Privacy Policy
Last updated: 24 March 2026
WHMCS Assistant ("the Extension") is developed and maintained by Hippynet Broadcast Technologies Ltd. ("we", "us"). This policy explains what data the Extension accesses, how it is stored, and what it does not do.
Summary
- We collect no analytics, telemetry, or usage data.
- We use no cookies or tracking pixels.
- Your credentials are stored locally on your device.
- The Extension communicates only with your WHMCS instances and our license server.
- We share no data with third parties.
Data the Extension Accesses
WHMCS API Data
The Extension connects to WHMCS installations that you configure. It retrieves support tickets, invoices, orders, client information, and administrative data through the WHMCS API. This data is cached locally in your browser's extension storage to reduce API load and enable faster access.
The Extension never transmits WHMCS data to any server other than your own WHMCS instances.
API Credentials
You provide API credentials (identifier, secret, and optionally an access key) to connect to each WHMCS instance. These credentials are stored using the browser's built-in chrome.storage API. You choose the storage mode:
- Local Only (default): Credentials remain on this device only.
- Hybrid: Non-sensitive settings sync across devices; credentials stay local.
- Full Sync: All data syncs via your browser account (Google/Microsoft). Credentials are encrypted in transit by the browser.
We do not have access to your stored credentials under any storage mode.
License Validation
If you activate a Pro license, the Extension sends your license key to whmcs-assistant.com to verify its validity. This request contains:
- Your license key
- A hashed device identifier (for per-device licensing)
No WHMCS data, credentials, ticket content, or personal information is included in license validation requests.
Admin Username
If you configure an admin username (used to attribute ticket replies), it is stored per-device in local storage and is never synced across devices or transmitted to us.
Data We Do Not Collect
- No browsing history or page content
- No analytics or usage statistics
- No crash reports or diagnostics sent to us
- No personally identifiable information
- No cookies, fingerprints, or tracking of any kind
Permissions Explained
The Extension requests certain browser permissions. Here is why each one is needed:
| Permission | Purpose |
|---|---|
storage | Save your settings, cached data, and credentials locally |
notifications | Show desktop alerts for new tickets and replies |
alarms | Schedule periodic data refresh in the background |
sidePanel | Display the assistant in the browser sidebar |
tabs | Open WHMCS admin pages when you click through |
declarativeNetRequest | Handle CORS for API communication with your WHMCS instances |
offscreen | Process notification sounds and badge generation in the background |
| Host permissions (per-instance) | Connect to your specific WHMCS URLs. Requested individually when you add each instance — not at install time. |
Third-Party Services
The Extension does not embed or communicate with any third-party services, advertising networks, or analytics providers. The only external communication is:
- Your WHMCS instances (configured by you)
- Our license server at
whmcs-assistant.com(for Pro license validation only)
Data Retention
All data is stored in your browser's extension storage. Uninstalling the Extension removes all stored data. You can also manually clear data from the Extension's settings (Data Management section).
Children's Privacy
The Extension is a professional tool for WHMCS administrators and is not directed at children under 13.
Changes to This Policy
We will update this page if our practices change. Material changes will be communicated through the Extension's "What's New" feature.
Contact
Questions about this policy? Email us at support@whmcs-assistant.com.
Hippynet Broadcast Technologies Ltd.
United Kingdom