Privacy Policy

1. Information We Collect

1.1 Account Information

When you create an account or sign in with a third-party provider (Google, Microsoft), we collect:

• Email address — used as your unique identifier and for transactional communications.
• Full name — displayed in your profile and used for personalisation.
• Profile image / avatar URL — sourced from your Google or Microsoft account when you use OAuth sign-in.
• Phone number — optionally provided during registration; used for account recovery and WhatsApp integration if enabled.

1.2 Usage Data

We automatically record information about how you use the Service, including:

• Search queries you submit (business type, location, radius).
• Search results and business leads you save or export.
• Notes and status labels you attach to leads.
• Subscription plan and payment status (we do not store full card details).
• IP address, browser type, and device information for security and analytics.

1.3 Payment Information

Payments are processed by Razorpay. We store only the Razorpay order ID and payment status. Full card numbers and bank details are never transmitted to or stored on our servers.

1.4 Integration Credentials

If you connect WhatsApp Business via our Integrations page, we store your WhatsApp API token and webhook verification token in our database, encrypted at rest.

2. How We Use Your Information

We use the information we collect to:

• Provide and improve the Service — process searches, display results, and personalise your dashboard.
• Authentication — verify your identity when you sign in and maintain your session.
• Communication — send transactional emails (OTP verification, payment receipts, plan change confirmations). We do not send marketing emails without your explicit consent.
• Subscription management — track your plan limits, search quotas, and billing cycle.
• Security & fraud prevention — detect suspicious activity and protect your account.
• Analytics & product improvement — understand aggregated usage patterns to improve features (data is anonymised where possible).
• Legal obligations — comply with applicable laws, regulations, or lawful government requests.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

3. Third-Party Services

We rely on the following third-party providers to operate the Service. Each has its own privacy policy.

When you choose to sign in with Google or Microsoft, those providers may share your name, email address, and profile picture with us as part of the authentication flow. We use this data only to create or update your GrabNear account.

4. GrabNear Chrome Extension

The GrabNear Chrome Extension ("Extension") is a browser add-on available on the Chrome Web Store. It lets you capture publicly visible business information from Google Maps search results and save them directly to your GrabNear CRM account.

What the Extension accesses

• Google Maps page content — the Extension reads publicly visible business listings on Google Maps (business name, phone number, address, website, star rating, review count, category, and photos) directly from the page DOM. This is identical to information any visitor to Google Maps can see without signing in.
• GrabNear authentication token — only if you choose to sign in (searching, scanning and CSV export work without an account). Your session token is stored locally in chrome.storage.local and used solely to authenticate API requests when saving leads to your GrabNear account. It is never transmitted to any third party.
• Recent searches — the business type and location you enter in the Extension's "Find Businesses" search form are stored locally in chrome.storage.local to power your search history. This data never leaves your browser.
• Country dial code — worked out inside your browser from your browser's language setting (for example "en-GB" gives +44), only to format phone numbers correctly. No location lookup or network request is made.

What the Extension does NOT do

• Does not collect, transmit, or store any personal data about you beyond the items described above.
• Does not read or access any browser tab other than Google Maps pages you are actively viewing.
• Does not track your browsing history outside of Google Maps.
• Does not run any remote code — all JavaScript is bundled inside the Extension package and reviewed by the Chrome Web Store.
• Does not share extracted business data with any third party. Data is sent only to your own GrabNear account via our encrypted API, or exported locally as a CSV file.

Data flow

When you click "Save to CRM", the extracted business listings (name, phone, address, website, rating, category, image URL) are sent via HTTPS to the GrabNear API and stored in your account. When you click "CSV", the data is saved directly to your local device using an in-memory Blob URL — no network request is made.

Permissions used and why

• storage — stores your GrabNear login token and recent searches locally in your browser.
• activeTab — grants temporary access to the map search tab you are viewing, only when you click the Extension icon, so it can read the business listings shown there.
• scripting — injects the lead-capture script into the active Google Maps tab to extract publicly visible business information.
• Host access — grabnear.com, grabnear-app-*.run.app — allows the Extension to communicate with the GrabNear API to save leads to your account.
• Optional access — www.google.com/maps — requested only when you run a search from the Extension, and only if you click Allow. It lets the Extension scan the results tab it opened for you when you click "Start Scanning". If you decline, you can still scan by clicking the Extension icon on the results tab. You can remove this access at any time from your browser's extension settings.

4b. GrabNear Sender for WhatsApp Web (Chrome Extension)

GrabNear Sender for WhatsApp Web ("Sender Extension") is a separate browser add-on. It sends the bulk WhatsApp campaigns you create on the GrabNear Leads page from your own WhatsApp Web session, one message at a time. GrabNear is not affiliated with, endorsed by, or sponsored by WhatsApp or Meta.

What the Sender Extension accesses

• GrabNear authentication token: read from your signed-in GrabNear tab and stored in chrome.storage.local. It is used only to call the GrabNear API for your own campaigns and is never sent to any third party.
• Campaign messages: for each campaign you start, the Sender Extension receives from the GrabNear API one recipient at a time: the lead's business name, phone number and the message text you wrote. It uses them only to open that chat in WhatsApp Web and send the message.
• WhatsApp Web page: on web.whatsapp.com the Sender Extension only opens the chat for the current campaign recipient, checks that the message box is filled, presses Send and confirms the message left the box. It does not read, copy, store or upload your chats, contacts, message history or media.
• Send results: whether each message was sent, skipped, failed or the number is not on WhatsApp is reported back to your GrabNear account so you can see campaign progress. If a send fails, a short technical description of the WhatsApp Web page layout (for example, whether a message box was found) is stored with that result to help fix the problem. It contains no chat content.
• Runner state: the current campaign ID, progress counters and the next scheduled send time are kept in chrome.storage.local so sending can resume after a browser restart.

What the Sender Extension does NOT do

• Does not access any website other than GrabNear and web.whatsapp.com.
• Does not read your WhatsApp conversations, contacts or media, and does not send messages you did not queue in a GrabNear campaign.
• Does not track your browsing history or show ads.
• Does not run remote code. All JavaScript is bundled in the extension package.
• Does not sell or share any data with third parties.

Your control

You can pause, resume or cancel a campaign at any time from the Leads page or the extension's popup. Campaigns are rate-limited with random delays and a daily limit you choose. Uninstalling the extension deletes all data it stored in your browser. Campaign history in your GrabNear account can be deleted by contacting us.

Permissions used and why

• storage: keeps your GrabNear session token and the campaign runner's progress locally, so sending continues across browser restarts.
• alarms: schedules the random delay between messages (Chrome extensions cannot keep long timers otherwise).
• Host access: web.whatsapp.com: opens each recipient's chat and presses Send in your WhatsApp Web tab.
• Host access: grabnear.com, grabnear-app-*.run.app: reads your GrabNear sign-in and fetches/reports your campaign queue.

4c. Lead Capture by GrabNear (Chrome Extension)

Lead Capture by GrabNear ("Lead Capture") is a separate browser add-on. It finds phone numbers on websites you choose and shows a "Send Lead" button next to them. When you click it, you can edit the name and phone number and save the lead to one of three places you choose: your GrabNear account (if you connect it), an Excel sheet kept in your browser, or a webhook that you set up, such as your CRM, Zapier, Make, n8n or your own server. Lead Capture works without a GrabNear account.

What Lead Capture accesses

• Page text, only on sites you turn on: Lead Capture has no access to any website when it is installed. It reads a site only after you turn it on from the toolbar button and approve Chrome's permission prompt for that site, or for a single page when you click "Scan this page once". It scans the visible page text and tel: links for phone numbers so it can place a "Send Lead" button next to them. Page text is processed only inside your browser and is never stored or uploaded.
• Leads you send: a name and a phone number, which you can edit before sending. They are saved only when you click Send, and only to the destination you pick. For a webhook, the request contains the name and phone under the field names you mapped, plus any fixed fields and headers you added. For the Excel sheet, the name, phone, website and page link are stored in your browser until you download or clear them. For your GrabNear account, the name, phone, website and page link are added to your GrabNear Leads. Nothing else from the page is included.
• GrabNear connection (optional): if you click "Connect GrabNear" and approve it on grabnear.com, GrabNear creates a connection key for your browser. Lead Capture keeps the key and your account email in chrome.storage.local; GrabNear stores only a hash of the key, the browser name you connected from, and when it was created and last used. The key can only add leads and show which account it belongs to. It cannot read your existing leads, searches or settings.
• Your settings: your webhooks (name, URL, field mapping, fixed fields and headers such as API keys), the list of sites you turned on, and your primary destination are stored in chrome.storage.local on your device. They are not synced or uploaded, and page scripts cannot read webhook URLs, headers or the GrabNear key.

What Lead Capture does NOT do

• Does not send any data to GrabNear unless you connect your GrabNear account and choose GrabNear as the destination for a lead.
• Does not send anything automatically. Every lead needs your click.
• Does not send leads over unencrypted connections. Webhook URLs must use HTTPS, and GrabNear is reached over HTTPS.
• Does not keep a copy of the leads you send to GrabNear or a webhook. Only leads you save to the Excel sheet are kept, in your browser, until you clear them.
• Does not track your browsing history, use analytics or show ads.
• Does not run remote code. All JavaScript is bundled in the extension package.
• Does not sell or share any data with third parties, and does not use data for creditworthiness or lending purposes.

Your control

You can turn Lead Capture off for any site from the toolbar button or the extension's settings page. Turning a site off also returns Chrome's access to that site. Removing a webhook removes its settings. You can delete Excel sheet leads one by one or all at once. You can disconnect GrabNear from the extension's settings or from Extensions in GrabNear, which revokes the key immediately. Uninstalling the extension deletes everything it stored in your browser. Once a lead reaches your webhook, it is handled by that service and its own privacy policy. You are responsible for having a lawful basis to collect and process the contact details you send.

Permissions used and why

• storage: keeps your webhook settings, the list of sites you turned on, your Excel sheet leads and your GrabNear connection key, locally in your browser.
• scripting: runs the phone-number detection script only on the sites you turned on, or once on the current page when you ask.
• activeTab: lets you scan the current page once without giving Lead Capture lasting access to that site.
• Optional host access: not granted at install. Chrome asks you each time, for one host at a time: the site you turn on, the HTTPS host of a webhook you add, or grabnear.com when you connect GrabNear, so leads can be posted there.
• Connection from grabnear.com: only pages on grabnear.com can hand Lead Capture its connection key, after you approve it there. No other website can talk to the extension.

4d. Click to Chat & Call – WhatsApp & Email Templates by GrabNear (Chrome Extension)

Click to Chat & Call ("Click to Chat") is a separate browser add-on. It adds Call, WhatsApp, SMS and Email buttons next to phone numbers and email addresses on websites you choose. When you click one, it fills in one of your message templates and opens WhatsApp, your email app, your messages app or your phone's dialler with the message ready. You press Send. Click to Chat never sends anything by itself, works without a GrabNear account and does not send any data to GrabNear. GrabNear is not affiliated with, endorsed by, or sponsored by WhatsApp or Meta.

What Click to Chat accesses

• Page text, only on sites you turn on: Click to Chat has no access to any website when it is installed. It reads a site only after you turn it on from the toolbar button and approve Chrome's permission prompt for that site, or for a single page when you click "Scan this page once". It scans the page text and tel: / mailto: links for phone numbers and email addresses so it can place its buttons next to them. Page text is processed only inside your browser and is never stored or uploaded.
• Selected text: when you open the toolbar popup, it checks whether you have selected a phone number or email address on the current page, and if so pre-fills Quick chat with it. Nothing is stored.
• Your templates and settings: your message templates, your name and company (used in templates), default country code, preferred WhatsApp and email apps, button choices, the sites you turned on and the template you used last are stored in chrome.storage.local on your device. They are not synced or uploaded. You can export them to a file yourself.

Where your messages go

When you click Open, the message you prepared is passed only to the app you chose: WhatsApp Web (web.whatsapp.com), the WhatsApp desktop app, a wa.me link, Gmail, Outlook, your default email app, your messages app, or your computer's calling app. The QR code is generated inside your browser. From that point the message is handled by that service under its own privacy policy, and only if you send it.

What Click to Chat does NOT do

• Does not send messages, emails or calls automatically, and does not send in bulk.
• Does not send any data to GrabNear or anyone else. GrabNear runs no servers for this extension.
• Does not read your WhatsApp chats, emails or contacts.
• Does not track your browsing history, use analytics or show ads.
• Does not run remote code. All JavaScript, including the QR code library, is bundled in the extension package.
• Does not sell or share any data, and does not use data for creditworthiness or lending purposes.

Your control

You can turn Click to Chat off for any site from the toolbar button or the settings page, which also returns Chrome's access to that site. You can edit or delete any template, and uninstalling the extension deletes everything it stored in your browser. Please contact only people who expect to hear from you, and follow the terms of WhatsApp and the websites you use it on.

Permissions used and why

• storage: keeps your templates and settings locally in your browser.
• scripting: runs the contact detection script only on the sites you turned on, or once on the current page when you ask, and reads the text you selected when you open the popup.
• activeTab: lets you scan the current page once and use Quick chat without giving Click to Chat lasting access to that site.
• Optional host access: not granted at install. Chrome asks you each time, for the one site you turn on.

4e. Contact Finder – Email & Phone Extractor by GrabNear (Chrome Extension)

Contact Finder is a separate browser add-on. When you click its toolbar icon on a business website, it shows the email addresses, phone numbers, WhatsApp links and social media profiles published on that site, so you can copy them or save them. Contact Finder works without a GrabNear account. Saved contacts go to an Excel sheet kept in your browser or, only if you connect it and choose it, to your GrabNear account.

What Contact Finder accesses

• The website you scan, only when you click the icon: Contact Finder has no access to any website when it is installed. Clicking its icon gives it temporary access to the tab you are on (Chrome's activeTab). It reads that page's text and links, and loads up to four pages from the same website whose links look like Contact or About pages, without sending your cookies. It looks only for email addresses, phone numbers, WhatsApp links, social profile links, the business name and a published address. Page text is processed inside your browser and is never stored or uploaded.
• Contacts you save: the business name (which you can edit), website, the emails, phones and profiles you leave ticked, and an optional note. They are saved only when you click Save. In the Excel sheet they stay in your browser until you download or clear them. If you choose GrabNear, they are added to your GrabNear Leads.
• GrabNear connection (optional): works the same way as for Lead Capture (section 4c). The connection key and your account email are kept in chrome.storage.local; GrabNear stores only a hash of the key. The key can only add leads and show which account it belongs to.

What Contact Finder does NOT do

• Does not read any page unless you click its icon on that page.
• Does not save, export or send listing details to GrabNear or anyone else.
• Does not guess, buy or look up contact details from other sources. It only shows what the website itself publishes.
• Does not track your browsing history, use analytics or show ads, and does not run remote code.
• Does not sell or share any data, and does not use data for creditworthiness or lending purposes.

Your control

You can remove saved contacts one by one or all at once, disconnect GrabNear from the settings page or from Extensions in GrabNear, and uninstalling the extension deletes everything it stored in your browser. You are responsible for contacting businesses lawfully, including anti-spam and data protection rules where you and they are based.

Permissions used and why

• activeTab and scripting: read the website you are on, only when you click the icon.
• storage: keeps your Excel sheet, settings and optional GrabNear connection key in your browser.
• Optional host access to grabnear.com: requested only when you click "Connect GrabNear", so contacts can be saved there.
• Connection from grabnear.com: only pages on grabnear.com can hand Contact Finder its connection key, after you approve it there.

4f. Business Profile Audit – Local SEO & Pitch by GrabNear (Chrome Extension)

Business Profile Audit is a separate browser add-on. When you open a business listing in Google Maps and click its toolbar icon, it checks what the listing shows publicly (website, phone, opening hours, rating, number of reviews, photos, whether the owner has claimed it and replies to reviews), gives it a score, and writes a short message you can send the business about what could be improved. It works without a GrabNear account. GrabNear is not affiliated with, endorsed by, or sponsored by Google.

What Business Profile Audit accesses

• The listing you have open, only when you click the icon: the extension has no access to any website when it is installed. Clicking its icon gives it temporary access to the current tab (Chrome's activeTab), and it reads only the details panel of the listing you opened. It does not scroll, click or load other listings.
• Your pitch settings: your name, your offer text, your message template and default country code, kept in chrome.storage.local.
• Nothing from the listing is kept: the score, the checks and your pitch are shown in the popup and are gone when you close it. Since version 1.0.2 the extension does not save, export or send listing details anywhere; earlier versions could keep them in an Excel sheet in your browser or send them to GrabNear, and that stored data is deleted when the extension updates.

What Business Profile Audit does NOT do

• Does not send messages. Copy and WhatsApp only prepare your message; you choose whether to send it.
• Does not collect listings in bulk, or read any page unless you click its icon there.
• Does not send any data to GrabNear unless you connect your account and choose GrabNear when saving.
• Does not track your browsing history, use analytics or show ads, and does not run remote code.
• Does not sell or share any data, and does not use data for creditworthiness or lending purposes.

Permissions used and why

• activeTab and scripting: read the listing you have open, only when you click the icon.
• storage: keeps your pitch settings in your browser.

4g. Email Tracker – Read Receipts for Gmail by GrabNear (Chrome Extension)

Email Tracker is a separate browser add-on that tells you when an email you sent from Gmail has been opened. It does not need a GrabNear account. GrabNear is not affiliated with, endorsed by, or sponsored by Google.

How tracking works

When you send an email with the "Tracked" toggle on, Email Tracker adds a tiny invisible image to the end of it, loaded from grabnear.com/t/<random id>.gif. When the recipient's email app shows the image, our server records the time. Your browser then asks our server how many times each of your emails has been opened and shows it to you. Some email apps block or pre-load images, so an open can be missed or reported early. You can turn tracking off for any single email with the toggle next to Send, or for all new emails in the extension's popup.

What is sent to GrabNear's server

• An install key: a random key made when you install the extension. The server stores only a SHA-256 hash of it, to know which emails are yours. It is not linked to your name, your Gmail address or a GrabNear account.
• A random id per tracked email, and the times its image was loaded. Tracking records do not include the reader's IP address, device or location (our hosting provider keeps standard short-lived request logs, as for any web page).
• When you view your own sent email in Gmail, the extension tells the server that id, so your own views are not counted as opens.

The subject, recipients and content of your emails are never sent to our server. The subject and recipient addresses are stored only in your browser (chrome.storage.local) so the popup can show which email was opened. Tracking records are deleted after 180 days.

What Email Tracker accesses in Gmail

• It adds the "Tracked" toggle next to Send in your compose windows and, when you send with it on, reads that email's subject and recipient addresses (kept only in your browser) and adds the tracking image.
• It looks for its own tracking image in emails you view, only to report your own views as described above.
• It does not read, store or send the content of your emails, your inbox or your contacts.

What Email Tracker does NOT do

• Does not send emails, and does not change anything except adding the image to emails you send with tracking on.
• Does not track your browsing history, use analytics or show ads, and does not run remote code.
• Does not sell or share any data, and does not use data for advertising, creditworthiness or lending purposes.

Read receipts are legal in most places, but some laws and workplaces require you to tell people you track email opens. You are responsible for using tracking lawfully.

Permissions used and why

• Access to mail.google.com: to show the Tracked toggle and add the tracking image to emails you send.
• Access to grabnear.com: to register tracked emails and check how often they were opened.
• storage: keeps your tracked emails list (subject, recipients, open counts) and settings in your browser.
• alarms and notifications: check for new opens every minute and show an alert when an email is opened. You can turn alerts off.
• scripting: starts the extension in Gmail tabs that were already open when you installed it, so you don't have to reload them.

4h. Property Share Kit – Listings, Cards & Brochures by GrabNear (Chrome Extension)

Property Share Kit is a separate browser add-on for property agents. When you click its toolbar icon on a property listing, it reads the listing's details and turns them into a card image or a one-page PDF brochure with your own contact details, which you can share with clients. It works without a GrabNear account and does not send any data to GrabNear.

What Property Share Kit accesses

• The page you're on, only when you click the icon: the extension has no access to any website when it is installed. Clicking its icon gives it temporary access to the current tab (Chrome's activeTab). It reads the listing's title, price, size, rooms, location, highlights and photo addresses from that page. Nothing is read from other tabs or in the background.
• Listing photos, only when you download a card or brochure: to put a photo from the listing on your card, Chrome asks you once for access to the website that hosts that photo. The photo is downloaded into your browser to draw the card and is not sent anywhere. You can choose "None" or upload your own photo instead.
• Your profile and settings: your name, company, phone, email, website, logo, brand colour, currency, EMI defaults and message template, kept in chrome.storage.local on your device.
• Your shortlist and saved properties: the details of properties you add, kept in your browser until you remove them. You can download saved properties as an Excel file.

Where your messages go

When you click "Copy card", your card image is copied to your clipboard so you can paste it into a WhatsApp chat, email or any other app yourself. "Copy list" copies your shortlist as a short text list the same way. The extension never opens, reads or sends messages. Card images, brochures and Excel files are created inside your browser and saved to your device.

What Property Share Kit does NOT do

• Does not send any data to GrabNear or anyone else. GrabNear runs no servers for this extension.
• Does not send messages by itself, or in bulk.
• Does not collect listings in bulk or read pages you don't click it on.
• Does not track your browsing history, use analytics or show ads, and does not run remote code.
• Does not sell or share any data, and does not use data for creditworthiness or lending purposes.

Listing photos and text belong to their owners. Please share them in line with the listing website's terms and your agreements with the owner. EMI and mortgage figures are estimates only.

Permissions used and why

• activeTab and scripting: read the listing you're on, only when you click the icon.
• storage: keeps your profile, settings, shortlist and saved properties in your browser.
• clipboardWrite: copies your card image (or shortlist) when you click "Copy card" or "Copy list", so you can paste it into a chat. It never reads your clipboard.
• Optional site access: not granted at install. Chrome asks you, for one website at a time, only when you copy or download a card that uses a photo from that website.

4i. Follow-up CRM – Lead Stages, Notes & Reminders by GrabNear (Chrome Extension)

Follow-up CRM is a separate browser add-on that adds a small CRM panel to WhatsApp Web. For any chat you open, you can set a lead stage, write notes, schedule a follow-up reminder and insert a saved quick reply into the message box. You can also add new enquiries yourself, and it times how long each one waits for your first reply. It works without a GrabNear account. Everything is kept in your browser unless you choose to send a lead to GrabNear.

What Follow-up CRM accesses

• WhatsApp Web only: the extension runs only on web.whatsapp.com. For the chat you have open, it reads the contact's name as shown in the chat header and their phone number, so it can attach your stage, notes and reminder to that chat. It also reads contact names in your chat list to show stage labels next to the chats you have marked. While an enquiry is waiting for your first reply, it notices when you send a new message in that chat, so it can stop the reply clock; it only checks that a message was sent, never its text. It does not read, store or upload your messages.
• Your leads: the name, phone number, email, stage, notes and follow-up time of each lead, and for enquiries the property, the source you picked and when you replied, kept in chrome.storage.local on your device.
• Your quick replies and settings: your reply templates and your name, kept in your browser.

Messages

Clicking a quick reply only places its text in the message box of the chat you have open. You always press Send yourself. The extension never sends messages on its own, in bulk or on a schedule.

Optional GrabNear connection

If you connect a GrabNear account in the extension's settings, you can click "Save to GrabNear" on a lead. Only then is that lead's name, phone number, stage, follow-up time and notes sent to GrabNear and added to your GrabNear leads. Nothing is sent automatically, and you can disconnect at any time.

What Follow-up CRM does NOT do

• Does not read, copy or upload your WhatsApp messages or media.
• Does not send messages by itself, or in bulk.
• Does not collect contacts in bulk; only chats you mark yourself are saved.
• Does not track your browsing history, use analytics or show ads, and does not run remote code.
• Does not sell or share any data, and does not use data for creditworthiness or lending purposes.

Follow-up CRM is an independent product and is not affiliated with or endorsed by WhatsApp or Meta.

Permissions used and why

• Access to web.whatsapp.com: shows the CRM panel, stage labels and the Follow-ups list inside WhatsApp Web.
• storage: keeps your leads, notes, quick replies and settings in your browser.
• alarms and notifications: show a desktop reminder when a follow-up is due, or when a new enquiry has waited 15 minutes for a reply.
• Optional grabnear.com access: not granted at install. Asked only when you connect a GrabNear account, to save leads you choose.

4j. Table to Excel – Export Tables & Lists from Any Page by GrabNear (Chrome Extension)

Table to Excel is a separate browser add-on that turns tables and lists on a web page into an Excel, CSV or copy-and-paste file. It works without a GrabNear account and does not send any data to GrabNear or anyone else.

What Table to Excel accesses

• The page you're on, only when you click the icon: the extension has no access to any website when it is installed. Clicking its icon opens a side panel and gives it temporary access to the current tab (Chrome's activeTab). It reads the tables, data grids and lists on that page and shows them to you. Nothing is read from other tabs or in the background.
• More pages, only when you ask: if you choose "All pages", the extension clicks the page's own Next or Load more button, or scrolls, to collect the following pages. For websites that reload between pages, Chrome asks you once for access to that one website.
• Your settings: your page limit, wait time, duplicate setting and whether to save collections, kept in chrome.storage.local on your device.
• Saved collections: the tables you read (their rows and columns, the page title and web address, and when they were saved) are kept in the extension's own storage in your browser, so you can open and download them again later. You can turn this off, and delete one or all collections at any time in History. The newest 200 are kept; older ones are removed automatically.

Where your data goes

Collected rows and saved collections stay on your device. Excel and CSV files are created inside your browser and saved to your device. "Copy for Sheets" places the rows on your clipboard. Nothing is uploaded. Removing the extension deletes its saved collections.

What Table to Excel does NOT do

• Does not send any data to GrabNear or anyone else. GrabNear runs no servers for this extension.
• Does not read pages you don't open it on, and does not run in the background.
• Does not track your browsing history, use analytics or show ads, and does not run remote code.
• Does not sell or share any data, and does not use data for creditworthiness or lending purposes.

Please export only data you are allowed to use, in line with each website's terms.

Permissions used and why

• activeTab and scripting: read the tables and lists on the page you open the extension on.
• sidePanel: shows the extension in Chrome's side panel, so it stays open while pages change.
• storage: keeps your export settings in your browser. (Saved collections use the extension's own browser storage and need no extra permission.)
• Optional site access: not granted at install. Chrome asks you, for one website at a time, only when you collect all pages from a website that reloads between pages.

4k. Read Later & Highlights – Save Articles to Read Offline by GrabNear (Chrome Extension)

Read Later is a separate browser add-on that saves articles you choose, so you can read them later in a clean reader view, highlight passages and add notes. It works without a GrabNear account and does not send any data to GrabNear or anyone else.

What Read Later accesses

• The page you save, only when you ask: the extension has no access to any website when it is installed. When you click its icon or press its keyboard shortcut, Chrome gives it temporary access to that one tab (activeTab). It reads the article on that page (title, author, site name, main text and images' web addresses, and any text you have selected) and saves it. Nothing is read from other tabs or in the background.
• Article text for imported links, only when you ask: if you import a list of links, you can choose "Get the full text". Chrome then asks you for access to those websites, and the extension downloads only those articles' pages to save their text.
• Files you import: export files from other read-later apps, bookmark files or a Read Later backup that you choose. They are read inside your browser.
• What you create: tags, favorites, highlights, notes, reading progress and your settings.

Where your data goes

Saved articles, highlights and notes are kept in the extension's own storage in your browser (IndexedDB and chrome.storage.local). Images in articles are loaded from the original website when you read. Exports (backup, Markdown, CSV) are created in your browser and saved to your device. Nothing is uploaded. Removing the extension deletes everything it saved, and Settings has a "Delete everything" button.

What Read Later does NOT do

• Does not send any data to GrabNear or anyone else. GrabNear runs no servers for this extension.
• Does not read pages you don't save, and does not track your browsing history.
• Does not use analytics or show ads, and does not run remote code.
• Does not sell or share any data, and does not use data for creditworthiness or lending purposes.

Permissions used and why

• activeTab and scripting: read the article on the page you choose to save.
• storage and unlimitedStorage: keep your saved articles, highlights and settings in your browser, without running out of space as your list grows.
• Optional site access: not granted at install. Chrome asks you only when you choose to get the full text for links you imported.

4l. Billable Hours & Invoices – Calendar Timesheets by GrabNear (Chrome Extension)

Billable Hours is a separate browser add-on that turns meetings from calendars you connect into a timesheet, and billable time into invoices. It works without a GrabNear account and does not send any data to GrabNear or anyone else.

What Billable Hours accesses

• Google Calendar, only if you sign in with Google: when you click "Sign in with Google", Google asks you to allow read-only access to your calendars (https://www.googleapis.com/auth/calendar.readonly) and your email address (openid, email). The extension then reads the calendars you pick: each meeting's title, time, location, description, and the email addresses and replies of people invited, for the last 12 months and the next 2 months. It refreshes them about once an hour. It never creates, changes or deletes anything in your calendar.
• Outlook / Microsoft 365, only if you sign in with Microsoft: when you click "Sign in with Microsoft", Microsoft asks you to allow the extension to sign you in and read your calendars (Microsoft Graph User.Read and Calendars.Read, read-only). The extension reads the same meeting details as for Google, for the calendars you pick, and never changes anything in them.
• Calendar links you add: when you paste a calendar's private iCal (.ics) link, Chrome asks you for access to that one web address. The extension downloads that calendar file to read your meetings (title, time, location, and the email addresses and replies of people invited), and refreshes it about once an hour. It never changes your calendar and never signs in to your calendar account.
• Calendar files you import: .ics or .zip files you choose, read inside your browser.
• What you enter: clients (names, rates, billing address and email, tax numbers, matching rules), time you add or record with the timer, your business details, logo and payment details, and the invoices you create.

Where your data goes

Meetings read from Google or Microsoft go directly from their servers to your browser; they are never sent to GrabNear or anyone else. The access token is kept only in the browser's temporary session storage and expires within an hour; no password or refresh token is stored. Removing a calendar signs the extension out of that account. You can also remove access at any time at myaccount.google.com/permissions (Google) or account.live.com/consent/Manage and myapplications.microsoft.com (Microsoft).

Everything is kept in chrome.storage.local in your browser. Invoices are printed or saved as PDF through Chrome's own print dialog, and CSV and backup files are created in your browser and saved to your device. The QR code on an invoice contains only your UPI ID or payment link, the amount and the invoice number, and is drawn on your device. Nothing is uploaded. Removing the extension deletes its data, and Settings has a "Delete everything" button.

What Billable Hours does NOT do

• Does not send any data to GrabNear or anyone else. GrabNear runs no servers for this extension.
• Does not read any web page, your browsing history or your email.
• Does not handle payments or store card details.
• Does not use analytics or show ads, and does not run remote code.
• Does not sell or share any data, and does not use data for creditworthiness or lending purposes.

Permissions used and why

• storage and unlimitedStorage: keep your calendars' meetings, clients, time entries, invoices and settings in your browser.
• alarms: refreshes the calendars you added about once an hour, and updates the running timer shown on the toolbar icon each minute.
• Optional identity: asked for only when you click "Sign in with Google" or "Sign in with Microsoft", to show their sign-in window.
• Optional site access: not granted at install. Chrome asks you for each calendar web address you add, so the extension can download that calendar file.

4l-1. Billable Hours: Google user data and Limited Use

Billable Hours & Invoices' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Google Calendar data is used only to show your meetings in your timesheet, work out billable hours, and create the invoices you ask for.
• It is not transferred to GrabNear or any third party, not used for advertising, not sold, and not used to train AI or machine-learning models.
• No person at GrabNear can read it, because it never leaves your browser.

3a. Google User Data — Permissions, Sharing & Disclosure

GrabNear requests Google user data in two separate flows, each with distinct permissions:

A. Google Sign-In (Authentication)

When you sign in with Google, we request the following OAuth scopes:

• openid — confirms your identity
• email — your Google email address, used as your GrabNear account identifier
• profile — your full name and profile picture, displayed in your account

This data is used only to create or update your GrabNear account and to authenticate your sessions. It is not used for advertising, profiling, or any unrelated purpose.

B. Google Calendar Integration (Optional)

If you choose to connect your Google Calendar from the Integrations page, we request the following additional OAuth scope:

• https://www.googleapis.com/auth/calendar.events — allows GrabNear to create, read, update, and delete calendar events on your primary Google Calendar. This is used exclusively to add, update, or remove follow-up reminder events when you mark a business lead as "Follow Up" in GrabNear.

We do not read, store, or process the contents of your existing Google calendar events. We only write/manage events that GrabNear itself creates (follow-up reminders). Google Calendar access is entirely optional — the core Service works without it.

Your Google Calendar OAuth access token and refresh token are stored encrypted in our database (Supabase) and are used solely to perform the calendar actions described above. You can revoke Google Calendar access at any time from the Integrations page or from your Google Account permissions.

C. Microsoft (Outlook) Calendar Integration (Optional)

If you choose to connect your Microsoft Outlook Calendar from the Integrations page, we request the following Microsoft OAuth scopes:

• https://graph.microsoft.com/Calendars.ReadWrite — allows GrabNear to create, read, update, and delete calendar events in your Microsoft/Outlook Calendar. This is used exclusively to add, update, or remove follow-up reminder events when you mark a business lead as "Follow Up" in GrabNear.
• offline_access — allows GrabNear to refresh your access token without requiring you to re-authenticate each time, so your calendar integration stays connected.

We do not read, store, or process the contents of your existing Outlook calendar events. We only write/manage events that GrabNear itself creates (follow-up reminders). Microsoft Calendar access is entirely optional — the core Service works without it.

Your Microsoft OAuth access token and refresh token are stored encrypted in our database (Supabase) and are used solely to perform the calendar actions described above. You can revoke Microsoft Calendar access at any time from the Integrations page or from your Microsoft Account app permissions.

With whom we share Google user data

We do not sell, rent, or share Google user data with any third party, except in the following limited circumstances:

• Supabase — our database and authentication provider stores your email, name, avatar URL, and (if calendar is connected) your OAuth tokens to maintain your account and calendar integration. Supabase processes this data on our behalf and does not use it for independent purposes. (Supabase Privacy Policy)
• Google Calendar API — when creating or managing follow-up events, our backend sends requests to Google's Calendar API using your access token. No data beyond the event details (lead name, follow-up date) is transmitted.
• Microsoft Graph API — if you connect your Outlook Calendar, our backend sends requests to Microsoft's Graph API using your access token to create or manage follow-up events. No data beyond the event details (lead name, follow-up date) is transmitted. (Microsoft Privacy Statement)
• Google Cloud Run — our backend infrastructure hosted on Google Cloud processes all API requests. Google processes infrastructure data solely to operate the hosting environment. (Google Cloud Privacy Notice)
• Legal obligations — we may disclose your data if required by law, court order, or lawful government request.

No other third parties receive, access, or process your Google user data. Google user data is never transferred to data brokers, advertisers, or analytics platforms.

3b. Google API Limited Use Disclosure

GrabNear's use of information received from Google APIs adheres to the Google API Services User Data Policy , including the Limited Use requirements.

Specifically:

• We only request Google account data and Calendar access that is strictly necessary for the features described above.
• We do not use Google user data to serve advertisements.
• We do not use Google Calendar or Microsoft Calendar data for any purpose other than creating and managing follow-up reminders at the user's request.
• We do not allow humans to read your Google or Microsoft calendar data unless you have given explicit permission, it is necessary for security purposes, or it is required by law.
• We do not transfer Google user data to third parties except as described in section 3a above.
• We do not use Google data to develop, improve, or train generalized AI or machine learning models.

4. Cookies & Sessions

GrabNear uses the following types of browser storage:

• Authentication session (localStorage) — Supabase stores a JWT access token and refresh token in your browser's localStorage. This token is used to authenticate your requests and is automatically refreshed. It is cleared when you log out.
• Strictly necessary cookies — set by Cloudflare (our DNS/CDN provider) for DDoS protection and load balancing. These do not track you across websites.
• Analytics cookies — we use Google Analytics (GA4) to understand aggregate usage patterns such as page visits and session duration. This helps us improve the product. Google Analytics may set cookies on your device. You can opt out via Google's opt-out tool.
• Advertising cookies (Google AdSense) — our blog pages (grabnear.com/blog) use Google AdSense to display advertisements. Google AdSense may set cookies and use device identifiers to serve personalised ads based on your browsing activity. These cookies are set by Google (a third party) and governed by Google's Privacy Policy. You can opt out of personalised ads at google.com/settings/ads or via aboutads.info.

We use a cookie consent banner to obtain your consent before any non-essential cookies are placed. You can withdraw your consent at any time by clearing your browser cookies.

4a. Third-Party Advertising (Google AdSense)

We use Google AdSense to display advertisements on our blog pages. Google AdSense is a service provided by Google LLC. As a third-party vendor, Google uses cookies (including the DoubleClick cookie) to serve ads based on your prior visits to our website and other websites on the internet.

Key points about how Google AdSense works on our site:

• Google may use the DoubleClick cookie to serve ads based on your visits to this and other websites.
• Third-party vendors and ad networks may also use cookies to serve ads on our site.
• We do not control these cookies — they are governed by Google's own privacy policies.
• You can opt out of personalised advertising by visiting Google Ads Settings.
• You can also opt out of third-party vendor ad cookies by visiting www.aboutads.info.

If you would prefer not to see personalised ads, you can disable personalised advertising in your Google account settings or use browser extensions that block advertising cookies.

5. Data Retention

• Account data (name, email, profile) — retained for as long as your account is active. You may request deletion at any time.
• Search history and leads — retained for the lifetime of your account. You can manually delete individual searches or leads from your dashboard.
• Payment records — retained for 7 years as required by Indian GST regulations.
• Server logs — retained for up to 30 days for security and debugging, then automatically purged.
• Deleted accounts — personal data is removed within 30 days of account deletion, except where retention is required by law.

6. Security

We implement reasonable technical and organisational measures to protect your data, including:

• All data in transit is encrypted via TLS/HTTPS.
• Database and credentials are stored with Supabase, which encrypts data at rest.
• API keys and integration tokens are stored encrypted.
• Access to production systems is restricted to authorised personnel.

No method of transmission over the internet is 100% secure. If you believe your account has been compromised, contact us immediately at support@grabnear.com.

7. Your Rights

Depending on your location, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — request that we delete your account and personal data ("right to be forgotten").
• Portability — receive your data in a machine-readable format.
• Withdraw consent — opt out of any non-essential data processing at any time.

To exercise any of these rights, email us at support@grabnear.com. We will respond within 30 days.

8. Children's Privacy

GrabNear is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please reach out: