← Back to TalkScout Connect
Trust, Transparency & Security

Privacy Policy

📅 Effective Date: 15th November 2024 · Version 2.1

1. Overview & Single-Purpose Statement

TalkScout Connect is a dedicated WhatsApp outreach automation tool and cloud-based CRM built for recruitment teams, talent acquisition professionals, and business development operations. Our service comprises the TalkScout Connect Cloud CRM (connect.talkscout.net), the TalkScout Connect Chrome Extension, and the product distribution hub (download.talkscout.net).

This Privacy Policy explains how TalkScout Connect collects, uses, protects, and handles your information. We design our software around privacy-by-design principles and comply with the Google Chrome Web Store Developer Program Policies, the General Data Protection Regulation (GDPR), and the Egyptian Personal Data Protection Law (Law No. 151 of 2020).

🛡️ Our Core Guarantee: Zero Access to Private Chats

TalkScout Connect NEVER reads, intercepts, monitors, or saves your private personal WhatsApp messages or chat history. The extension interacts solely with the specific telephone numbers and message templates that you explicitly schedule in an active campaign.

2. Chrome Extension Disclosures & Permissions

The TalkScout Connect browser extension operates directly inside your own web browser session at web.whatsapp.com. It serves a single, well-defined purpose: enabling you to safely send personalized outreach messages to candidate lists and view delivery progress in real time.

We request only the minimum browser permissions required for extension functionality:

Permission Technical Scope Justification & Purpose
storage chrome.storage.local Stores your session token, active campaign ID, and queue pause/resume state so outreach can safely resume if the tab is reloaded.
host_permissions
(*://web.whatsapp.com/*)		 DOM Content Script Injection Required to render the in-page Q Side bar, detect when WhatsApp Web is authenticated, and paste campaign messages into active recipient chats.
activeTab Active Tab Identification Verifies that an authorized WhatsApp Web tab is open to prevent orphaned background sending routines.
  • No Keystroke Logging: We do not capture or log keyboard strokes.
  • No Screen Recording: We do not capture screenshots or video recordings of your browser.
  • No Network Snooping: The extension does not inspect web traffic on any website other than web.whatsapp.com and our own secure APIs (connect.talkscout.net/api/*).

3. Information We Collect

We only collect information necessary to operate your CRM workspace and dispatch your outreach campaigns:

A. Account & Profile Information

When you register for TalkScout Connect, we collect your name, business email address, password hash, and subscription plan details.

B. Campaign & Candidate Data (Uploaded by You)

To run outreach campaigns, you may import candidate or client contact information via Excel (.xlsx, .csv) or form inputs. This data includes:

  • Recipient phone numbers and recipient names.
  • Company or job role details.
  • Custom template fields (such as {{name}}, {{phone}}, {{company}}).
  • Outreach message copy and optional media attachments (images, videos, or documents up to 100MB).

Ownership: Your uploaded contact lists and candidate databases belong exclusively to you. We never sell, rent, monetize, or share your candidate data with other users, advertisers, or third parties.

C. Device & Worker Telemetry

To coordinate multi-device sending queues without collision, the extension periodically transmits lightweight device telemetry to the Cloud CRM:

  • Connected WhatsApp phone number and device name.
  • Extension software version and battery percentage.
  • Online / offline connection heartbeat.
  • Message delivery logs: recipient number, worker phone ID, timestamp, and delivery status (Sent, Failed, Queued).

4. How We Use Your Information

We use your information exclusively for the following operations:

  • Multi-Worker Queue Dispatch: Distributing campaign recipients fairly across your connected WhatsApp accounts using deterministic modulo round-robin algorithms to prevent duplicate messages.
  • Anti-Ban Protection: Enforcing randomized delay timers (15–45 seconds) and natural typing pace to keep your sending numbers secure from automated spam flags.
  • Crash Recovery: Enabling campaigns to pause and resume seamlessly across browser restarts or tab closures without losing queue position.
  • Analytics & Delivery Audits: Displaying accurate delivery rates, response counts, and failure reasons in your CRM dashboard.
  • Customer Support: Diagnosing technical delivery issues or resolving extension connectivity inquiries upon your request.

5. Third-Party Infrastructure & Sub-Processors

We rely on enterprise-grade infrastructure providers to run TalkScout Connect securely:

  • Cloudflare Inc.: Edge serverless runtime (Cloudflare Pages), Cloudflare D1 SQL database, and Cloudflare KV edge caching. Provides TLS 1.3 encryption, DDoS mitigation, and global CDN delivery.
  • Supabase Inc.: SOC 2 compliant encrypted PostgreSQL database hosting and authentication services.
  • Resend: Secure transactional email delivery for account verifications and critical system notices.

We do not partner with data brokers, behavior tracking services, or commercial advertising networks.

6. Data Security & Storage Practices

We implement rigorous technical safeguards to ensure your data is protected against unauthorized access, loss, or alteration:

  • Encryption in Transit: All communications between the extension, browser, and our cloud APIs use industry-standard HTTPS / TLS 1.3 with modern cryptographic ciphers.
  • Encryption at Rest: Cloud databases and edge caches are protected by AES-256 encryption.
  • Client-Side Processing: Phone number normalization and spreadsheet parsing occur locally inside your browser before payload transmission.
  • Isolated Tenant Workspaces: Campaign queues and lead pools are strictly partitioned by organization ID, preventing cross-account exposure.

7. Data Retention & User Control

You maintain complete control over your data at all times:

  • Campaign Deletion: Deleting an archived campaign completely removes its queue entries and associated logs.
  • Device Disconnection: You can disconnect any worker phone number or trigger an instant remote logout from the CRM "Devices & Channels" tab.
  • Account Erasure: You may request the permanent deletion of your account, contact lists, and message history at any time by emailing privacy@talkscout.net. Deletion requests are processed within 10 business days.

8. Legal Compliance & International Standards

TalkScout Connect complies with applicable privacy regulations:

  • Google Chrome Web Store Policies: Adherence to Developer Program Policies on user data privacy, minimum viable permissions, and transparent single-purpose functionality.
  • Egyptian Personal Data Protection Law (Law No. 151 of 2020): Recognition of data subject rights, consent requirements, and secure processing standards.
  • GDPR (EU Regulation 2016/679): Providing right of access, rectification, portability, and erasure to European users and contacts.

9. Policy Updates

We may update this Privacy Policy from time to time to reflect operational, product, or legal enhancements. Changes will be posted to this page with an updated Effective Date. Continued use of TalkScout Connect after any modification indicates acceptance of the revised policy.

10. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy, please contact our team: