As a 27 year Legal Secretary/Paralegal, there is NO WAY this is legal.
First, I would ask them for a copy of CC&Rs, (Covenants, Conditions & Restrictions) or at least the portion that states they have received the proper approval by the government to invade your privacy (which, of course won't be there).
But ultimately I would report them to the BBB for sure, do what others have suggested and create a totally fresh FB page (while keeping your regular one and set its privacy settings very high on your own account regarding what the public can see (which can be everything if you want - that's what I'd do.
When you create your fake FB account, open up an acct. With hotmail or yahoo, one you don't use at all and maybe change one letter in your name for the new acct. Just put up a random Avatar a d put absolutely nothing on it.
But DEFINITELY make a case with the BBB, and heck, if they put this in writing to you, make copies to send to both the BBB AND the DOJ (Dept. Of Justice). If you are in California, by chance, I might be able to help out further. I live on the Central Coast of California, a mile from Pismo Beach - a tourist town which is totally packed right now for Memorial Day Weekend.