Privacy policy

Last updated: March 2026

1. What we collect

When you create an account, we collect your name, email address, and a hashed version of your password. We also store your subscription status and license key. When you use the Chrome extension, we receive anonymized deletion counts (e.g., "deleted 47 Facebook comments") — we never receive the actual content of your posts or comments.

2. What we do NOT collect

We do not collect, store, access, or transmit your social media passwords, login tokens, posts, comments, messages, photos, or any personal content from your social media accounts. The Chrome extension operates entirely within your browser and communicates with our server only for license validation and deletion count logging.

3. How the extension works

The WipeMySocial Chrome extension runs JavaScript code in your browser that automates the process of deleting your social media content. It interacts with the social media platform's website directly in your browser, the same way you would manually click "delete" on each item. No content is sent to our servers. The extension only contacts our API to validate your license key and report deletion counts.

4. Payment data

All payments are processed by Razorpay. We do not store your credit card numbers, UPI IDs, or bank account details. Razorpay handles all payment processing securely and is PCI DSS compliant. We only receive confirmation of successful payments and subscription status updates via Razorpay webhooks.

5. Data storage

Your account data (name, email, hashed password, subscription status, license key, deletion counts) is stored in a MySQL database on our dedicated server. Passwords are hashed using bcrypt and cannot be reversed. We use HTTPS encryption for all data transmission between your browser, the extension, and our servers.

6. Third-party services

We use the following third-party services:

  • Razorpay — payment processing
  • Google Fonts — typography

We do not use analytics trackers, advertising pixels, or data brokers.

7. Your rights under DPDP Act 2023

Under India's Digital Personal Data Protection Act 2023, you have the right to access, correct, and delete your personal data. You can delete your account at any time from your dashboard, which will remove all your data from our servers. You also have the right to withdraw consent for data processing. To exercise these rights, contact us at contact@wipemysocial.com.

8. Cookies

We do not use cookies on our website. Authentication is handled via JWT tokens stored in your browser's localStorage.

9. Changes to this policy

We may update this privacy policy from time to time. We will notify registered users of significant changes via email. The latest version will always be available at this URL.

10. Contact

For any privacy-related questions or concerns, contact us at contact@wipemysocial.com.