Privacy Policy

• Account information. Name, email address, and authentication credentials (managed by our auth provider, Clerk).
• Client business information. Company names, addresses, phone numbers, websites, industries, contacts, and notes you enter into your workspace.
• Stored credentials. Usernames and passwords you choose to store for third-party services on behalf of your clients. Passwords are encrypted at rest using AES-256-GCM and decrypted only on authorized admin requests.
• Tracked keywords and locations. SEO keywords, target geographies, and store-location data you add for each client.

• Google Business Profile performance data — insights such as calls, views, direction requests, website clicks, search queries, and discovery counts — retrieved from Google APIs that your agency Google account is authorized to access.
• Google Business Profile metadata — location name, address, place ID, and category — used to match Google locations to your in-app client records.
• Google account identifiers sufficient to maintain the authorization (refresh tokens, account email) — stored encrypted in our database.

• Usage data. Pages viewed, features used, and timestamps, used to operate and improve the service.
• Device and log data. IP address, browser type, operating system, and request timestamps.
• Cookies. Required only for authentication and session management. We do not use third-party advertising cookies.

• It reads only the posts already visible to you, in groups you have joined and explicitly added, using your own logged-in Facebook session in your own browser.
• It is read-only: it does not scroll, click, like, comment, post, send messages, or take any action on your behalf. It does not access your friends list, profile, private messages, or any content outside the groups you configure.
• We never receive or store your Facebook username or password, and we never log in as you.

• Matched posts.For posts that match one of your keyword rules, we store the post text, a short snippet, the post URL, the author's public display name, and the group name.
• Configuration. The group URLs and keyword rules you set up, plus your notification preferences.
• A short-lived processing log. Recently-seen posts (matched or not) are briefly recorded for troubleshooting and then automatically pruned; we retain only a small, capped number of recent entries per account.

• Email notifications are sent via Resend and SMS notifications via Twilio, only for posts that match your rules.
• SMS is sent only after you enter your own phone number and tick an explicit consent checkbox. Message frequency varies with your rules (typically 5–20 messages per week); message and data rates may apply. Reply STOP to opt out or HELP for help.
• We use phone numbers solely to notify the account holder. We never sell, rent, or share phone numbers with third parties for marketing.

• We do not store Facebook credentials or act as you on Facebook.
• We do not use content read by the extension for advertising, and we do not use it to train generalized or non-personalized AI or machine-learning models.
• We do not sell your information.

If you reside in California, you have the right to:

• Know the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which we use it, and the third parties with whom we share it.
• Delete personal information we have collected from you, subject to limited exceptions (e.g., information needed to complete a transaction, detect fraud, or comply with law).
• Correct inaccurate personal information we maintain about you.
• Opt out of sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.
• Limit use of sensitive personal information. We only use sensitive information for the purposes permitted under the CCPA and as needed to provide the Service.
• Non-discrimination. We will not deny service, charge a different price, or provide a different quality of service because you exercised any of these rights.

To exercise these rights, email support@3rdpipe.io. We may need to verify your identity before fulfilling the request.

If you are in the EU, UK, or Switzerland, you have additional rights including access, rectification, erasure, restriction, portability, and objection. You also have the right to lodge a complaint with your local supervisory authority.

Our lawful bases for processing your personal information are:

• Performance of a contract — to provide the Service you signed up for and process payments.
• Legitimate interests — to operate, secure, and improve the Service, prevent fraud, and communicate with you about your account.
• Consent — for any data processing where required by law (e.g., certain cookies, marketing emails). You may withdraw consent at any time.
• Legal obligation — where we are required to retain or disclose data to comply with law.