AISAR WA Passkey Connector — Privacy Policy

What the extension does

The extension completes the passkey (WebAuthn) confirmation step when a user connects a passkey-protected WhatsApp account to the AISAR platform. It relays a confirmation request from the AISAR connection wizard to a web.whatsapp.com tab, where the browser performs the passkey prompt, and returns the signed confirmation to the wizard.

Data we process

• Passkey confirmation (authentication information). The signed WebAuthn assertion produced by your browser is passed, unmodified and in memory only, from the web.whatsapp.com tab to the AISAR wizard, which submits it to WhatsApp to finish linking your account. The extension cannot read the private key of your passkey — that never leaves your device.

What we do not do

• No collection of messages, chats, contacts, browsing history or page content.
• No analytics, telemetry, cookies or tracking of any kind.
• No storage: nothing is written to disk or extension storage; the confirmation is forgotten as soon as it is delivered.
• No selling or sharing of data with third parties.
• No activity outside an explicit connection attempt started by you in the AISAR wizard.

Permissions, explained

• tabs — to open the web.whatsapp.com tab for the confirmation and close only the tab the extension itself opened.
• web.whatsapp.com — passkeys for WhatsApp are scoped to whatsapp.com, so the browser will only produce the confirmation on that origin.
• my.aisar.app — the AISAR connection wizard runs there (including when embedded in a partner CRM); the extension exchanges the request and result with it.

Contact

AISAR — omnichannel messaging platform for business, aisar.app.
Questions about this policy: support@aisar.app.