Privacy Policy
Last updated: April 22, 2026
Woohoo is a social CRM for indie founders, built and operated by Mudgal Labs. This policy explains what information we collect, why we collect it, and the choices you have. It covers both the Woohoo web app at woohoo.to and the Woohoo browser extension for Chrome and Firefox.
What we collect
We only store data that you either enter into Woohoo or explicitly save using the extension. Specifically:
- Account information. Woohoo uses Google sign-in — we do not manage passwords. When you sign in, Google shares your name, email address, and profile picture with us. We use these to create your account, authenticate you, and send essential account email.
- Saved interactions. When you click the save button on a DM or comment on a supported platform, we store the text of that message, a sanitized HTML copy, a link back to the original source, the timestamp, and the platform usernames involved (both the other person and, if you set it, your own handle so we can thread replies correctly).
- Follow-up metadata. Any follow-up date or note you attach to a saved Woohoo.
- Session data. A session token issued at sign-in, stored in your browser’s local storage and sent with each request to identify you.
The extension does notread platform content in the background. It only captures the specific message or comment you click “Save” on. It does not scrape your inbox, your feed, or any other data from the platforms it integrates with.
What we do not collect
- We do not run any third-party analytics, tracking pixels, or behavioural advertising SDKs.
- We do not read or store passwords or account credentials for any of the platforms you use with Woohoo.
- We do not sell, rent, or share your data with third parties for their own marketing.
How we use it
Collected data is used solely to provide the Woohoo service: rendering your Woohoos dashboard, grouping saved items into the correct threads, reminding you of follow-ups, and authenticating your extension sessions.
Where it is stored
Data is stored in a PostgreSQL database operated by us and hosted on Cloudflare infrastructure, encrypted at rest. Transport between your browser and our backend uses HTTPS.
Sub-processors
We rely on a small number of infrastructure providers to run Woohoo. They process data only on our behalf and under their own security commitments:
- Cloudflare — application hosting, database hosting, and CDN.
- Paddle — our Merchant of Record for the Pro plan. Paddle handles checkout, billing, and tax collection. We never see your card data.
- Google — authentication (OAuth sign-in). We receive your name, email, and profile picture; we do not receive access to your Google account contents.
Retention
Saved items live in your account until you delete them — either individually, by deleting the Woohoo they belong to, or by deleting your account. When you delete your account, all associated Woohoos and timeline items are removed.
Your rights
You can delete any saved item, Woohoo, or your entire account from within the web app at any time. You can also request an export of your data, or ask us to delete specific records, by emailing hey@woohoo.to.
Extension permissions
The Woohoo extension requests a minimal set of permissions:
- storage — to cache your session token and some local UI preferences in your browser.
- tabs — to open the Woohoo dashboard or sign-up page in a new tab when you click the extension popup.
- Host access to supported platforms — to inject the save button on DM and comment threads. The currently supported platform is
reddit.com. Support for additional platforms (such as LinkedIn and X) will be added in future releases; your browser will prompt you to approve each new host permission before it takes effect. - Host access to woohoo.to — to send your saved items to our backend.
Children
Woohoo is not directed at children under 13 and we do not knowingly collect data from them.
Changes to this policy
If we make a material change to this policy, we'll update the “Last updated” date above and, where appropriate, notify you by email.
Contact
Questions, concerns, or deletion requests — email hey@woohoo.to.