GroupScoop – Privacy Policy

Last updated: 2025-09-09

Summary: GroupScoop is a Chrome extension that helps you monitor Facebook groups you belong to for keywords you choose and alerts you when a matching post appears. By default, all processing happens locally in your browser. If you sign in and enable cloud sync, the extension may send a minimal record of matches to your GroupScoop account so you can review them later.

Affiliation & Trademark Disclaimer. GroupScoop is an independent product and is not affiliated with, endorsed by, sponsored by, or in any way officially connected with Facebook, Instagram, Meta Platforms, Inc., or any of their subsidiaries or affiliates. “Facebook”, “Instagram”, “Meta”, and all related names, marks, emblems, and images are registered trademarks of Meta Platforms, Inc. or its affiliates. Any use of third‑party names or trademarks is for identification purposes only and does not imply endorsement.

1. What the extension does

Reads content on facebook.com pages you open to locate posts that match your configured keywords.
Shows local notifications for matches.
Optionally, if you sign in and enable sync, sends a minimal match record to your account (see Data we collect).

2. Data we collect and why

2.1 Necessary to provide the service

Extension settings you provide (keywords, selected groups, feature toggles). Stored locally using Chrome storage APIs.
Authentication token (only if you sign in) to link the extension with your GroupScoop account. The token may be stored locally and sent to our API solely to authenticate requests.

2.2 Optional cloud sync (off by default)

If you enable cloud sync, the extension may send a minimal match record to your account consisting of:

Post URL, group name, and timestamp;
A short text excerpt required to identify the match;
The matched keyword(s);
Technical metadata needed for reliability (e.g., extension version).

We do not collect your browsing history, keystrokes, messages/DMs, or content from sites other than facebook.com. We do not sell or share your data for advertising.

3. Chrome permissions & how we use them

activeTab, scripting, host_permissions (https://*.facebook.com/*): inject code on Facebook pages you open to locate matching posts.
storage: save settings and state locally (sync/local).
alarms, offscreen: run scheduled scans reliably while the popup is closed; the offscreen document is temporary and does not capture audio/video.
notifications: show a local alert when we find a match.
tabs, webNavigation: open/track the Facebook tab used for scanning and inject after navigation completes.
debugger (optional, user‑toggled): used only on facebook.com to emulate focus for longer scans via DevTools Protocol; we do not inspect network credentials or cookies.

4. Platform terms & responsible use

Your use of GroupScoop must comply with the terms and policies of any site you access (including Facebook’s Terms). The extension operates within your browser session and only with pages you can access while logged in. If a platform changes its website or policies, some features may stop working or may need to be adjusted.

5. Data storage & retention

Local data (settings, tokens) resides on your device and can be cleared at any time from the extension settings or by removing the extension.
Cloud match records (if enabled) are stored in your GroupScoop account until you delete them or your account is closed.

We do not sell personal data. We do not share personal data with third parties except service providers that operate our infrastructure (e.g., cloud hosting) under data‑processing agreements and only to the extent necessary to provide the service.

7. Security

All communications with our API use HTTPS.
Access to production systems is restricted to authorized personnel.

8. Your rights & controls

Access, correction, or deletion requests: contact us (see below).
Opt out: you can use the extension entirely offline by not signing in; you can also disable cloud sync at any time.

9. Legal bases (EEA/UK)

Where applicable, we process data under the following bases: performance of a contract (to provide the service), and legitimate interests (to maintain and improve reliability). Where consent is required (e.g., optional sync), we rely on your explicit action to enable it.

10. Children

The service is not directed to children under 13 and we do not knowingly collect data from them.

11. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a new “Last updated” date.

12. Contact

Questions or requests? Email support@groupscoop.ai.
Legal entity (publisher): Inst8 Ltd