Back to Leads Connect
OFFICIAL COMPLIANCE & DATA PRIVACY

Privacy Policy

Effective Date: September 1, 2026 • Version 2.4 • Compliant with Meta Platform Terms, GDPR & CCPA

1. Overview & Our Commitment

Leads Connect by Cloudbase Solutions ("Leads Connect", "we", "our", or "us") provides a secure, tokenized client onboarding and Meta Marketing API asset connection platform for digital marketing agencies, media buyers, and their clients.

We believe in radical data minimization and zero-trust security. We NEVER store passwords, sell personal data, or access private social communications.

2. Information We Collect Through Meta Platform APIs

When a client or agency authorizes their Meta account via official Meta OAuth Login, we access and process only the minimal necessary marketing metadata:

Meta Identity & ProfileMeta User ID (scoped to app), Account Name, and Contact Email (if permitted).
Ad Accounts & PortfoliosMeta Business Portfolio IDs, Ad Account IDs, account names, and currencies.
Facebook Pages & InstagramPage IDs, Page Names, connected Instagram Business Account IDs and usernames.
Pixels & DatasetsMeta Pixel IDs, Dataset IDs, and Product Catalog IDs for conversion attribution.

3. Meta Graph API Permissions Requested & Their Purpose

We request standard Meta Graph API permissions strictly for agency partner delegation:

  • ads_management & ads_read: Used to list ad accounts and programmatically assign agency partner access.
  • pages_show_list & pages_read_engagement: Used to identify Facebook Pages the client manages for ad campaign publishing.
  • business_management: Used to identify Meta Business Portfolios and establish official partner access relationships.
  • instagram_basic: Used to link client Instagram accounts to Facebook advertising campaigns.

4. Bank-Grade Encryption & Security Standards

All Meta OAuth access tokens and sensitive platform credentials are encrypted at rest using AES-256-GCM authenticated encryption with separate cryptographic keys. All communications are strictly enforced over TLS 1.3 encryption.

Our multi-tenant architecture physically isolates agency workspaces so no agency or client can view another tenant's data or advertising assets.

5. User Data Deletion & Revocation of Access (GDPR / CCPA / Meta)

Users and clients have the unconditional right to disconnect their Meta account, revoke access permissions, and request total permanent erasure of all stored tokens and audit logs.

To execute a data deletion request or inspect status, visit our dedicated Data Deletion Instructions & Request Portal.

6. Data Protection Officer & Inquiries

For questions regarding this policy, Meta API compliance, or to exercise your GDPR/CCPA data rights, contact our Data Protection Officer:

Company: Cloudbase Solutions
Location: India / Global Remote
Compliance Desk: Privacy & Data Security Operations