BizHarvest Pro is engineered as a 100% local-first, client-side utility. We believe your lead data, search queries, and CRM credentials belong exclusively to you.
No tracking backend, telemetry endpoints, or cloud databases. 100% of data execution is sandboxed in your browser.
We never sell, rent, license, or monetize your leads or search history to third-party data brokers or ad platforms.
Leads and settings are stored locally in chrome.storage.local. One click permanently erases everything.
Mandatory Single Purpose: “Local business lead harvesting, contact enrichment, and export directly from publicly accessible Google Maps listings and public company websites into the user's local spreadsheet or CRM.”
BizHarvest Pro is strictly limited to fulfilling this single objective. The extension does not perform background browsing monitoring, web tracking, ad injection, cookie reading, or any activities unrelated to extracting public business directory information requested by the user.
Limited Use Compliance Certification:
The use of information received from Google APIs and user data collected by this extension adheres strictly to the Chrome Web Store User Data Policy, including the Limited Use requirements.
When you explicitly trigger a search or scraping session on Google Maps, our content script inspects the publicly visible DOM elements to extract:
wa.me).When you enable the optional Deep Website Scanner, the background service worker makes a client-side HTTP GET request to the public website URL discovered in the listing to extract:
chrome.storage.local)All persistent application data remains in Google Chrome's sandboxed local storage:
BizHarvest Pro declares only the minimum necessary permissions required for its single purpose:
| Permission | Technical & User Need Justification |
|---|---|
| activeTab | Communicates with the active Google Maps tab when the user clicks the toolbar icon or triggers scraping. |
| alarms | Maintains periodic keep-alive timers preventing the Manifest V3 service worker from terminating during long scraping jobs. |
| notifications | Displays native desktop browser notifications when a background harvesting session or export finishes. |
| scripting | Dynamically injects extraction scripts into pre-existing Google Maps tabs opened prior to extension installation. |
| sidePanel | Renders the persistent Chrome Side Panel workspace, allowing users to view leads, deduplicate, and manage pipelines alongside Google Maps. |
| storage | Persists harvested leads, CRM projects, search history, and user settings locally in chrome.storage.local. |
| tabs | Queries open Maps tabs, detects tab closures to safely pause active scraping, and opens search tabs for batch search queues. |
| unlimitedStorage | Prevents quota exceptions in chrome.storage.local when users save thousands of business records with full metadata. |
| https://www.google.com/maps/* | Primary host permission to read public DOM business listing elements on Google Maps search result pages. |
| http://*/* & https://*/* | Allows the Deep Website Scanner to crawl public business homepages for contact emails/social handles across arbitrary domains, and dispatches user-initiated exports to custom user CRM webhooks. |
BizHarvest Pro contains zero third-party analytics, zero ad trackers, and zero telemetry beacons. Outbound network requests occur solely when triggered by the user:
| Service | Destination | Purpose & Payload |
|---|---|---|
| Deep Website Crawl | Target Business Website | Standard HTTP GET request to discover public contact emails/social handles. Zero user data transmitted. |
| DNS MX Verification | https://dns.google/resolve | Queries domain MX records to calculate email deliverability scores. Only the target domain name is transmitted. |
| CRM Sync (HubSpot/Zoho/Salesforce) | Official CRM REST APIs | Pushes user-selected harvested lead cards directly using user's locally stored private API keys. |
| Custom Webhooks / Google Sheets | User Webhook URL | Transmits user-selected lead records to user-configured endpoints (Zapier, Make, n8n, Google Apps Script). |
All exported CSV cells starting with formula execution triggers (=, +, -, @, \t, \r) are automatically neutralized by prefixing a single quote (') to protect your computer from DDE attacks in Microsoft Excel.
The Deep Website Scanner strictly prohibits requests to loopback addresses (localhost, 127.0.0.1), RFC 1918 private subnets (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16), and cloud metadata endpoints.
All JavaScript and third-party libraries (including SheetJS) are 100% packaged locally inside the extension. Zero code is loaded from remote CDNs, and dynamic code evaluation (eval()) is strictly prohibited.
Content scripts operate in an isolated sandbox and are prohibited by the service worker from executing privileged actions such as database wipes, CRM key modifications, or project deletions.
You maintain total ownership and control over your data at all times:
chrome://extensions/ immediately and irrevocably deletes all extension storage and settings from your device.BizHarvest Pro is a B2B business productivity and lead management utility designed exclusively for business professionals and commercial organizations. We do not knowingly collect, solicit, or process personal data from children under the age of 13 (or under 16 in the European Union).
We may update this Privacy Policy periodically to reflect changes in our features, Chrome Web Store policies, or legal requirements. When updates are published, the “Last Updated” date at the top of this policy will be revised accordingly.
If you have any questions, concerns, or requests regarding this Privacy Policy or your data rights, please contact our privacy compliance team: