Privacy Policy

Effective date: October 20, 2026.

Application: LeadMe (leadme.digital)
Owner (Licensor): Anton Anatolyevich Atnyashev, individual
Data controller: Anton Anatolyevich Atnyashev, sole proprietor
TIN 20910199400062, OKPO 30518421
Address: Toktonaliev St., Pervomaisky District, Bishkek, Kyrgyz Republic
Email: support@leadme.digital

This English version is provided for convenience. The Russian version has the same content.

1. General

This Privacy Policy explains what data the LeadMe service (the "Service", "we") collects and processes, why, who it is shared with and how to delete it. The Service helps advertisers and agencies send lead and sales events from CRM systems, websites and spreadsheets to advertising platforms (Meta Conversions API and similar APIs of other platforms). By using the Service you agree to this Policy.

2. Data we process

2.1. Account data: name, email, password hash, sign-in method (email and password, Google, Facebook), interface language, plan and payment information (amount, date, status). We do not receive or store bank card data; payments are processed by the payment provider.

2.2. Facebook (Meta) sign-in. When you use Facebook Login for Business we receive your user ID, name and email (if set and confirmed in your Facebook account). With your explicit consent in the Meta dialog the Service also gets access:

• to the list of your ad accounts, pixels (datasets) and business portfolios — permissions ads_read, business_management;
• to setting up pixels and sending conversion events to the pixels you choose — permission ads_management;
• to ad statistics of connected accounts to show analytics in the Service — permission ads_read.

We use this access only for features you enable in the Service. We do not create or change campaigns, ads or budgets, do not publish content on your behalf and do not sell data received from Meta.

2.3. Connection data: pixel and ad account IDs, access tokens for advertising platforms (Meta, TikTok, VK, Yandex, Google Ads, Snapchat, Pinterest), CRM systems (AmoCRM, Bitrix24, Pipedrive, HubSpot) and payment services (Stripe and Shopify webhook signing keys), and access to the Google Sheets you connect. Tokens are stored on the server and used only to run your connections.

2.4. Lead and customer data you send through the Service: phone, email, first and last name, city, click and browser identifiers (fbc, fbp), external deal or contact ID, purchase amount and currency. For this data you are the controller and the Service is a processor acting on your instructions. Before sending to advertising platforms personal data is hashed (SHA-256) as the platforms require. The Service does not keep this data in plain form after sending: the log keeps only technical details — the deal or row ID, event name, time and result.

2.5. Technical data: IP address, browser type, request and error logs — for security and diagnostics. For visit statistics of leadme.digital we use our own counter: an anonymous browser ID, viewed pages, traffic source (UTM tags, referring site) and device type. No third-party counters are used for this.

2.6. LeadMe script on a customer's website. If you install our script on your website, on your behalf it stores in the visitor's browser ad click identifiers (fbclid, ttclid, yclid, gclid, ScCid, epik, etc.) and ad platform cookies, and when a form is submitted it sends to the Service the entered contact details (except passwords and bank card data), the page address, the visitor's IP address and browser type — to send the event to the advertising platforms you connected. As the website owner you must notify visitors and obtain their consent where the applicable law requires it.

2.7. Google data. The Service receives data from your Google Account only with your consent in the Google dialog and only for features you enable:

• Sign in with Google — email, name and profile photo (openid, email, profile): to create your account and sign you in;
• Google Ads (https://www.googleapis.com/auth/adwords) — read-only: the list of Google Ads accounts you have access to (ID and name) and the list of conversion actions of the account you select (ID, name, type). This lets you pick where to send conversions from a list instead of typing IDs. We do not read statistics, campaigns, ads, budgets or billing data and do not change anything in your account;
• Google Data Manager API (https://www.googleapis.com/auth/datamanager) — sending offline conversions (leads and sales from your CRM) to the Google Ads conversion action you select. Customer emails and phone numbers are hashed (SHA-256) before sending;
• Google Sheets and Google Drive — if you connect a spreadsheet as a lead source: reading the published spreadsheet and, at your request, creating a template spreadsheet in your Google Drive.

We store only the access token and the IDs of the selected account and conversion action; the lists of accounts and conversion actions are not stored. Data received from Google APIs is used only to show you these lists and to send your conversions. It is not shared with third parties (other than Google itself when conversions are sent), not sold, not used for advertising, not used to train AI models and not used for any other purpose. Our staff do not read this data unless you ask us for help, or it is necessary for security or required by law. LeadMe's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time at myaccount.google.com/permissions.

2.8. Meta ad performance data. If you connected a Meta ad account, with your permission the Service reads for your ads the ad name, campaign and ad set, creative preview, the name of the Page the ad runs from, and spend, impressions and clicks (Ads Insights). Together with the ad ID from the utm_content (or ad_id) tag this is used only for the "Sales by creative" report in your dashboard: which ads brought leads and sales. To link a sale to the customer's first lead we store an anonymous key (a hash of the email or phone). Only you and your team members see this data; we do not share it with third parties or use it for other purposes.

3. Purposes of processing

• providing the Service: sending conversion events to advertising platforms, event matching, analytics;
• creating and maintaining your account, signing in, accepting payments;
• notifications about connections and errors (email, Telegram — if you enabled them);
• user support, security and compliance with the law.

4. Sharing with third parties

We share data only to the extent needed to run the Service:

• with the advertising platforms (Meta Platforms, TikTok, VK, Yandex, Google, Snap, Pinterest) to which you set up event sending;
• with the CRM systems and services (AmoCRM, Bitrix24, Pipedrive, HubSpot, Google, Stripe, Shopify, Make, Zapier) from which you connected data;
• with the hosting provider DigitalOcean (data storage on the server);
• with the payment provider Finik (payment processing), Resend (sending emails), Telegram (notifications, if enabled);
• with government authorities — only where the law expressly requires it.

We do not sell personal data and do not share it for third-party advertising.

5. Storage and security

Data is stored on a server in a DigitalOcean data center. Connections to the Service are protected with HTTPS, passwords are stored as hashes, and server access is restricted. Account and connection data is kept while your account exists; after the account is deleted it is removed as described in section 6. Payment records may be kept longer if the law requires it.

6. Data deletion

You can delete your data at any time:

1. Revoke Meta access: in Facebook open "Settings & privacy" → "Settings" → "Business integrations" (or "Apps and websites"), find LeadMe and click "Remove". The Service then loses access to your ad data.
2. Revoke Google access: open myaccount.google.com/permissions, select LeadMe and click "Remove access".
3. Delete a connection in the Service: delete the pixel or connection in your dashboard — its stored tokens are deleted with it.
4. Delete your account and all data: email support@leadme.digital from the address of your account with the subject "Data deletion". We will delete the account, connections, tokens and logs within 30 days and confirm by email.

7. Your rights

You may request information about your data, its correction or deletion, withdraw consent to processing and disconnect any connection. To do so, email support@leadme.digital.

8. Changes to this Policy

We may update this Policy. The current version is always available on this page, with the effective date at the top. We notify you of material changes by email.

9. Contact

For any questions about data processing: support@leadme.digital.