Guangzhou YekAuto Technology Co., Ltd. ("we", "us", or "our") respects your privacy. This Privacy Policy applies to the YekAuto.Ai (also known as CarWholesale.Ai) Chrome extension and related services, and explains how we collect, use, store, and protect your information when you use the extension. Please read this policy carefully before using our services.

1. Information We Collect

To provide the automotive wholesale CRM assistant on WhatsApp Web, the extension may access or collect the following information:

• WhatsApp Web page information: When you authorize the extension, it needs to access the currently opened web.whatsapp.com page to read chat messages, contact names, and phone numbers for AI auto/manual replies, customer info display, message sync, and broadcast messaging.
• WhatsApp account identifiers: Including your WhatsApp account info (such as wa_account, phone number) to call backend AI services, identify the current user, and associate data with the correct CRM account.
• CRM login credentials: The authentication token obtained after you log in to our CRM backend is stored in chrome.storage.sync and held in memory by the Background Service Worker for making authenticated requests to the CRM backend.
• Business data: Including vehicle inventory, quick reply templates, broadcast contact lists, send history, customer status, translation records, subscription status, etc., used for display and business operations within the extension.

We do not actively collect your location, health information, financial account details, authentication-sensitive information (such as passwords or PINs), or payment card numbers. Payment processing (if applicable) is handled by third-party payment channels such as WeChat Pay, and this extension does not process payment information directly.

2. How We Use Information

We use the collected information solely to provide the core features of the extension, including:

• Generating AI auto-replies or manual reply suggestions based on chat context;
• Querying customer profiles from the CRM and displaying them in the WhatsApp Web interface;
• Syncing WhatsApp contacts and chat history to your CRM system;
• Sending rich-text quick replies, vehicle inventory cards, and broadcast messages;
• Providing message translation, customer status follow-up, and subscription management.

3. Information Sharing and Third Parties

Your data is only transmitted to our own CRM backend (default domain https://bms.go.yekauto.com) and our authorized service providers to fulfill the functions described above. We do not sell, rent, or transfer your data to unrelated third parties for advertising, marketing, or any purpose unrelated to the single purpose of this product.

4. Data Security

We implement reasonable technical and administrative measures to protect your data. The CRM authentication token is held only in memory by the Background Service Worker and is not exposed to the Content Script or the WhatsApp page main world. All communications with our backend are encrypted via HTTPS. Please keep your browser and operating system accounts secure to prevent unauthorized use of this extension.

5. Your Rights

You can log out of the CRM at any time from the extension settings, or remove the extension from your browser. Removing the extension will clear locally stored business data and login state. If you need to query, correct, or delete data already synced to the CRM backend, please contact us using the information below.

6. Policy Updates

We may update this Privacy Policy from time to time based on product changes or legal requirements. The updated policy will be posted on this page with a revised "Effective Date". Please review it periodically.