Source: https://40bytes.com/privacy/ Privacy, without the mystery # Privacy policy We built Comment Export Tool to move the comments you choose into a useful file—not to build an advertising profile about you. Effective October 31, 2026 Applies to Comment Export Tool by 40bytes **The short version** We use your information to provide Comment Export Tool, keep it secure, and help when you contact us. We do not sell personal information or use exported comments for advertising. Comment Export Tool by 40bytes is operated by 40bytes (“40bytes,” “we,” “us,” or “our”). This policy covers the website at [40bytes.com](https://40bytes.com/), the app at [export.40bytes.com](https://export.40bytes.com/), and related support and early-access communications. 01 ## Information we handle ### Information you provide If you contact us or request early access, we receive the information in your message, such as your name, email address, company, and questions. ### Information from Meta When you connect an eligible Facebook Page or Instagram professional account, Meta may provide: - Your app-scoped Facebook user ID, name, and email address when Meta makes it available. If no email is supplied, we ask you to provide one to finish registration. - IDs and names of the Facebook Pages you authorize, and IDs and usernames of linked Instagram professional accounts. - Post and media IDs, text or captions, timestamps, comment counts, source links, and image or thumbnail URLs. Your browser may load images directly from Meta’s content delivery services. - Comment and reply IDs, text, timestamps, parent relationships, visibility, like and reply counts, comment links, attachment links, and author IDs, names or usernames when Meta makes them available. Some fields may be unavailable depending on the platform and your authorized access. - Access tokens, granted permissions, connection status, and token-expiry information needed to make authorized requests to Meta. We only request permissions needed to operate Comment Export Tool. We do not receive or store your Facebook or Instagram password. Facebook sign-in identifies you and creates your Comment Export Tool account; it does not import Page or Instagram content. Choosing **Connect pages** in the dashboard starts a separate Facebook authorization for the Pages and linked Instagram professional accounts you select. This connection uses user authorization and Page access tokens, not a system-user connection. The connection requests `pages_show_list` to list eligible Pages, `pages_read_engagement` to read Page content and related engagement, `pages_read_user_content` to read user-generated Page content such as comments and replies, `instagram_basic` to identify linked professional accounts and read their media, and `instagram_manage_comments` to retrieve comments and replies on their media. Although a permission may support additional actions, this tool uses that access to read and export authorized content; it does not publish, edit, or delete comments on Meta. ### Technical information Our hosting and security providers may process standard technical information such as IP address, browser type, requested pages, timestamps, and security events. We use this information to deliver the service, prevent abuse, and diagnose problems. We use authentication and security cookies to maintain sessions and protect sign-in. Our contact menu links to WhatsApp, Messenger, and email. Opening the menu does not load third-party chat software. If you choose WhatsApp or Messenger, you leave our website to use that service, which processes information under its own terms and privacy policy. We receive the messages and account or contact details you share with us so we can respond. Do not send access tokens, passwords, or unnecessary personal information in a support message. 02 ## How we use information We use information only for practical purposes connected to Comment Export Tool: - Connect the accounts you authorize and retrieve the content you request. - Create and deliver comment exports. - Operate, troubleshoot, and improve the product. - Protect accounts, investigate abuse, and maintain service reliability. - Respond to support requests and send product updates you requested. - Meet legal obligations and enforce our agreements. **We do not sell personal information.** We do not use exported comment content to target advertisements or train general-purpose artificial intelligence models. 03 ## When we share information We share information only when necessary: - **Service providers.** Providers help us host the product, store data, deliver email, monitor reliability, and secure the service. Providers’ access must be limited to the services they provide for us; we do not authorize them to sell Meta Platform Data or use it for their own advertising. - **At your direction.** For example, when you connect Comment Export Tool to Meta or download and share an export. - **Legal and safety reasons.** We may disclose information when required by law or when reasonably necessary to protect people, rights, and the integrity of the service. - **Business changes.** Information may transfer as part of a merger, financing, acquisition, or sale of assets, subject to appropriate confidentiality protections. Meta processes information under its own terms and privacy policy. Facebook, Instagram, WhatsApp, and Messenger are not operated by 40bytes. 04 ## Retention and deletion We keep information only as long as it is needed for the purpose described in this policy: Your Comment Export Tool account profile and app-scoped Facebook identity are retained while your account exists. If Facebook notifies us that you removed the app, or sends a valid data-deletion request, we delete the associated account, sessions, authorization states, and Facebook and Instagram grants. You can sign in again to create a new account. Other users’ independently authorized connections are separate. - CSV exports, including comment and reply content, are stored privately on our server so you can preview and download them. Export files and their job records are scheduled for cleanup once they are seven days old. Cleanup runs in the background, so this is not a guarantee of deletion at an exact time; active jobs and files in use may delay removal. - We retain encrypted access tokens and authorized Page and Instagram connection details while the grant exists. Cached Facebook posts include IDs, messages, timestamps, comment counts, and approved Meta image URLs; we store the URLs, not copies of the image files. This cache is retained while it is needed for connected Pages, refreshed as you use the product, and removed when no authorized connections remain or a deletion request requires its removal. - Using **Disconnect accounts** removes your Facebook and Instagram grants, related sync jobs, and your stored exports. Your Comment Export Tool sign-in profile remains until you request account deletion or remove the app through Facebook. Shared Page records may remain for other users who separately authorized access. - Before acknowledging a Meta deletion request, we remove the requesting user’s account and grants and clear cached posts and stored exports that may contain their data. This can also clear cached content for other users, who can request it again through their own valid connections. - Security and operational logs are kept only as needed to operate the service, diagnose failures, and investigate abuse. Optional Meta API diagnostics record request timing, status, and redacted response structure, rather than access tokens or raw comment content; these diagnostic records are scheduled for cleanup after seven days. Records required by law may be retained only for that obligation. - Support messages are kept as long as reasonably needed to resolve the request and maintain appropriate business records. Facebook and Instagram data deletion ### Want your connected data removed? 1. To remove connected Page and Instagram access and stored exports, use **Disconnect accounts** in the dashboard. 2. To remove the app and request deletion through Facebook, open **Settings & privacy → Settings → Apps and websites** (or **Business integrations**, depending on the connection), remove the 40bytes integration you authorized, and use Facebook’s data-deletion request option where available. When we receive Facebook’s valid automated removal or data-deletion request, we immediately delete your Comment Export Tool account and its associated Facebook and Instagram data stored by us. No separate email request is needed. 3. **Optional:** If you prefer to request deletion by email, need help, or want to request removal of data about you contained in an export, email [support@40bytes.com](mailto:support@40bytes.com?subject=Export%20data%20deletion%20request) with the subject “Export data deletion request.” Include your account email or enough information to identify the relevant account or content. You do not need to have a Comment Export Tool account to make a request. Do not include passwords or access tokens. For email requests, we verify the request and delete covered information as soon as reasonably possible, responding within 30 days or sooner where required by applicable law or Meta’s terms. If specific information must be retained by law, we explain the reason and limit its use to that obligation. A valid automated Meta request receives a confirmation code and a link to the [deletion status page](https://40bytes.com/data-deletion/) after server-side deletion succeeds. For requests sent by email, we reply through support. Files already downloaded to your own device are under your control and cannot be deleted by us. 05 ## Your choices You can choose which eligible accounts and posts to connect, disconnect Meta access, stop product-update emails, and request access to, correction of, or deletion of your personal information. Depending on where you live, privacy law may provide additional rights, including the right to receive a portable copy or object to certain processing. Contact us to make a request. We may need to verify your identity before completing it. Comment Export Tool does not use third-party advertising cookies. Your browser and our infrastructure providers may use essential storage required for security, authentication, and core functionality. 06 ## Security We use administrative, technical, and organizational safeguards designed to protect information, including encrypted network connections, restricted access, and credentials scoped to their intended purpose. No online service can promise absolute security, but we work to reduce risk and respond appropriately when issues arise. Comment Export Tool is intended for adults and business users. Use of the service is limited to people aged 18 or older under our Terms. It is not directed to children, and we do not knowingly collect personal information directly from children. 07 ## Changes to this policy We may update this policy as Comment Export Tool develops or legal requirements change. We will publish the revised version here and update the effective date. If a change materially affects how we use information, we will provide additional notice when appropriate. 08 ## Contact us Questions, privacy requests, and deletion requests are welcome. Contact: **40bytes** [support@40bytes.com](mailto:support@40bytes.com) 522 W Riverside Ave Ste N Spokane, WA 99201 United States