Privacy policy · effective 25 October 2026
Clear about your data.
Desk AI for WhatsApp Web is an independent open-source project by Kudakwashe Musasiwa. It is not affiliated with, endorsed by, or produced by Meta or WhatsApp.
What the extension handles
When you enable relevant features, the extension handles visible WhatsApp Web conversations and contact details, business documents and notes, loaded images or payment proofs, follow-ups, settings, user-supplied API keys, and optional call recordings and transcripts with names you provide. Supported providers are OpenAI, OpenRouter, Kimi (Moonshot), DeepSeek, Anthropic, Google Gemini and xAI Grok.
Where data goes
When you run an AI task, the trusted extension worker sends the data needed for that task directly to the provider selected in Settings, using your own API key. A draft can send relevant business excerpts, visible conversation content and selected images. Optional text polishing sends only the selected operator text, without chat history or business knowledge. A call summary sends the transcript, configured business name and participant/speaker names you provide. Dictation audio is sent only after you click the microphone and grant browser access. Call recording starts only after you click Record and choose the active WhatsApp tab with Share audio in Chrome’s picker; tab and microphone audio are sent to the selected transcription provider after you stop the recording. The recording is not saved by the extension. Provider privacy, retention and usage terms apply to all requests.
Transcripts and summaries remain editable. They sync only to the selected WhatsApp composer under the app’s checks; the extension does not send the summary or any message. The paid Chrome Web Store build keeps automatic sending disabled and requires you to review and click WhatsApp’s Send button.
Stripe Checkout receives payment information for an optional one-time license purchase. The licensing service receives an installation identifier and license status; it does not receive AI content or provider keys. The product website serves the landing page and licensing endpoint, but AI requests go directly from the extension to the selected provider. There is no advertising analytics or general-purpose AI data backend.
Storage and deletion
Knowledge, notes, follow-ups, settings and provider keys remain in the local Chrome profile until you remove them or uninstall the extension. Local Chrome storage is not independently encrypted. Remove saved keys and delete knowledge or follow-ups in Settings. Provider retention and API policies apply to requests sent to that provider.
Credentials and billing
No API key or usage credit is included. Provider API usage is billed by the provider or account owner. OpenAI API billing is separate from a ChatGPT subscription. Desk AI does not currently offer Sign in with ChatGPT or ChatGPT-plan inference. Image generation and speech audio (TTS) are not included.
Privacy contact
For privacy questions or deletion requests, open an issue in the Desk AI for WhatsApp Web support tracker ↗. Please describe the request without including secrets or customer content.