Privacy Policy — LeadZap

Last updated: September 27, 2026

LeadZap ("we", "our") is a browser extension (Chrome) that lets you export contacts, chats and groups from WhatsApp Web to CSV, XLSX, JSON and vCard files, with a free plan and Pro subscription plans. This policy explains what data we process, why, and what rights you have over it.

Data controller: Marcos Romualdo dos Santos.
Contact: marcos@marcosromualdo.com

1. The core principle: your chats never leave your browser

Extraction of contacts, chats and groups happens entirely inside your browser, reading the data that WhatsApp Web itself has already loaded in your session. The content of your chats, your contacts and the member lists of your groups are never sent to, stored on or processed by any LeadZap server. The exported file (CSV, XLSX or JSON) is generated locally and downloaded straight to your computer.

This means we do not have access to, do not see and do not keep the content of what you export.

2. What we actually collect

Because the product has a paid plan (recurring subscription), some administrative data goes through our backend:

When you subscribe to a Pro plan: email and payment details, processed directly by Stripe (our payment processor) — we do not store card numbers or sensitive financial data on our servers.
License key: when you activate a Pro license in the extension, we store the key, the plan purchased, the expiration/renewal date, an anonymous browser identifier (device ID) and a record of when the license was checked. This is only used to confirm that your subscription is active.
Email linked to the subscription: used to find your license in the Customer Portal and for communications about the subscription (confirmation, renewal, cancellation).
Basic backend technical data: as with any web server, standard access logs (IP, date/time, user agent) may be kept for a limited time, for security and troubleshooting.

We do not collect: message content, contact lists, third-party phone numbers, group names or any data the extension exports — these stay only on your computer.

3. Why we process this data

To enable recurring billing of the subscription (via Stripe).
To check whether a license key is active and linked to your Pro plan.
To provide support when you contact us.
To comply with legal obligations (e.g. tax) related to billing.

We do not use your data for advertising, we do not sell data to third parties and we do not build behavioral profiles for marketing purposes.

4. Who we share data with

Stripe (payment processing and billing) — receives email and payment details directly; see Stripe's privacy policy.
Hosting provider of the backend (storage of licenses and the associated email).
Authorities, only if required by law or court order.

We do not share data with advertisers or data brokers.

5. How long we keep your data

For as long as your subscription is active, and for a reasonable period after cancellation for tax and support purposes (e.g. payment history). You can request deletion of your administrative data (email, license) at any time through the contact above, subject to legal obligations to retain tax records.

6. Your rights

Whether under the LGPD (Brazilian Law 13,709/2018, if you are in Brazil) or the GDPR (if you are in the European Union/United Kingdom), you have the right to:

Confirm whether we process your data and access it;
Correct incomplete or outdated data;
Request deletion of your administrative data;
Request data portability;
Withdraw consent and object to specific processing;
Know who we share your data with.

To exercise any of these rights, write to marcos@marcosromualdo.com.

7. Cookies and similar technologies

The LeadZap website (leadzap.online) and the Customer Portal may use cookies that are strictly necessary for them to work (e.g. keeping your session in the Stripe checkout). We do not use advertising tracking cookies.

8. Children

LeadZap is not directed at people under 18 and we do not knowingly collect data from children. If we find that this has happened, we will delete the data as soon as possible.

9. Security

We adopt reasonable technical and organizational measures to protect the administrative data we process (license keys, email), but no system is 100% immune to incidents. Since the content of your chats never reaches our servers, the main exposure risk related to WhatsApp itself remains under the control of WhatsApp/Meta, not ours.

10. Changes to this policy

We may update this policy from time to time. Relevant changes will be communicated by email (if we have yours) or by a notice on the website, with the "last updated" date revised.

11. Contact

Questions, requests about your data or any privacy matter: marcos@marcosromualdo.com