Privacy Policy

1. Who and what this policy covers

This policy explains how the IGMate website and its browser extensions handle information, including Mass Downloader - SodaFox, our Instagram media-saving extension. Product-specific Google Drive practices are described below. You can read this page and our product information without signing in.

Mass Downloader - SodaFox saves supported Instagram media to your computer, or optionally to Google Drive for Profile Posts. It is not an AI image-generation, face-editing or undressing service. Only save content you own or have permission to save.

2. Information we access and use

• Account and service information. When you sign in, we process your account identifier, email, display name, profile image where provided, and session credentials to operate your account. Plan access, subscription and purchase records support paid features and purchase recovery. Payment providers process payment details under their own policies.
• Instagram content. The extension processes supported page context, media identifiers, filenames and media necessary for the actions you request. Access depends on your Instagram session. Some supported workflows use our service APIs to resolve content or manage task information; it is not accurate to describe every feature as entirely offline. We do not ask you to enter your Instagram password into our website.
• Settings and task information. Download preferences, naming rules, history or task results may be held in browser extension storage or in the service used by that feature. Google Drive connection information is described separately below.
• Usage, diagnostics and communications. We process technical request information such as IP address, browser or extension version, usage events and errors to operate, secure and improve the service. Some operational events are associated with a signed-in account. We also receive information you submit in support requests or feedback. Avoid sending passwords, authorization codes or access tokens.

3. Optional Google Drive connection

Product sign-in and Google Drive authorization are separate. Connecting Drive is optional. Google shows the authorization screen, and you choose whether to grant access. Connecting or changing a folder does not itself start an upload.

Storage and transfer

Our server stores the current connection, Google account display details, granted permission information and selected-folder preferences, linked to your product account. Long-lived Google authorization credentials are encrypted at rest. Short-lived credentials and authorization-flow records are held temporarily to complete authorized operations; they are not published in page URLs or analytics.

When you start saving, media is processed in your browser and uploaded directly to Google Drive. Our backend manages the connection and authorization; it does not relay or keep a server-side copy of the media uploaded by the Drive saving feature. Files, folders and app-specific media markers are stored in your Drive. Google processes that data under its own terms and policies.

4. Google user data: limited use and sharing

Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Google user data is used to provide the visible connection, folder selection and saving features described here. We do not sell it, use it for advertising or credit decisions, or use it to develop, improve or train generalized AI or machine-learning models. We do not send your Drive files or authorization credentials to advertising or website analytics services.

Transfers of Google user data are limited to what is necessary for the user-facing features with your consent, security, legal compliance, or a business transfer with the required prior consent. Infrastructure providers may process necessary connection data on our behalf to host and secure the service. Human access is limited to your affirmative agreement for specific data, necessary security or legal purposes, or policy-permitted aggregated internal operations.

5. Retention, disconnection and deletion

Active connection credentials are retained to provide the connected service. Disconnecting Drive in the extension clears the active connection identity and stored long-lived credential. The selected-folder preference and its account association are retained to support reconnection. Temporary authorization and operation records expire under their configured lifetimes; disconnecting does not promise immediate removal of every temporary or backup record.

Disconnecting does not delete, move or rename files already saved in Drive, and it does not revoke all Google-project grants. You can separately revoke the app’s access in Google Account connections. You manage or delete saved files directly in Google Drive.

Other account, transaction, support and security records are retained as needed for the service, dispute handling and applicable legal obligations. Browser data remains until cleared through the relevant setting or browser controls. Uninstalling the extension alone does not delete server-side account or connection records.

You may request access, correction or deletion of account data, retained Drive preferences and other information by contacting [email protected]. We may need to verify account ownership. Requests are handled subject to necessary security, legal and recordkeeping obligations; this is a support request process, not an automatic in-product deletion function.

6. Other services and disclosures

Authentication providers such as Firebase, hosting and security providers, and payment providers process information needed for their functions. Website analytics may include Google Analytics and Microsoft Clarity, which process website usage information under their own policies. Google Drive authorization and folder-selection bridge pages exclude the ordinary website analytics scripts.

Information may be disclosed to service providers for these purposes, when required by law, or as needed to investigate abuse and protect users and the service. Google user data remains subject to the stricter limitations in section 4.

7. Security and your choices

We use HTTPS for service communication, encryption for stored Google authorization credentials, and account and operation checks to restrict access. No system can guarantee absolute security. You can stop saving, disconnect Drive, revoke Google access, clear relevant browser data, uninstall the extension, or contact us about your data.

The service must not be used to create or distribute non-consensual intimate imagery, including AI-generated content. Please review our acceptable-use terms. The product is independent and is not affiliated with, endorsed by or sponsored by Google, Instagram or Meta.

8. Updates and contact

We update this policy when our practices change and revise the date above. Contact [email protected] with privacy questions or data requests. Product information is available at igmate.net and on the product page.