Privacy Policy
01. Single Purpose & Overview
This Privacy Policy explains how Rakshak DLP handles data. The Rakshak DLP Chrome Extension operates under a strict Single Purpose: to enforce Data Loss Prevention (DLP) controls strictly within the WhatsApp Web environment (`web.whatsapp.com`).
The extension modifies the user interface locally in your browser to prevent unauthorized data exfiltration (such as blurring chats or blocking calls) based on the strict policies configured by your organization's IT administrator.
02. Information We Do Not Collect
To ensure absolute privacy and compliance with strict security standards, we enforce a zero-knowledge data policy regarding your communications:
All Document Object Model (DOM) manipulation required to blur, hide, or block elements occurs entirely locally within the user's Chrome browser runtime. No chat data ever leaves your device.
03. Information Processed & Permissions
In compliance with Chrome Web Store policies, the Extension requests the absolute minimum permissions necessary and processes limited data:
Storage Permission
Required to securely store your Company ID locally on your device, preventing the need to re-authenticate.
Host Permission (*://web.whatsapp.com/*)
Required strictly to inject local UI modifications (like blurring sensitive chats) directly into the WhatsApp Web DOM. No data is transmitted from this domain.
Policy Configurations (Firestore)
Boolean values (e.g., blockDownloads: true) are retrieved from our secure Google Cloud infrastructure to dictate which UI elements should be restricted.
04. Prominent Disclosure & Consent
In accordance with Chrome Web Store User Data policies, the Rakshak DLP Extension requires explicit affirmative consent before processing any Company Identifier or applying policies.
Upon initial setup, the user is presented with a prominent disclosure. The extension remains fully inactive and processes zero data until the user physically checks the consent acknowledgment box and enters their Company ID.
05. Data Sharing & Third Parties
We unequivocally do not sell, rent, trade, or share any user data or organizational configuration data with any third parties. Data transfer strictly occurs via encrypted connections (HTTPS) directly between the Extension and our secure Google Cloud backend solely for the purpose of retrieving organizational DLP policies.
06. Contact Us
For inquiries regarding this Privacy Policy, compliance documentation, or data handling practices, please escalate the request through your organization's IT Administration department, or contact our security team directly via the Rakshak DLP Dashboard.