Legal

Privacy Policy

Last updated: April 16, 2026

Our Commitment to Your Privacy

At IG Lead Extractor ("we", "us", or "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our browser extension and related services (collectively, the "Service"). By using the Service, you agree to the terms outlined in this policy.

1. Information We Collect

We collect the following categories of user data. We only collect data that is necessary to provide and improve the Service.

1.1 Account Information (Personal Data)

When you create an account or log in, we collect:

  • Email address — collected when you sign up via email OTP (one-time password) verification.
  • Google account profile information — if you choose to sign in with Google, we receive your name, email address, and profile picture from Google OAuth.

1.2 Authentication Data

  • Authentication tokens — stored locally in your browser's extension storage (browser.storage.local) to keep you signed in across sessions.

1.3 Subscription & Payment Information

  • Subscription status and plan details — we store your subscription tier, status, and billing cycle on our server to manage your access to Pro features.
  • Payment details (credit card, billing address, etc.) — are collected and processed entirely by our third-party payment processors (Paddle and PayPal). We do not store your credit card number or full payment details on our servers.

1.4 Instagram Data (Scraped Data)

  • Profile handles, bios, follower counts, and contact information — scraped from Instagram pages you actively visit. This data is processed locally on your device and is not transmitted to or stored on our servers.
  • Exported files (CSV, etc.) — saved directly to your local device via the browser's download API. We do not have access to these files.

1.5 Technical & Usage Data

  • Extension version and browser type — sent to our server during authentication requests for compatibility and debugging purposes.
  • Anonymous usage statistics — we may collect aggregated, non-personally-identifiable usage data (e.g., feature usage frequency) to understand how the Service is used and to improve it. This data cannot be used to identify you.

1.6 Data We Do NOT Collect

  • We do not collect your browsing history.
  • We do not read or access any Instagram account credentials or passwords.
  • We do not use cookies or tracking technologies to monitor your activity across websites.
  • We do not collect any data from web pages other than Instagram pages that you actively choose to scrape.

2. How We Use Your Information

We use the data we collect for the following purposes:

  • Account authentication & management: Your email and authentication tokens are used to create and manage your account, verify your identity, and keep you signed in.
  • Subscription management: Your subscription data is used to determine your access level (Free vs. Pro) and manage billing cycles.
  • Service improvement: Anonymous, aggregated usage data helps us understand how features are used so we can prioritize improvements.
  • Customer support: If you contact us, we may use your email address and account information to assist you.
  • Communication: We may send transactional emails related to your account (e.g., OTP verification codes, subscription confirmations). We do not send marketing emails unless you explicitly opt in.

3. How We Share Your Data

We do not sell, rent, or trade your personal data. We share data only with the following third parties, and only to the extent necessary to provide the Service:

  • Paddle (paddle.com) — our payment processor for credit/debit card transactions. Paddle's privacy policy: paddle.com/legal/privacy.
  • PayPal (paypal.com) — an alternative payment processor. PayPal's privacy policy: paypal.com/privacy.
  • Google OAuth — if you choose to sign in with Google, Google shares your basic profile information with us. Google's privacy policy: policies.google.com/privacy.

Apart from the parties listed above, we do not share your personal data with any other third parties, advertisers, or data brokers.

4. Data Storage and Security

4.1 Where Your Data Is Stored

  • Local device storage: Authentication tokens are stored in your browser's local extension storage (browser.storage.local). Scraped Instagram data and exported files are stored only on your device.
  • Our server (igleadextractor.com, igleadextractor.echobot.dev): Your email address, account record, and subscription details are stored on our server. The server is hosted on secure infrastructure with encrypted connections (HTTPS/TLS).

4.2 Security Measures

  • All communications between the extension and our server are encrypted via HTTPS/TLS.
  • Authentication tokens are encrypted before being stored.
  • We use industry-standard security practices to protect our server infrastructure.
  • Payment data is handled entirely by PCI-compliant third-party processors (Paddle and PayPal).

While we take reasonable measures to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

5. Data Retention

  • Account data: We retain your account information (email, subscription status) for as long as your account remains active. If you delete your account, we will delete your personal data from our servers within 30 days.
  • Local data: Authentication tokens stored in your browser are retained until you log out or uninstall the extension. Scraped data and exported files remain on your device under your control.
  • Anonymous usage data: Aggregated, non-identifiable usage statistics may be retained indefinitely for analytical purposes.

6. Your Rights and Choices

You have the following rights regarding your data:

  • Access: You may request a copy of the personal data we hold about you by contacting us at [email protected].
  • Correction: You may request that we correct any inaccurate personal data.
  • Deletion: You may request deletion of your account and all associated personal data by contacting us. We will process your request within 30 days.
  • Withdraw consent: You may stop using the Service at any time by uninstalling the extension. You may log out to clear locally stored authentication data.
  • Data portability: All scraped data is already stored on your device, so it is always under your full control.

7. Cookies and Tracking

IG Lead Extractor does not use cookies or tracking technologies to monitor your online activity. The extension does not track your behavior across websites. We do not use any third-party analytics SDKs within the extension.

8. Children's Privacy

Our Service is not directed at individuals under the age of 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected], and we will take steps to delete such information promptly.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, our practices, or the features of the Service. Any updates will be posted on this page, and the "Last Updated" date will be revised accordingly. If we make material changes, we will notify you via the extension or by email. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, your personal data, or our privacy practices, please contact us at: