Overview
mnmLeads ("we", "this extension") is a browser extension designed to help users collect contact email addresses from publicly available web pages. We take your privacy seriously, and this privacy policy explains how we handle your data.
Data Collection and Storage
Data We Collect
mnmLeads collects minimal data only when necessary and strictly adheres to data minimization principles.
Current Version (Basic Features)
- Email extraction feature: All data is stored entirely in your local browser with no network transmission
- We do not collect, transmit, or upload any user data to external servers
Advanced Features (Require Network Services)
When you choose to use features that require network services, we may collect the following data:
1. Google Login Feature
- Google account basic information (name, email address, avatar)
- Used for authentication and account management
- Obtained through Google OAuth 2.0 secure protocol
2. Subscription Services
- Account information (email address, subscription status, subscription type)
- Payment information (processed through third-party payment processors, we do not store payment card information)
- Usage statistics (feature usage frequency, task count, etc., for service optimization)
Important Commitments
- We will clearly inform you in advance which features require data collection
- We only collect the minimum data necessary for that feature
- Features will only be enabled after obtaining your explicit consent
- You can choose to use only local features without providing any personal information
Locally Stored Data
This extension stores the following data in your local browser:
- Task Configuration: Search keywords you enter, extraction parameters (such as page count, delay time, etc.), stored in Chrome browser's local storage
- Collected Email Data: Email addresses extracted from web pages and associated information, stored in your local browser
- Operation Logs: Detailed logs of task execution processes, stored locally
- User Preference Settings: Language settings, interface configuration, login status, etc.
Cloud-Stored Data (Advanced Features Only)
When you use features that require cloud services, the following data may be stored on our secure servers:
- Account Data: Google account basic information, subscription status and preferences, account creation and last login time
- Sync Data (only when you enable cloud sync): Encrypted task configuration, encrypted email data (if you choose to sync), device sync status
- Usage Analytics Data (anonymized): Feature usage statistics, performance metrics, error reports (does not contain personal information)
Data Access and Control
- Local Data: Completely controlled by you, stored only in your browser
- Cloud Data: You can view, export, or delete at any time
- Data Portability: You can export all data
- Account Deletion: You can delete your account and all associated data at any time
Permission Usage
mnmLeads requests the following browser permissions for the following purposes:
Basic Permissions
- tabs (Tab Permission): Create and manage browser tabs for accessing Google search results and pages for email extraction. Only used when you actively start tasks, does not collect or record your browsing history.
- scripting (Script Execution Permission): Execute scripts in web pages to extract email addresses. Only used to extract email information from search result pages, does not execute any malicious code.
- storage (Storage Permission): Store task data, configuration, and collected emails in your browser locally. All data is stored locally only, only this extension can access it.
- activeTab (Active Tab Permission): Access the current active tab (for testing features). Only used when you actively operate.
- downloads (Download Permission): Download CSV files you export. Only used for export functionality.
- host_permissions (Website Access Permission): Access web pages in search results to extract email addresses. Only accesses pages you found through Google search, does not access other websites or perform other operations.
Advanced Feature Permissions
- identity (Authentication Permission): Google login feature. Only used for OAuth authentication, obtaining Google account basic information (requires your explicit authorization).
Data Security
Local Storage Security
- All local data is stored in your browser
- Data uses browser's native secure storage mechanisms
- Sensitive data is encrypted and stored locally
Cloud Data Security
- All transmitted data uses HTTPS encryption
- Cloud data is encrypted using AES-256 encryption
- Regular security audits and vulnerability scanning
- Compliant with SOC 2 Type II security standards
Data Deletion
- Local Data: You can delete at any time through the extension's "Clear Data" feature
- Cloud Data: You can delete all cloud data through account settings
- Account Deletion: Deleting your account will permanently delete all associated data
- Uninstalling Extension: Local data will be deleted (depending on browser settings)
Third-Party Services
Currently Used Services
Services used by all features:
- Google Services: Google Analytics (for anonymous usage statistics and product improvement), Google OAuth 2.0 (for login features), Google APIs (for account information retrieval)
- Analytics Services: Google Analytics (anonymized usage statistics), used to improve products and services, does not collect personally identifiable information, you can opt out
- Payment Processors: Third-party PCI DSS compliant payment processors, used to process subscription payments and refunds. We do not store payment card information.
- Cloud Service Providers: AWS, Google Cloud or similar cloud services, used for data storage and synchronization, compliant with SOC 2 and ISO 27001 standards
- Other Services: Email service providers (for sending notification emails), CDN services (for improving access speed), monitoring services (for system stability), error tracking services (for issue diagnosis)
Data Sharing Policy
We do not sell, rent, or trade your personal data to third parties.
We may share data in the following circumstances:
- Legal requirements (such as court orders)
- To protect our legitimate interests
- With your explicit consent
- With service providers (limited to necessary technical support, subject to strict data processing agreements)
User Responsibilities and Compliance
User Responsibilities
When using this extension, you agree to:
- Lawful Use: Use this extension only for legitimate business research and lead generation purposes
- Comply with Laws and Regulations: Comply with applicable data protection regulations (such as GDPR, CCPA, etc.), anti-spam regulations (such as CAN-SPAM Act), and other applicable laws in your region
- Comply with Terms of Service: Comply with Google's Terms of Service, the terms of service of websites you access, and our Terms of Service
- Ethical Use: Do not use for harassment, spam, or illegal purposes; respect website robots.txt and terms of use; reasonably control access frequency to avoid burdening websites
- Account Security: Protect your login credentials, promptly report any security issues, and do not share accounts with others
We Are Not Responsible For
- The use or usage of email data collected by users
- User violations of any laws or regulations
- Any legal consequences resulting from use of this extension
- Availability or security of third-party services
Your Rights (GDPR and CCPA Compliance)
Under applicable data protection laws, you have the following rights:
- Right to Access: View personal data we collect about you, obtain information about data processing activities
- Right to Rectification: Correct inaccurate personal data, supplement incomplete personal data
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, we will process your request within a reasonable time
- Right to Restrict Processing: Restrict how we process your personal data
- Right to Data Portability: Obtain your data in a structured, commonly used, and machine-readable format, transfer data to other service providers
- Right to Object: Object to data processing based on legitimate interests, object to direct marketing
- Right to Withdraw Consent: Withdraw your previously given consent at any time, without affecting the legality of processing based on consent before withdrawal
Exercising Rights: Please contact us through the contact information at the end of this policy.
Children's Privacy
This extension is not intended for children under 13. We do not knowingly collect personal information from children. If you discover that we have inadvertently collected information from a child, please contact us immediately, and we will take measures to delete such information.
International Data Transfers
If you are located in the EU or other regions with data protection laws, your data may be transferred to other countries for processing. We ensure:
- Transfer only to countries that provide adequate levels of protection
- Or through appropriate safeguards (such as standard contractual clauses)
- Compliance with applicable data protection legal requirements
Data Retention
Local Data
Retained on your device until you delete or uninstall the extension.
Cloud Data
- Account Data: Retained during active account period, deleted within 30 days after account deletion
- Sync Data: Retained according to your settings, you can delete at any time
- Log Data: Retained for 12 months for technical support and service improvement
- Anonymous Analytics Data: Retained for 24 months for product improvement
Legal Requirements
In certain circumstances, we may need to retain data longer in accordance with legal requirements.
Privacy Policy Changes
We may update this privacy policy from time to time. Significant changes will be notified through:
- Displaying notifications in the extension
- Sending email notifications (if you have provided an email)
- Publishing update announcements on the project website (https://www.mnmleads.com)
Types of Changes:
- Significant Changes: Require your explicit consent to continue using the service
- General Changes: Continued use indicates acceptance
We recommend that you regularly review this privacy policy to stay informed.
Contact Us
If you have any questions about this privacy policy or need to exercise your rights, please contact us through:
- Website: https://www.mnmleads.com
- Email: hello@mnmleads.com
Response Time: We will respond to your privacy-related requests within 30 days.
Data Controller Information
- Company Name: mnmLeads Team
- Project: mnmLeads Browser Extension
Additional Information
About Google Search
This extension uses Google search service to find relevant web pages. We:
- Do not store or record your search queries (search keywords are stored locally only, unless you enable cloud sync)
- Do not modify Google search results
- Only access pages listed in search results to extract emails
About Email Extraction
Email addresses are extracted from publicly available web pages:
- Extracted emails are information already publicly displayed on web pages
- We do not attempt to crack or access protected content
- Extracted email formats are verified, but we do not guarantee email validity or activity
About Subscription Services
If you choose to subscribe to our premium services:
- Subscription information is processed through secure third-party payment processors
- We do not store your payment card information
- You can cancel your subscription at any time
- After cancellation, your data will be processed according to the retention provisions of this policy
Security Incident Response
If a data breach or security incident occurs:
- We will notify relevant regulatory authorities within 72 hours of discovery (if applicable)
- If the incident may pose a high risk to you, we will notify you promptly
- We will take measures to mitigate the impact and prevent similar incidents from recurring
Important Notice: This extension is a tool. How you use the collected data is your responsibility. Please ensure that your use of collected email addresses complies with all applicable laws, regulations, and ethical standards.
This privacy policy applies to all versions of the mnmLeads browser extension and related services.