Privacy Policy
Effective date: [TBD — set at launch] · GroupScout is a product of NextForge LLC.
This policy explains what GroupScout collects, where it lives, and what we deliberately never touch. GroupScout is a Chrome extension plus a hosted service that helps you find and draft replies to posts in groups you've joined. You review and post every reply.
What GroupScout stores
On your computer (in the extension)
Most of your data never leaves your browser. Stored locally in Chrome's extension storage:
- the groups you've added,
- your business profile(s) — the name, persona, product details and rules you set,
- your queue of candidate posts and drafted replies, and
- your activity log.
This stays on your device. If you uninstall the extension, it's removed with it.
On our servers
To run your subscription and draft replies, our hosted service stores:
- your account email (from checkout),
- your plan and subscription status,
- usage counts (how many posts were screened and drafted, to enforce plan limits),
- a hashed license key — we store only a one-way hash, not the key itself, and
- an anonymous browser "install ID" so one key can't be shared across unlimited browsers.
Post text
When you scan, the text of a candidate post is sent to our API only so it can be scored and a reply drafted. It isn't kept after the response is returned. We don't build a database of Facebook posts.
What GroupScout never does
- It never asks for, stores, or uses your Facebook password or cookies.
- Our servers never connect to or read Facebook. Facebook is only ever read inside your own browser, while you're using it.
- It never posts, comments, likes, joins, or messages on its own. You press Enter on every reply.
Who processes your data
We use a small number of service providers to run GroupScout:
- Anthropic — generates the screening and draft text from the post content you send.
- Stripe — processes payments and manages your subscription. Card details go to Stripe, not to us.
- Supabase — our database for the account data listed above.
- Vercel — hosts the website and the API.
Cancellation & deletion
You can cancel anytime through the Stripe billing portal (see Manage billing). Your subscription stays active until the end of the period you've paid for, after which the extension stops drafting. Data stored locally on your computer stays there until you remove the extension. To have your server-side account data deleted, email us at our support address.
Account risk with Facebook
Automated tools can put a Facebook account at risk. GroupScout is designed to minimize that — it runs only in your browser, at a human pace, and you make every post — but the risk is real and it's yours. The full explanation is in our Terms.
Changes & contact
If this policy changes, we'll update this page and the effective date above. Questions about your data: email support.
[Legal review to confirm: governing law, data-subject rights (GDPR/CCPA) language, retention periods, and business contact address.]