Privacy Policy

1. Scope and who we are

This Privacy Policy applies to the Group Extractor for Facebook browser extension, the website at fbgroupextractor.echobot.dev, and related account and subscription services operated by echobot.dev (together, the “Service”).

Group Extractor is an independent product. It is not affiliated with, endorsed by, sponsored by, or operated by Meta Platforms, Inc. or Facebook.

2. Information handled by the extension

Facebook Group member data

When you start a collection task, the extension processes member information returned by Facebook's Group People interface. Depending on availability, that information may include:

• User or profile ID, display name, profile URL, profile picture, and biography;
• Join information returned by Facebook, such as “Joined 2 hours ago”;
• Readable member type, profile category, and verification status;
• The date and time at which the extension collected the record.

This member export data is processed in your browser and is not uploaded to our servers. Requests for Group data are sent directly from your browser to Facebook. Export files are generated by the extension and downloaded through your browser.

Extension settings and task state

The extension stores operational information in browser storage, including request delay preferences, batch-rest settings, selected export fields, authentication state, subscription plan cache, and—when available—temporary task state used for pause and resume. This information remains in your browser unless a feature specifically requires communication with our service.

3. Information sent to our service

Account information

You may use email one-time-password authentication or Google sign-in to access account and Pro features. Depending on the method you choose, we may process your email address, an authentication token, account identifier, and optional profile information such as your name or avatar. Authentication credentials and tokens are stored in extension browser storage so that you can remain signed in.

Anonymous installation information

After you first open the main extension drawer, the extension may register an installation record with our service. The record can contain a randomly generated installation ID, extension ID, extension version, browser locale, browser user-agent information, platform, first-open time, last-seen time, and an active status. The random installation ID is used to avoid counting the same installation repeatedly and is not intended to identify a natural person.

Subscription and billing information

If you purchase Pro, we process the information needed to connect your account with a subscription, such as account ID, plan, subscription status, billing period dates, price, and provider subscription ID. Checkout and payment processing are provided by Paddle. We do not directly receive or store your full payment card number. Paddle processes payment and billing information under its own privacy terms.

Configuration and support

The extension requests current product configuration from our service, such as usage limits and supported behavior. If you contact us, we process the information you provide in your email or feedback submission, including your contact details and message.

4. How we use information

We use service data only as reasonably necessary to:

• Authenticate accounts and keep users signed in;
• Provide Free and Pro feature entitlements;
• Process, manage, renew, cancel, and troubleshoot subscriptions;
• Maintain product configuration and compatibility;
• Count installations in aggregate and understand product operation;
• Prevent abuse, investigate errors, secure the Service, and provide support;
• Comply with legal, tax, accounting, and regulatory obligations.

5. Permissions used by the extension

• Facebook website access: required to detect Group pages, read the information Facebook returns to your account, and operate the collection drawer.
• Storage: used for settings, authentication state, plan information, and temporary task state.
• Downloads: used to save CSV, Excel (XLSX), and JSON files to your device.
• Web request observation: used to recognize relevant Facebook GraphQL request context needed for member collection. It is not used to capture unrelated browsing content.
• echobot.dev access: used for configuration, authentication, account, installation, and subscription services.

6. Sharing and service providers

We do not sell Facebook Group member export data or upload it to our service. We may share limited service data with providers that help operate the Service, including:

• Paddle, for checkout, payment processing, billing, and subscription management;
• Google, if you choose Google OAuth sign-in;
• Hosting, email delivery, security, and infrastructure providers acting on our behalf;
• Authorities or other parties when required by law, necessary to protect rights and safety, or involved in a legitimate business reorganization.

7. Website content and third parties

This website loads Tailwind CSS, Font Awesome, and Google Fonts from third-party content delivery networks. The home page also embeds a YouTube video. Those providers may receive technical request information such as your IP address, browser type, referring page, and cookie information under their own policies. YouTube content is loaded when the embedded player is requested.

The website does not currently use a first-party behavioral advertising tracker. Links to the Chrome Web Store, Facebook, Paddle, Google, YouTube, and other external services are governed by those services’ policies.

8. Legal bases

Where applicable law requires a legal basis, we process information to perform our agreement with you, based on our legitimate interests in operating and securing the Service, with your consent where requested, and to comply with legal obligations. You may withdraw consent where consent is the applicable basis, without affecting earlier processing.

9. Data retention

Browser-stored information remains until it expires, is replaced, you sign out, clear extension data, or uninstall the extension. We retain account and subscription information while your account is active and as needed for billing, support, fraud prevention, and legal compliance. Unverified accounts may be deleted automatically after a short period. Installation records may be retained to maintain accurate aggregate counts and operational history.

You may contact us to request deletion of eligible account information. Some billing or transaction records may need to be retained where required by law.

10. Security

We use reasonable administrative and technical safeguards designed to protect service data. No method of electronic transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for protecting access to your browser, Facebook account, exported files, and email account.

11. Your choices and rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, or objection concerning personal information we control. You may also:

• Sign out to remove the locally stored authentication session;
• Clear extension storage or uninstall the extension;
• Cancel or manage a Pro subscription through the billing controls provided in the extension;
• Choose not to use Google sign-in and use email OTP where available;
• Contact us to ask a privacy question or exercise an applicable right.

12. Children’s privacy

The Service is not directed to children under 13, or the higher minimum age required in a particular jurisdiction. We do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact us.

13. International transfers

Our service providers and infrastructure may process information in countries other than your own. Where required, we use appropriate safeguards for international transfers.

14. Changes to this policy

We may update this Privacy Policy to reflect product, legal, or operational changes. The “Last updated” date above identifies the latest revision. Material changes may also be communicated through the Service where appropriate.

15. Contact us

For privacy questions or requests, contact: