Security and privacy ledger.
SamparkWA is engineered by Trustoryx under a strict local-first model. Your customer contacts, message history, and templates never leave your physical machine.
Local-first data execution path.
Every step executes on your local CPU. Notice where the boundary terminates.
CSV spreadsheet import
You select a file from your file system. The file is read locally via the FileReader browser API.
In-memory sanitization & validation
Formula prefixes [=, +, -, @] are prepended with single quotes. Phone numbers are normalized to E.164.
Sandboxed IndexedDB persistence
Validated records are written into browser IndexedDB scoped strictly to the extension origin.
Message staging in WhatsApp Web tab
Text variables are substituted into the template and staged into the web.whatsapp.com input box.
Human confirmation & dispatch
You review the preview and click send. The message dispatches over your existing WhatsApp Web session.
No cloud database exists for SamparkWA. At no point in the lifecycle do contact names, phone numbers, or drafted messages leave your device over a network socket.
Chrome permission justifications.
Every permission requested is mapped to a strict local function.
| Permission | Technical justification | Scope |
|---|---|---|
| storage | Required to store contact data, message templates, opt-out registry, and user settings in the browser's local IndexedDB. All records remain on your local hardware. | Required |
| tabs | Required to detect when WhatsApp Web (web.whatsapp.com) is active and mount the SamparkWA Assistant Dock. Does not read or inspect other browser tabs. | Required |
| alarms | Required to provide non-blocking, periodic timer events (runner interval pacing, background health checks) within the Manifest V3 service worker without continuous background execution. | Required |
| host_permissions: https://web.whatsapp.com/* | Required to inject the assistant interface into the web.whatsapp.com origin and stage prepared text into the message box. Excludes all other domains. | Required |
Data handling practices.
| Practice | Executed? | Implementation detail |
|---|---|---|
| Collects customer phone numbers | No | Phone numbers are stored locally on-device only |
| Uploads contacts to cloud servers | No | Zero outbound network requests with contact records |
| Shares data with third parties | No | No third-party SDKs or tracking services integrated |
| Uses analytics or tracking beacons | No | Zero telemetry, zero Google Analytics, zero session trackers |
| Stores data on user's device | Yes | IndexedDB — browser-local, sandboxed origin storage |
| Allows data export | Yes | Export contacts and opt-out registry as sanitized CSV |
| Allows complete data deletion | Yes | One-click 'Clear All Data' removes local IndexedDB stores |
| Survives browser restarts | Yes | IndexedDB persists across sessions until explicitly cleared |
Privacy policy.
This Privacy Policy explains how SamparkWA ("the Extension"), engineered by Trustoryx, processes information. By downloading and running the Extension, you agree to these operational guarantees.
1. Data collection
The Extension does not collect, transmit, or record personal data on any remote server. All records — including customer phone numbers, message drafts, opt-out lists, and execution timestamps — remain sandboxed in your browser's IndexedDB.
2. Data utilization
Data held in IndexedDB is accessed solely to prepare messages on screen, enforce opt-out exclusion, and display historical logs. No data is parsed for profiling, behavioral advertising, or resale.
3. Sandbox isolation
Storage is sandboxed under the Chrome Extension origin specification. Third-party scripts, web domains, and other extensions cannot read or modify this database.
4. Data deletion
You retain complete autonomy over your data. Invoking "Clear All Data" in settings permanently erases the IndexedDB database. Because no copies exist on remote servers, purging local storage leaves zero trace.
5. Third-party infrastructure
The core extension connects only to WhatsApp Web (web.whatsapp.com). When you click send, WhatsApp's end-to-end encrypted protocol handles message transmission directly. If you elect to activate the optional WhatsApp Cloud API module, data transmitted under that module is governed by Meta's Platform Terms.
6. Chrome Web Store limited use compliance
SamparkWA's use and transfer to any other app of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. User data is never sold, never transferred to advertising networks, and never used for creditworthiness or lending evaluations.
7. Security inquiries & official legal policy
Questions regarding audit findings or privacy verifications can be addressed directly to security@trustoryx.digital. For our comprehensive legal disclosures, data handling matrix, and statutory rights under GDPR, CCPA, and India DPDP Act, review our Official Chrome Web Store Privacy Policy Page →
Your customer data remains on your computer.
Add to Chrome with zero cloud risk. Free forever.