Privacy Policy

HuddleWatch (“HuddleWatch”, “we”, “us”) operates huddle.watch, a service that monitors Facebook groups you already belong to, scores posts for buyer intent, and surfaces the ones worth replying to. This policy explains what we collect, why, and what control you have over it.

It applies to huddle.watch and every subdomain we operate. If you disagree with it, please stop using the service.

We collect three kinds of data, and nothing else:

• Account data. Your email address, and — if you sign in with Google — the name, email address, and profile picture on your Google account. We never receive or store your password.
• Group content you point us at. The posts, comments, author display names, and timestamps from the Facebook groups you choose to monitor, plus the keywords and filters you configure.
• Usage and technical data. IP address, browser and device type, pages viewed, and error logs. This is how we keep the service up and catch abuse.

We do not collect payment card numbers. Checkout is handled by our payment processor, which sends us only a subscription status and the last four digits of the card.

• To authenticate you and keep you signed in.
• To fetch, score, and rank posts from the groups you monitor, and to notify you about matches.
• To bill you and manage your subscription.
• To debug failures, prevent abuse, and improve scoring quality.
• To send service email — receipts, security notices, and product updates you can opt out of.

We do not sell your data. We do not share it with advertisers or data brokers. We do not use the content of your monitored groups to train public machine learning models.

If you sign in with Google, we request only your basic profile and email address. We use them to create your account, identify you on return visits, and contact you about the service.

HuddleWatch’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer this data to third parties except as needed to provide the service, comply with the law, or in connection with a merger or acquisition. We do not use it for advertising, and no human reads it except with your explicit permission or where required for security or legal reasons.

You can revoke our access at any time from your Google account’s third-party access settings. Doing so does not delete your HuddleWatch account — email us if you want that too.

HuddleWatch only processes groups you are already a member of and have asked us to watch. You are responsible for making sure your monitoring complies with each group’s rules and with Meta’s terms.

Posts we ingest are stored so we can score them, deduplicate them, and show you a history. Remove a group from your watchlist and we stop ingesting it; its stored posts are deleted within 30 days.

We set a small number of first-party cookies that carry your session so you stay signed in, plus cookies that remember interface preferences. They are strictly necessary — turning them off breaks login. We do not run third-party advertising or cross-site tracking cookies.

We use a short list of processors, each bound by contract to handle your data only on our instructions:

• Supabase — database, authentication, and file storage.
• Cloudflare — hosting, CDN, and DDoS protection.
• Dodo Payments — subscription billing and invoicing.
• Google — sign-in, if you choose that option.

We may also disclose data when the law requires it, or to protect our rights, our users, or the public. If we are ever acquired, your data may transfer with the business — you will be told before it does.

Our infrastructure runs on servers in the United States and on Cloudflare’s global edge network. If you use HuddleWatch from outside those regions, your data is transferred and processed there under standard contractual clauses.

• Account data: until you delete your account, then up to 30 days in backups.
• Monitored group content: 12 months rolling, or 30 days after you remove the group.
• Billing records: as long as tax and accounting law requires, typically 7 years.
• Server logs: 90 days.

Data is encrypted in transit with TLS and at rest by our hosting providers. Access to production systems is limited to people who need it and is protected by multi-factor authentication. No system is perfect — if we ever suffer a breach affecting your data, we will notify you and the relevant regulator without undue delay.

Wherever you live, you can ask us to show you the data we hold, correct it, export it, or delete it. Depending on your jurisdiction, you may also have the right to object to processing, restrict it, or withdraw consent. Email support@huddle.watch and we will respond within 30 days. You will never be charged or given a worse service for exercising these rights.

HuddleWatch is for business use and is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, email us and we will delete it.

Group Scout is a Chrome extension that grades a Facebook group from what is already rendered on the page you have open. It reads that page in your own browser to count posts, questions and replies, and shows the result in a panel.

It collects nothing. There is no account, no sign-in and no server call: the extension has no network permission at all, so nothing it reads can leave your browser, and nothing is stored between page loads. It never reads, writes or connects to your Facebook account, and it cannot post, comment or message on your behalf. Uninstalling it leaves nothing behind.

The only data that reaches us from the extension is an ordinary web visit, with its campaign parameters, if you choose to click through to this site.

We will update this policy as the product changes. Material changes are announced by email or an in-app notice at least 14 days before they take effect, and the date at the top always reflects the current version.

Questions, requests, or complaints: support@huddle.watch.