Privacy policy

Information we handle

Information you provide

If you contact us or request early access, we receive the information in your message, such as your name, email address, company, and questions.

Information from Meta

When you connect an eligible Facebook Page or Instagram professional account, Meta may provide:

• Your app-scoped Facebook user ID, name, and email address when Meta makes it available. If no email is supplied, we ask you to provide one to finish registration.
• IDs and names of the Facebook Pages you authorize, and IDs and usernames of linked Instagram professional accounts.
• Post and media IDs, text or captions, timestamps, comment counts, source links, and image or thumbnail URLs. Your browser may load images directly from Meta’s content delivery services.
• Comment and reply IDs, text, timestamps, parent relationships, visibility, like and reply counts, comment links, attachment links, and author IDs, names or usernames when Meta makes them available. Some fields may be unavailable depending on the platform and your authorized access.
• Access tokens, granted permissions, connection status, and token-expiry information needed to make authorized requests to Meta.

We only request permissions needed to operate Comment Export Tool. We do not receive or store your Facebook or Instagram password.

Facebook sign-in identifies you and creates your Comment Export Tool account; it does not import Page or Instagram content. Choosing Connect pages in the dashboard starts a separate Facebook authorization for the Pages and linked Instagram professional accounts you select. This connection uses user authorization and Page access tokens, not a system-user connection.

The connection requests pages_show_list to list eligible Pages, pages_read_engagement to read Page content and related engagement, pages_read_user_content to read user-generated Page content such as comments and replies, instagram_basic to identify linked professional accounts and read their media, and instagram_manage_comments to retrieve comments and replies on their media. Although a permission may support additional actions, this tool uses that access to read and export authorized content; it does not publish, edit, or delete comments on Meta.

Technical information

Our hosting and security providers may process standard technical information such as IP address, browser type, requested pages, timestamps, and security events. We use this information to deliver the service, prevent abuse, and diagnose problems.

We use authentication and security cookies to maintain sessions and protect sign-in. Our contact menu links to WhatsApp, Messenger, and email. Opening the menu does not load third-party chat software. If you choose WhatsApp or Messenger, you leave our website to use that service, which processes information under its own terms and privacy policy. We receive the messages and account or contact details you share with us so we can respond. Do not send access tokens, passwords, or unnecessary personal information in a support message.

How we use information

We use information only for practical purposes connected to Comment Export Tool:

• Connect the accounts you authorize and retrieve the content you request.
• Create and deliver comment exports.
• Operate, troubleshoot, and improve the product.
• Protect accounts, investigate abuse, and maintain service reliability.
• Respond to support requests and send product updates you requested.
• Meet legal obligations and enforce our agreements.

We do not sell personal information. We do not use exported comment content to target advertisements or train general-purpose artificial intelligence models.

When we share information

We share information only when necessary:

• Service providers. Providers help us host the product, store data, deliver email, monitor reliability, and secure the service. Providers’ access must be limited to the services they provide for us; we do not authorize them to sell Meta Platform Data or use it for their own advertising.
• At your direction. For example, when you connect Comment Export Tool to Meta or download and share an export.
• Legal and safety reasons. We may disclose information when required by law or when reasonably necessary to protect people, rights, and the integrity of the service.
• Business changes. Information may transfer as part of a merger, financing, acquisition, or sale of assets, subject to appropriate confidentiality protections.

Meta processes information under its own terms and privacy policy. Facebook, Instagram, WhatsApp, and Messenger are not operated by 40bytes.

Retention and deletion

We keep information only as long as it is needed for the purpose described in this policy:

Your Comment Export Tool account profile and app-scoped Facebook identity are retained while your account exists. If Facebook notifies us that you removed the app, or sends a valid data-deletion request, we delete the associated account, sessions, authorization states, and Facebook and Instagram grants. You can sign in again to create a new account. Other users’ independently authorized connections are separate.

• CSV exports, including comment and reply content, are stored privately on our server so you can preview and download them. Export files and their job records are scheduled for cleanup once they are seven days old. Cleanup runs in the background, so this is not a guarantee of deletion at an exact time; active jobs and files in use may delay removal.
• We retain encrypted access tokens and authorized Page and Instagram connection details while the grant exists. Cached Facebook posts include IDs, messages, timestamps, comment counts, and approved Meta image URLs; we store the URLs, not copies of the image files. This cache is retained while it is needed for connected Pages, refreshed as you use the product, and removed when no authorized connections remain or a deletion request requires its removal.
• Using Disconnect accounts removes your Facebook and Instagram grants, related sync jobs, and your stored exports. Your Comment Export Tool sign-in profile remains until you request account deletion or remove the app through Facebook. Shared Page records may remain for other users who separately authorized access.
• Before acknowledging a Meta deletion request, we remove the requesting user’s account and grants and clear cached posts and stored exports that may contain their data. This can also clear cached content for other users, who can request it again through their own valid connections.
• Security and operational logs are kept only as needed to operate the service, diagnose failures, and investigate abuse. Optional Meta API diagnostics record request timing, status, and redacted response structure, rather than access tokens or raw comment content; these diagnostic records are scheduled for cleanup after seven days. Records required by law may be retained only for that obligation.
• Support messages are kept as long as reasonably needed to resolve the request and maintain appropriate business records.

Your choices

You can choose which eligible accounts and posts to connect, disconnect Meta access, stop product-update emails, and request access to, correction of, or deletion of your personal information.

Depending on where you live, privacy law may provide additional rights, including the right to receive a portable copy or object to certain processing. Contact us to make a request. We may need to verify your identity before completing it.

Comment Export Tool does not use third-party advertising cookies. Your browser and our infrastructure providers may use essential storage required for security, authentication, and core functionality.

Security

We use administrative, technical, and organizational safeguards designed to protect information, including encrypted network connections, restricted access, and credentials scoped to their intended purpose. No online service can promise absolute security, but we work to reduce risk and respond appropriately when issues arise.

Comment Export Tool is intended for adults and business users. Use of the service is limited to people aged 18 or older under our Terms. It is not directed to children, and we do not knowingly collect personal information directly from children.

Changes to this policy

We may update this policy as Comment Export Tool develops or legal requirements change. We will publish the revised version here and update the effective date. If a change materially affects how we use information, we will provide additional notice when appropriate.

Contact us

Questions, privacy requests, and deletion requests are welcome. Contact: