Privacy Policy

Who is responsible

VOLLACHIA DESENVOLVIMENTO DE SOFTWARE SOB ENCOMENDA LTDA, a Brazilian company registered under CNPJ 69.483.689/0001-59, based in Curitiba, Paraná, Brazil (“Vollachia”, “we”). Contact: hello@vollachia.com.

We are the controller of the personal data described here, under Brazil’s General Data Protection Law (LGPD) and other laws that apply to you.

What stays in your browser

The extensions process your content (images, contacts, notes, records and files) locally in your browser, in Chrome’s storage. We do not receive that content. The extensions have no analytics, advertising or tracking, and the free plan works without an account.

The free plan’s daily allowance is counted only in your browser. The extensions’ only internet connection is to api.vollachia.com, and only when you sign in to Pro or buy Pro.

SnapBlur

SnapBlur captures the visible tab or opens an image you choose, so you can cover, annotate and export it. Everything happens in your browser: your images are never sent to us or to anyone else.

Permissions it asks for, and why:

• activeTab: to capture the current tab, only when you click SnapBlur or press Alt+Shift+S;
• storage: to hand the capture to the editor, and to keep your settings and the free allowance. The capture sits in the browser’s session storage and is deleted as soon as the editor opens it. If the editor does not open within 2 minutes, it expires and can no longer be used, and it is deleted on the next capture or when the browser closes;
• downloads: to save the edited image to your computer;
• clipboardWrite: to copy the image when you ask.

Cardume

Cardume exports the WhatsApp Web contacts you choose to CSV or TXT. It reads only the name and phone number of the contacts visible in the list or group participants you open. It does not read or store messages.

The list stays in your browser’s session storage until it becomes a file on your computer. Your contacts are never sent to us or to anyone else.

Permissions it asks for, and why:

• activeTab and scripting: to read the contacts in the WhatsApp Web tab, only when you ask in Cardume;
• storage: to keep the list until the download, your chosen language and the free allowance;
• downloads: to save the CSV or TXT file to your computer.

Cardume is not affiliated with WhatsApp or Meta.

What the Pro account sends to us

Only when you sign in to use Pro, the extension talks to api.vollachia.com and we store:

• your email address and sign-in times;
• a random installation identifier created by the extension, the extension identifier and a short browser label (for example “Chrome · Windows”), so you can manage your 3 browsers;
• a hash of the device token (never the token itself);
• your purchases: product, plan, the Stripe payment identifier, dates and refund or dispute status.

To stop abuse of the sign-in code we keep, for 2 days, attempt counters keyed by a one-way hash of your IP address and email.

Payments

Vollachia is the seller of Pro. Payments are processed by Stripe: to open checkout we send Stripe your account email, the product and the plan. Stripe collects your payment details under its own privacy policy (stripe.com/privacy).

Neither the extensions nor Vollachia ever receive or see your card details.

Service providers

• Supabase (database and sign-in), Vercel (API hosting), MillionSend (sending the sign-in code email) and Stripe (payments) process data to provide the service, under contracts that protect it.
• Some of these providers process data outside Brazil, including in the United States, under the safeguards of LGPD article 33.

Why we use it (legal bases)

• To provide the account, license and purchases you asked for (performance of a contract);
• to keep tax and accounting records (legal obligation);
• to prevent fraud and abuse of the license and sign-in (legitimate interest).

We do not sell personal data or use it for advertising.

The use of information received from the extensions adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

How long we keep it

Account and device data: while your account exists. Revoked devices: up to 90 days. Attempt counters: 2 days. Purchase records: as long as tax law requires (in Brazil, generally 5 years).

Your rights

You can ask to access, correct, export or delete your data, or ask any question about it, by writing to hello@vollachia.com from your account email. We answer within 15 days. You can also complain to Brazil’s data protection authority (ANPD).

Uninstalling an extension deletes its local data from your browser.

Security

Licenses are signed by our server and checked in the extension; the private key never leaves our server. Device tokens are stored only as hashes, the database denies public access, and all traffic uses HTTPS.

Cookies

These pages do not use advertising or analytics cookies. The checkout page loads Stripe, which may set cookies needed to process the payment and prevent fraud.

Children

Our products are not directed at children under 13, and we do not knowingly collect their data.

Changes

We will publish any update here with its date and, for material changes, notify account holders by email.