Privacy Policy — CRMThread for WhatsApp Web
Last updated 28 September 2026
This policy covers the CRMThread for WhatsApp Web browser extension only. It is written to be read, not to be survived: if something below is unclear, treat that as our problem and tell us.
What it reads
Only on web.whatsapp.com, and only for conversations that are in scope (see below):
- The message text, and whether a message was sent or received
- The other person's phone number and the name WhatsApp shows for them
- Whether a message carried a photo, video, document or audio — not the file itself
- WhatsApp's own message identifier, used so the same message is never saved twice
Which conversations are in scope
| Conversation | Read? |
|---|---|
| The number is already a contact or lead in your CRM | Yes |
| The number is not in your CRM | No — unless you choose “Sync this chat” |
| Group chats | Never |
| Messages already on screen the first time a chat is synced | No — treated as history |
If the extension cannot reach your CRM to check, the answer is no. An outage never turns into reading everything.
Where it goes
To your own CRMThread workspace at the address you entered, over HTTPS, and nowhere else. Your workspace is your company's data. The extension has no analytics, no third-party services and no telemetry; it makes no request to any server other than your CRM.
What is stored on your computer
- Your CRM address, workspace code and email
- A session token and its refresh token — your password is never stored, only exchanged once for the token
- The list of phone numbers you chose to sync
All of it lives in your browser's extension storage and is removed when you sign out or uninstall.
What it never does
- Read chats outside the scope above, including your personal ones
- Upload the contents of photos, videos or documents you receive
- Read anything on any website other than
web.whatsapp.com - Send data to CRMThread the company, to advertisers, or to any third party
- Sell, rent or share your data with anyone, for any purpose
Stopping it
Untick Sync this WhatsApp session to pause immediately, Forget opted-in chats to reset your choices, or Sign out to remove the stored session. Removing the extension deletes everything it kept locally. Messages already saved belong to your company's CRM — ask your CRM administrator to delete those.
A note on WhatsApp
WhatsApp is not affiliated with CRMThread and does not endorse this extension. WhatsApp's own terms restrict automated access to their service; using this extension is a decision for you and your organisation, and the WhatsApp account it runs against is yours, not ours.