Privacy Policy

Orbitex AIO ("we," "our," or "us") operates the VidPulse - Facebook Video Downloader Chrome Extension ("Extension"). Our service is dedicated to a single purpose: enabling users to identify, inspect, and download video and audio streams from Facebook pages directly to their local systems.

This Privacy Policy describes how we process user data, how we handle Chrome API permissions and host domains, and our strict adherence to Google Chrome Web Store Developer Policies. By installing and running this Extension, you explicitly agree to the data collection and processing rules outlined herein.

To deliver core downloading capabilities client-side, the Extension requests minimal and specific browser permissions. Each permission is mapped directly to a user-facing utility, as disclosed below:

• activeTab:Used temporarily to inspect the URL of your active tab. This is strictly required to check if the current web page is a supported Facebook page. We do not monitor, record, or transmit your overall browsing history, nor do we run scripts on other tabs.
• scripting:Used to execute a lightweight content scanning script on facebook.com. This script safely queries HTML5 video elements, media sources (`sd_src`, `hd_src`), and stream manifests to display available resolution options in your extension popup.
• downloads:Invokes Chrome's native download manager. Once you click "Download" in the extension popup, this permission passes the video's stream URL directly to Chrome to execute a local file download into your standard downloads folder.
• storage:Saves your extension settings, localized cached parameters, and your Google account token locally on your device to keep you signed in between browser restarts.
• identity & identity.email:Queries Chrome's native OAuth identity provider to retrieve your Google profile email address. This is used solely to authenticate your identity, associate subscription plans purchased via LemonSqueezy, and check if you are eligible for premium limits.
• alarms:Creates background intervals that check and reset your daily download counter locally on your browser.

In addition to browser API permissions, the Extension requests access to specific host domains (host permissions) in manifest.json. We restrict our network host permissions to only the sites required to perform video detection and account sync:

• Facebook Domains (https://www.facebook.com/*, https://m.facebook.com/*, https://web.facebook.com/*, https://fb.watch/*):Necessary to inject the media detector content script on Facebook pages. The Extension reads only media-related DOM elements on these domains to let you download the video files. No other website interactions are read or recorded.
• API Endpoint (https://vidpulse.orbitexaio.com/*):Used to communicate with our secure backend server. It carries out essential license activation requests, checks subscription validity, logs your daily download count, and processes subscription status updates.

The Extension accesses your Google account information (specifically your email address) via Chrome’s OAuth identity API (`chrome.identity`). We adhere to the strict Google Chrome Web Store User Data Policy:

• We only use your Google email address to verify your premium subscription status and manage licensing.
• We do NOT sell, trade, lease, or share your Google user data with any third parties under any circumstances.
• We do NOT use Google user data to serve or target advertisements, perform user profiling, or track you across other websites.
• We do NOT use user data for any purposes other than providing the core functionality of the Extension.

We believe in absolute transparency. We do not harvest, track, or sell your private information, downloaded files, or online behavior. Here is exactly what data we process:

• Identity Email: The Google profile email retrieved via the Identity API is stored in our secure server database. This acts as your account username to manage subscription states.
• Download Usage Logs: We log download event requests (e.g., date, plan code, and user email identifier) solely to enforce the quota limits assigned to your subscription plan. We do NOT log the title of the video, the publisher, or save the actual video content.
• Payment Transactions: All financial transactions are handled securely by LemonSqueezy, our Merchant of Record. We receive subscription events (start, renewal, cancellation) but never receive or store your credit card details or bank credentials.

Your account records and download activity counters are stored using serverless cloud databases located in secure data centers. All API communications between the Extension and our server are encrypted via standard SSL/TLS protocols.

We retain your email and subscription records as long as your account remains active. You have the right to request absolute data deletion at any time. To purge your account, email us at [email protected] or use our contact page. All personal records will be permanently removed from our active systems within 3 business days.

VidPulse does not mirror, host, or re-distribute media content. The Extension works strictly as an agent executing media URL detection and downloading them directly from Facebook's Content Delivery Networks (CDNs) to your browser. You are responsible for ensuring that you have the right to download copyright-protected videos for personal archiving.

We do not share any data with third-party advertising brokers, data brokers, or search engines. The Extension contains no third-party analytics software or hidden trackers.