Privacy Policy

Witness: Chat Funnels CRM, the website and the Chrome extension

Last updated October 22, 2026

Witness is made by LOL Media LLC("we"). It is a CRM for people who set appointments in direct messages, plus a Chrome extension that shows a helper panel on Instagram, TikTok, Facebook, Messenger and LinkedIn. This page says what we collect, why, where it goes and how to have it deleted. We wrote it in plain words on purpose.

The short version

Witness never sends a message for you. It counts, reads and suggests. You decide what gets sent.
We do not sell your data, show ads, or use your data for advertising.
The extension only runs on Instagram, TikTok, Facebook, Messenger and LinkedIn. It does not track the rest of your browsing.
Your data goes to your own Witness workspace and to the AI service your workspace picked. Nowhere else, except as listed below.
We never see or store your full card number. Stripe handles payments.
The safety page lists what the extension touches on each site and what it never does.

What the extension collects, and when

Your settings.Your Witness link, your extension key and your name. They stay in Chrome's storage on your computer and are used to connect to your Witness workspace.
Screenshots, only when you press a button. When you press a 📸 Screenshot button (for an opener or a reply idea) or file a bug report, the extension takes a screenshot of the page you are on and sends it to your Witness workspace. It is used to write that suggestion or to fix that bug. Chrome asks your OK before the extension can take screenshots at all.
Message counts. While you are on a shift, the extension counts the DMs you send so your numbers fill in by themselves. It notes that a message was sent and to which chat, not what it said. On Instagram it does this by noticing that the site sent a message; it does not read or change what was sent.
Chats with your leads.When you send a message to someone who is already a lead in your workspace, the extension saves the words in that open chat to that lead. Chats with anyone who is not a lead are never saved. You can turn this off in the extension's settings.
Your inbox list.The nightly inbox run is on for Instagram when you install the extension, and you can turn it off or pick other sites in the extension's settings. Late at night it opens your inbox in a background tab, reads your chat list (names, the last line and how long ago it was sent) to show who is waiting on a reply, and closes the tab. It never opens an unread chat, so nobody gets a "Seen" from Witness.
Public profile and post details you choose to save. When you add a lead, or ask the panel to list the people who liked or commented on a post, it saves their public handle, name, bio and link to your workspace.
Pages a lead links to.When you ask for an opener, the extension may read the public website or Instagram page in that lead's bio to make the opener fit. Your sign-in is only ever used on Instagram, never on someone else's website.
Bug reports. If you file one, we get what you wrote, the screenshot (after you cover anything private) and basic details like the extension version and browser.

What the website collects

Your account: name, email, phone number if you add one, and a hashed password.
Your work: leads, notes, numbers, scripts, shift reports, call notes and anything you upload.
AI keys you add. They are stored encrypted and only used to make the AI calls you ask for. Charges from your AI company are yours.
Your plan and whether it is paid. Stripe collects your card details on its own secure page. We never see or store your full card number.

Cookies

A sign-in cookie, so you stay signed in.
A short-lived safety cookie while you sign in with Google or connect a tool like Google Drive or Fathom. It is cleared when you finish.
If you own a workspace and switch into coach mode, a cookie that remembers that for a few hours.
The app also saves a few screen choices (like tips you closed and the view you last picked) in your own browser.

We do not use ad cookies, tracking cookies or outside analytics.

How we use it

Only to run Witness for you: to show your leads and numbers, to write suggestions you ask for, to coach your team, to keep your account safe and to fix bugs. We do not use it for anything else.

Who else sees it

Your team. Managers and owners in your workspace can see the team's leads and numbers. Saved chat words can only be read by the account owner.
The AI service your workspace uses. When you ask for a suggestion, the screenshot or text goes to the AI company picked in your workspace (for example Anthropic, OpenAI or Google) to write it.
The companies that host Witness. Vercel runs the website and Neon stores the database, both in the United States. They keep it for us and may not use it for anything else.
Stripe, for payments. When you pay for a plan, Stripe takes your card details and charges it. Stripe has its own privacy policy.
Resend, for email. We use Resend to send emails like sign-in links, password resets, invites and summaries. It gets the email address and the email itself. If your team or coaching program set up its own email, their emails go through that instead.
Your coach, only if you choose. If you share with a coaching program, its coaches see what you picked: your numbers, or your numbers plus your lead chats with names and handles hidden. They never see your scripts, settings or AI keys. Every time a coach looks, it is logged and you can see when. You can stop sharing any time, and access ends right away.
Tools you connect. If you connect Google Drive, a calendar or a CRM like HighLevel, the data you chose to sync goes there.
The shared coaching pool. When one of your conversations ends in a booked call, a copy with names, handles, phone numbers, emails and links removed helps the reply coach for others who sell the same kind of offer. Nobody can browse these conversations. You agree to this when you set up your account.
If the law requires it, we may have to share data with the authorities.

How long we keep it

We keep your workspace data while your account is open, paid or not. We never delete it just because a payment failed.
When someone leaves a team, their sign-in is turned off. Their work stays with the team.
After an account closes, we keep its data for 60 days so you can ask for a copy. After that, we may delete it.
Settings in the extension stay on your computer until you remove the extension. Removing it stops all collection right away.

Getting a copy, or closing your account

To get a copy of your data, close your account or have your data deleted, email us from the email on your account at the address below. We will do it within 30 days.

Keeping it safe

Everything travels over HTTPS. Saved chats and AI keys are stored encrypted. Passwords and extension keys are only stored in a scrambled (hashed) form, so we cannot read them. Each workspace is kept apart from every other one.

Kids

Witness is a business tool for adults. It is not meant for anyone under 18.

Chrome Web Store promise

The use of information received from Google APIs and the Chrome extension follows the Chrome Web Store User Data Policy, including the Limited Use rules. We only use data to give you the features you see, we never sell it, and we never use it for ads or credit decisions.

Changes

If we change this policy, we will update the date at the top and tell account owners about big changes.

Contact

LOL Media LLC
5549 Loyola St, Columbus, OH 43221
jakob@lolmediallc.com