. How the extension works with WhatsApp Web

The extension runs only on web.whatsapp.com. There it:

• reads the identity of the chat you have open (its name, WhatsApp chat ID and, for a person, the phone number WhatsApp Web shows) to find the matching CRM contact in your local CRM;
• reads the identity of the chat rows visible in your chat list to draw a small stage indicator next to the contacts you have saved;
• writes into the message box only when you click Insert on a Quick Reply. To avoid overwriting a draft, it looks at what is already in the message box at that moment; that text is not stored or sent anywhere.

The extension does not read, collect, store or upload your message history, does not build message archives, and does not export your WhatsApp contact list. It never sends messages: you always press Send in WhatsApp yourself.

3. Data that leaves your device

Nexori license server (billing and license checks)

Only when you start a checkout, activate a license, open the subscription page, or while a license is saved (an automatic check about once a day, and when you press Check status), the extension sends Nexori’s license server (hosted on Supabase) your license email address and license key, or, for a checkout, your email address and the chosen billing period. The server stores your email address, a hashed copy of your license key, your Stripe customer and subscription identifiers, and your subscription status and dates, so it can tell the extension whether Pro is active. For abuse protection it counts requests per hashed IP address for a short time. The license server never receives your CRM contacts, notes, reminders, templates or any WhatsApp data.

Stripe (payments)

Nexori FollowUp Pro is sold by Nexori Studio under the Terms of Sale. Checkout and subscription management happen on Stripe’s own pages. Your card and payment details go directly to Stripe; they never pass through the extension or Nexori’s servers. See Stripe’s privacy policy at stripe.com/privacy.

Resend (license email)

After a purchase, your license key is emailed to you through Resend, our email delivery provider, which processes your email address and the message content for delivery.

Google Sheets (optional, Pro)

If you choose to connect Google Sheets, the extension asks Chrome for Google sign-in with only the drive.file permission, which lets it access only files it creates. It creates one spreadsheet in your own Google Drive. When you press Sync Now, it sends a summary of each saved contact directly from your browser to that spreadsheet: name, phone number, company, stage, deal value, currency, tags, the text of the latest note, the date of the next reminder, the last update time and an internal contact ID. Nothing is sent to Google until you connect and sync, and Nexori never receives this data or your Google tokens. The extension does not read your other files, and it does not read the sheet back. Disconnect ends the extension’s Google access; the spreadsheet stays in your Drive until you delete it.

4. Exports and backups

CSV export and Full Backup create files that your browser downloads to your computer. They are not uploaded anywhere. Backups contain your CRM contacts, notes, reminders and templates, but not your license key or Google details.

5. What we do not do

• We do not sell, rent or trade your data.
• We do not use your data for personalized advertising, and we do not share it with data brokers.
• We do not use analytics or tracking in the extension, and it does not load remote code.
• The extension does not send, schedule or bulk-send WhatsApp messages.

6. Chrome Web Store and Google API user data

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. Nexori FollowUp’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use such data only to provide the extension’s single purpose: managing sales leads and follow-ups inside WhatsApp Web. We do not transfer it except as described in this policy, to comply with law, or as part of a merger or acquisition, and no human reads it unless you ask us to for support, it is needed for security or to comply with law.

7. Retention and your choices

• Local CRM data stays until you delete it in the extension (contacts, notes, reminders, templates) or remove the extension.
• You can remove a saved license from the extension at any time (Plan tab). Removing it does not cancel a subscription; cancel in the subscription page.
• License and billing records are kept while your subscription is active and afterwards as long as needed for accounting, tax and legal obligations. You can ask us to delete or access the data we hold about you by contacting us.

8. Security

All connections use HTTPS. The license server refuses requests from other websites, and payment, email and server secrets are kept on the server side only. Your license key is shown only partially in the extension and is not included in exports or backups.

9. Children

Nexori FollowUp is a business tool and is not directed to children under 13.

10. Changes

If we change this policy, we will update this page and its effective date. Significant changes will also be noted in the extension’s listing.

11. Contact

Nexori Studio — email info@nexori.xyz or use the contact form at nexori.xyz/contact.