Privacy Policy

1. Who we are

This Privacy Policy explains how Lead Mingle ("Lead Mingle", "we", "us") collects, uses, shares and protects personal data when you use our website at leadmingle.com and our web application at app.leadmingle.com (together, the "Service"). We are based in India. Under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we act as the Data Fiduciary for the personal data described here. This policy is also published in line with the Information Technology Act, 2000 and the rules made under it, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and with the Meta Platform Terms.

2. What Lead Mingle does

Lead Mingle is a read-only reporting dashboard for Meta advertising. When you connect your Meta account through Facebook Login for Business, we ask only for the ads_read permission. We use it to read performance data from the ad accounts you choose and show it to you in reports. Lead Mingle never creates, edits, pauses or deletes ads, campaigns or ad accounts.

3. Personal data we collect

a. Account information you give us

Your name, email address and password (stored only as a secure hash by our authentication provider). We also keep any messages you send us.

b. Data we receive from Meta when you connect your account

• a Meta access token that lets us read your ad data on your behalf;
• your Meta user ID and the name associated with your Meta account;
• the list of ad accounts you can access (IDs, names, currency, time zone and status);
• for the ad accounts you select, advertising performance data such as spend, impressions, clicks, results, cost per result, return on ad spend (ROAS), click-through rate (CTR) and related campaign-level metrics and names.

We do not request access to your Facebook posts, friends, messages, Pages content or any data about the people who see your ads.

c. Data you enter in the app

Client names, industries, monthly budgets and other settings you add to organise your ad accounts.

d. Technical data

When you use the app, our hosting and database providers process limited technical data such as IP address, browser type and request logs. This is needed to deliver the Service securely and to prevent abuse.

Apart from your password, which is stored only as a secure hash by our authentication provider, we do not collect sensitive personal data or information as defined under the IT Rules, 2011, such as financial account details, health information or biometric data. Payments are not processed through the Service at this time.

4. Why we use your data

We use personal data only to:

• create and secure your account and let you sign in;
• connect to Meta on your instruction and sync the ad accounts you select, normally once a day;
• show you dashboards, trends and budget tracking for your own ad accounts;
• send transactional emails such as sign-up confirmation, password reset and important notices about the Service;
• respond to your requests and support questions;
• keep the Service secure, prevent misuse and meet our legal obligations.

We process this data on the basis of the consent you give when you sign up and when you connect your Meta account, and, where applicable, for the legitimate uses permitted under the DPDP Act. You can withdraw consent at any time (see section 10). If you do, we will no longer be able to provide the parts of the Service that depend on it.

5. How we treat data from Meta

• We use Meta data only to show you reports about the ad accounts you have connected.
• We do not sell, license or rent Meta data or any other personal data.
• We do not use Meta data for ad targeting, building audiences, profiling, or any purpose other than showing you your own reports.
• We do not share one user's Meta data with any other user.
• We do not use Meta data to train machine-learning or AI models.
• We follow the Meta Platform Terms and Developer Policies, and we delete Meta data when it is no longer needed for this purpose, when you disconnect, or when Meta or you ask us to (see section 9).
• If we introduce AI-powered features, we will update this policy before they launch to describe how data is processed and to name any additional service provider involved.

6. Security

Meta access tokens are encrypted at rest and are never shown in your browser or shared with other users. All data travels over encrypted HTTPS connections. Access to production systems is limited to people who need it to run the Service. Database access is restricted so that each user can only read their own data. No system is completely secure. If we become aware of a personal data breach affecting you, we will notify you and the Data Protection Board of India as required by law.

7. Service providers we share data with

We share personal data only with the service providers we need to run Lead Mingle. They process it on our instructions:

We may also disclose personal data if the law, a court order or a government authority with legal power to ask for it requires us to. We may also disclose it to protect the rights, safety or property of our users or others.

These providers may store or process data on servers outside India. Where we transfer data outside India, we do so in line with the DPDP Act and any restrictions notified by the Government of India.

8. Cookies

We use only essential cookies, which keep you signed in to the app and keep your session secure. We do not use advertising or tracking cookies, and we do not use third-party analytics on leadmingle.com.

9. How long we keep data

• Account information is kept while your account is active. It is deleted within 30 days after you delete your account.
• Meta access tokens are deleted as soon as you disconnect Meta in the app, or when we learn that you have removed Lead Mingle from your Facebook settings.
• Ad performance data: when you connect an ad account, we load up to the last 90 days of history and then sync new data daily. We keep it while the ad account remains connected and selected, and delete it within 30 days after you disconnect Meta, deselect the account or delete your account.
• Backups are kept for a limited period and overwritten automatically. Deleted data is removed from them within a further 30 days.
• We may keep a minimal record, such as the fact that a deletion request was completed and its confirmation code, where the law requires it or to show that we complied.

10. Your rights

Under the DPDP Act and other applicable law, you have the right to:

• get a summary of the personal data we hold about you and how we process it;
• have inaccurate or incomplete data corrected or updated;
• have your personal data erased;
• withdraw your consent at any time;
• have your grievances addressed by us;
• nominate another person to exercise these rights if you die or become incapacitated.

To exercise any of these rights, email contact@leadmingle.com from the address linked to your account. You can also disconnect Meta at any time in the app under Settings → Disconnect. Step-by-step deletion instructions are on our Data Deletion page. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

11. Children

The Service is meant for businesses and professionals. It is not directed at anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Grievance Officer

In accordance with the Information Technology Act, 2000, the rules made under it and the DPDP Act, our Grievance Officer is:

We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days of receiving it.

13. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above. If the changes are significant, we will also notify you by email or in the app before they take effect.

14. Contact

Questions about this policy: contact@leadmingle.com.