Privacy policy for WE4 Support
WE4 Support by Roy Shoyer
Privacy policy for WE4 Support
WE4 Support Privacy Statement
Last updated: October 24, 2026
Full policy: https://admin.we4.solutions/extension-privacy
- Who this covers
Shoyer.Net Inc. provides WE4 Support for Chrome, Edge and Firefox to authorized business administrators. The extension connects to your business’s WE4 workspace to display support cases and chats, send replies, update case status, and check unread activity.
This statement covers the Chrome, Edge, and Firefox extensions. The Shoyer.Net Privacy Policy explains the wider service, including the admin portal, infrastructure providers, international processing, and privacy rights. Your business controls access to its workspace and how it uses its customer records.
- Information handled
Account and connection information
Your business’s tenant code and name, your display name, connection identifiers, authorization codes, and credentials that permit inbox access or limited background unread checks. Credentials are sent to the configured WE4 service to authenticate requests.
Support conversations
Customer and author display names, customer email addresses, case numbers, subjects, message bodies, timestamps, conversation status, priorities, staff-only notes and tags, read positions, and attachment or signing-document metadata. Replies, staff details, status and read updates are sent to WE4 and stored with the business’s support records. Files you choose to attach and files you download are transferred through the configured WE4 API.
Unread activity and connection status
Unread conversation counts, the time of the last check, and connection status are used for the toolbar badge and alerts supported by your extension version. Background checks can continue with the sidebar closed while your browser is running.
Service and security records
The WE4 service may process request times, IP addresses, client or browser information, and authentication or error records to operate the service, prevent abuse, and investigate connection problems.
The extension does not collect your browsing history, read unrelated web pages, capture screens, or access your browser’s stored passwords or cookies. Your password and authenticator code are entered in the hosted WE4 sign-in flow, not stored by the extension. From version 0.1.6, the extension supports image and PDF uploads/downloads up to 10 MB. Document signing remains in the admin portal.
- Browser permissions
Permissions used by WE4 Support
PERMISSION PURPOSE
Side panel Display the support inbox beside your work.
Identity Open the secure authorization flow and receive its connection callback. This does not grant access to Gmail, Google Drive, or your Google account data.
Storage Keep connection credentials, business connection details, and unread-check status in extension storage as described below.
Alarms Schedule periodic background unread checks.
Configured WE4 API host Send authorized requests to the API selected when the extension is built. The production API is api.we4.solutions; sign-in opens admin.we4.solutions.
Chrome and Edge use a side panel and an offscreen document for notification audio. Firefox uses its native sidebar and a background event page for audio. Firefox also requests consent to handle authentication information, identifying account information, and support communications. Firefox packages contain no content scripts or web-accessible pages.
The extension does not request browsing-history, tabs, content-script, camera, microphone, or geolocation access. Other WE4 applications have their own permissions and notices.
- Storage and security
On your device: a limited notification credential, its expiry, business connection details, and unread-check status are kept in your browser’s extension-local storage so background checks can resume after a browser restart. This credential permits unread activity checks and connection revocation; it cannot read messages or the support inbox.
The interactive inbox credential and display name are kept in your browser’s memory-backed extension session storage. Inbox credentials expire and are cleared on browser restart, extension reload, or update. Loaded conversations, reply and private-note drafts, and selected files are held in the sidebar’s memory, not saved by the extension to local or synchronized storage, and are cleared when the inbox locks. Files you choose to download are saved by your browser.
At the service: support messages and activity updates remain part of your business’s WE4 records. The server stores hashes of extension credentials and checks account, tenant, membership, expiry, and revocation before granting access. Production communications use HTTPS. Chrome and Edge restrict extension storage to trusted contexts. Firefox session storage is privileged by default, and WE4 ships no content scripts or web-accessible pages. Extension storage is not an operating-system credential vault; protect your browser profile and device.
- How information is used and shared
Information is used to provide the support inbox, deliver replies, maintain case status and read positions, check unread activity, and secure the connection. Conversations are available to users authorized by the business’s workspace and customer-access settings; they are not necessarily private to one support agent.
Shoyer.Net and its service providers process information needed to host, maintain, and support WE4. Google Cloud provides service infrastructure. Authentication providers may receive information when you choose their sign-in methods in the portal. The general privacy policy describes providers used by the wider service and processing that may occur outside your province or country.
We do not sell extension user data, use it for advertising or creditworthiness decisions, or transfer it to data brokers. The extension does not include advertising or analytics trackers. Access or disclosure may also occur when necessary to investigate abuse, protect security, or comply with applicable law, as explained in the general privacy policy.
- Retention and your choices
Lock inbox: revokes interactive inbox access and clears displayed support content. Background notification checks remain connected.
Disconnect notifications and inbox: revokes the connection and removes its locally stored credentials and activity status after the service confirms disconnection. If the request fails, reconnect to the network and retry.
Remove the extension: use your browser’s extension-management screen to uninstall it. To revoke the server connection immediately, disconnect while online before uninstalling; uninstalling alone does not confirm server-side revocation.
Locking, disconnecting, or uninstalling does not delete messages, case history, or other business records already stored in WE4. Those records, security logs, and backups follow the service’s retention arrangements and applicable obligations. We do not promise a single deletion period for every business record.
For access, correction, deletion, or privacy questions, contact your business administrator or our Privacy Officer. We may verify your identity and coordinate with the business responsible for the workspace. Some records may need to be retained for security, dispute handling, or legal obligations.
- Chrome Web Store Limited Use
WE4 Support’s use and transfer of user data adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. User data is used to provide and improve the extension’s disclosed support features and for permitted security or legal purposes.
- Contact and updates
Privacy Officer · Shoyer.Net Inc.
570 Bay St.
Toronto, Ontario M5G 0B2, Canadaadmin@shoyer.net
Include your business’s tenant code and account email when relevant. Please do not send passwords, authenticator codes, or extension connection credentials.
We will update this page when the extension’s data practices change and revise the date above. Material changes requiring notice or consent will be communicated through the applicable service or extension flow.