# Privacy Policy — MultiGroupPoster
**Last updated: July 30, 2026**
MultiGroupPoster ("we," "us," "the extension") is a Chrome extension that lets you publish a post to multiple Facebook groups you belong to, with optional scheduling, Spintax content variation, and Lead Radar — a feature that monitors groups you select for posts matching your keywords. This policy explains what we collect, how we use it, and your rights.
**Independent tool:** MultiGroupPoster is operated by an independent company and is not affiliated with, endorsed by, or officially connected to Meta Platforms, Inc. or Facebook. "Facebook" is a trademark of Meta Platforms, Inc.
---
## 1. Information we collect
- **Account email** — to identify you, link your subscription and usage credits, and to identify your activity in our product analytics (see §5).
- **Account sign-in credentials** — you sign in with email + password, or with Google, via Google Firebase Authentication. Passwords are handled and stored by Firebase (Google); we never store your password in plain text and never see your Google password.
- **License & subscription status** — free, trial, active, or expired.
- **Product analytics** — which features you use and when: installed version, posting method, group counts, campaign outcomes, error types, and onboarding progress. These events carry **no post text, no group names, and no group URLs**. They are linked to your account by a one-way SHA-256 hash of your email; your email address is also attached as an account attribute (see §5, Amplitude).
- **Crash and error reports** — when the extension fails, we collect the error message, a stack trace, the extension version, and a short trail of recent internal log lines. These are automatically scrubbed of email addresses, authentication tokens, cookies, and Facebook session data before they leave your device, and IP addresses are discarded on receipt (see §5, Sentry).
- **Campaign counts for trial enforcement** — the number of groups a run requested and completed, so free-tier limits can be enforced server-side.
- **Lead Radar AI drafting (only when you use it)** — if you ask the extension to draft a reply to a lead, the text of **that Facebook post**, the keywords it matched, and your locale are sent to our server to generate the draft. This happens only for the specific lead you act on, and only when you request a draft.
- **Support communications** — anything you send to support@multiplegroupposter.com or our chat.
## 2. Information we do NOT collect
- **Your Facebook password** — the extension uses your existing logged-in Facebook session in Chrome; your Facebook password is never requested, seen, or sent to us.
- **The posts you publish** — your post text, media, and group selections are processed locally and sent only to Facebook when you choose to post. We do not store or transmit them to our servers. (The one exception is Lead Radar AI drafting, described in §1 — that concerns a post you received, not one you wrote.)
- **Your group lists** — stored on your device only.
- **Your Facebook friends, messages, photos, or other Facebook data** beyond identifying your groups and publishing your post within your own session.
- **Browsing activity outside facebook.com** — the extension runs only on Facebook and our own domains.
- **Your leads' inbox** — matched posts collected by Lead Radar are stored on your device and are not uploaded to us, except for the single post you choose to draft a reply to.
## 3. How we use data
Solely to: authenticate you, operate the extension's single purpose (posting to your Facebook groups), track and enforce credits and subscription, run posts you schedule, surface matching posts you asked Lead Radar to watch for, provide support, and diagnose and improve the product. **We do not use data for advertising and we do not sell it.**
## 4. Where data is stored
- **Locally in your browser** — group lists, templates, Spintax variations, schedules, campaign state, and your Lead Radar inbox. This never leaves your device.
- **On our servers (United States, reputable cloud host, over HTTPS)** — account email, license status, campaign counts, and analytics and crash data as described in §5.
- **Optional encrypted backup** — if you enable backup, your settings are encrypted **on your device** with AES-256-GCM before upload. We store only the encrypted blob and cannot read its contents.
Because our servers and the providers in §5 are located in the United States, using MultiGroupPoster involves a transfer of your data outside the EEA/UK. We rely on the European Commission's Standard Contractual Clauses, or an equivalent safeguard, for these transfers.
## 5. Sub-processors
| Provider | Purpose | What it receives |
|---|---|---|
| **Google Firebase** | Authentication and app configuration | Sign-in credentials, account identifiers |
| **Freemius** | Subscription payments and licensing | Billing details. Card data goes to Freemius and its payment processors, not to us; we never see your full card number. |
| **Amplitude** (US) | Product analytics | A SHA-256 hash of your email, your email address as an account attribute, extension version, and feature-usage events. No post content, group names, or group URLs. |
| **Sentry** (US) | Crash and error reporting | Error messages, stack traces, extension version, and recent internal log lines — scrubbed of emails, tokens, cookies, and Facebook session data. IP addresses are discarded. |
| **Crisp** | Support chat | When you open chat or click "Visit Help Center" in the extension, your account email and extension version may be shared with Crisp to identify you. Facebook credentials, post content, and group lists are never shared. To avoid sharing your email, visit https://multiplegroupposter.com/help directly. |
We share only the minimum needed, never sell your data, and disclose it otherwise only as required by law.
## 6. Chrome Web Store Limited Use
Our collection, use, and transfer of information received from the extension and from Google APIs comply with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use the data only to provide and improve MultiGroupPoster's single purpose; we do not transfer it except to operate the service, comply with law, or prevent fraud and abuse; we do not use it for advertising; and we do not allow humans to read it except with your consent (e.g. support), where required for security or law, or when aggregated and anonymized.
## 7. Cookies & tracking
Our marketing site uses minimal cookies for session persistence and privacy-respecting analytics (no IP-based identification). No Facebook Pixel and no ad remarketing. The extension reads only the authentication cookie set by our own sign-in domain, to keep you logged in, and your existing Facebook session cookies — which are read on your device to publish on your behalf and are never transmitted to us.
## 8. Your rights
- **Access / Deletion / Correction** — email support@multiplegroupposter.com. Deletion is completed within 7 business days and includes your records held by the analytics and crash-reporting providers listed in §5.
- **Analytics and crash reporting** — to stop collection, email support@multiplegroupposter.com and we will exclude your account. Uninstalling the extension also ends all collection.
- **Marketing email** — unsubscribe at any time from any message.
- **GDPR (EU/EEA and UK)** — you have the right to access, rectify, erase, restrict, and port your data, to object to processing, and to lodge a complaint with your supervisory authority. Our legal basis is performance of our contract with you for account and posting data, and legitimate interest for analytics and crash reporting used to keep the product working.
## 9. Data retention
We retain account data while your account is active and delete personal data within 7 business days of a deletion request, except records that law requires us or our payment provider to keep. Analytics and crash records are retained according to the standard retention periods of the providers in §5 and are deleted on request.
## 10. Children
Intended for adults (18+); not directed to children. We do not knowingly collect data from anyone under 18.
## 11. Changes
Material changes update the "Last updated" date, with email and site-banner notice.
## 12. Contact
support@multiplegroupposter.com