Enterprise Privacy Policy Meta & Google Audit Ready

EntecLeadAI Privacy Policy

Transparency, rigorous data protection, and enterprise security for our AI-powered lead qualification and multi-channel CRM automation platform.

Last Updated:July 30, 2026
Effective Date:January 1, 2026

1. Introduction

Welcome to EntecLeadAI("Company", "we", "our", or "us"). EntecLeadAI operates a state-of-the-art enterprise Software-as-a-Service (SaaS) platform designed for real estate agencies, sales organizations, and enterprise businesses. Our platform delivers automated lead capture, artificial intelligence (AI) qualification, automated scheduling, and multi-channel CRM integration.

This Privacy Policy outlines how EntecLeadAI collects, uses, processes, stores, and protects personal and business information when you use our website at https://www.entecleadai.com, our enterprise application, or integrate your accounts with third-party platforms including Meta (Facebook & Instagram), WhatsApp Business API, Google Services (Google Ads & OAuth), and connected CRM systems.

By accessing or using EntecLeadAI, connecting your Meta Business accounts, or utilizing our automated lead qualification tools, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.

Developer & Platform Compliance Guaranteed
This Privacy Policy is crafted to strictly adhere to Meta Developer Platform Terms, Facebook Lead Ads Data Processing Policies, Google API Services User Data Policy, and global data privacy standards (GDPR, CCPA/CPRA).

2. Information We Collect

To provide our automated CRM, lead qualification, and multi-channel synchronization services, EntecLeadAI collects necessary personal data and technical information. We adhere strictly to the principle of data minimization—collecting only what is strictly required to fulfill our operational and agreement obligations.

A. Account & Organization Information

Account Holder Details
Full Name, Business Email Address, Phone Number, Profile Photo, and Job Title.
Workspace & Organization Data
Company Name, Workspace ID, Billing Contact, Subscription Level, and Team Member Roles.

B. Meta & Social Media Integrations (Facebook & Instagram)

Facebook Account Information
User ID, User Name, Primary Email Address, and User Access Tokens via Meta Login.
Instagram Business Accounts
Connected Instagram Professional Account IDs, Handles, Business Profiles, and Direct Message Webhooks.
Meta Business Assets & Pages
Meta Business Manager ID, Connected Facebook Page IDs, Page Names, Page Access Tokens, and Page Roles.
Facebook Lead Ad Forms & Leads
Form IDs, Form Field Mapping, Lead Form Submissions (Lead Name, Email, Phone Number, Custom Answers, Timestamp).

C. Google Ads & Third-Party Platform Data

Google Ads Account Information
Google Customer ID, account name, OAuth 2.0 Access/Refresh Tokens (encrypted), Campaign names and performance totals, Lead Form assets, and Lead Form Submissions.
WhatsApp Business API Data
WhatsApp Business Phone Number ID, WABA ID, Message Templates, Inbound Customer Messages, and Outbound Replies.

D. Technical, Device & Analytics Information

Browser Information
Browser Type, Version, Preferred Language, Timezone Setting, and Screen Resolution.
Device & IP Data
IP Address, Network Host, Hardware Model, Operating System, and Unique Device Identifier.
Usage Analytics
Pages Visited, Feature Usage, Session Duration, API Call Logs, Clickstreams, and Error Reports.

3. Facebook & Meta Permissions

EntecLeadAI integrates with Meta Platforms via official Meta Graph APIs. When connecting your Facebook Page, Business Manager, or Lead Ad Forms, our application requests specific OAuth permissions. Below is an explicit breakdown of the permissions requested, why they are required, and how they are handled.

business_managementMeta Graph API

Allows EntecLeadAI to view your Business Manager assets, enumerate owned Facebook Pages, and identify associated Lead Gen Forms.

Purpose: Seamless connection and mapping of enterprise Meta Business accounts to your EntecLeadAI workspace.
pages_show_listMeta Graph API

Grants EntecLeadAI access to retrieve the list of Facebook Pages that you manage or administer.

Purpose: Allows workspace administrators to select which Facebook Pages should receive automated lead synchronization.
pages_read_engagementMeta Graph API

Enables EntecLeadAI to read Page engagement metrics, form subscriptions, and Page metadata required for lead processing.

Purpose: Ensures EntecLeadAI receives instant webhooks when new lead forms are completed by potential customers.
leads_retrievalMeta Graph API

Allows EntecLeadAI to fetch lead submissions generated via Facebook Lead Ads in real-time.

Purpose: Downloads submitted lead data (name, email, phone, custom fields) directly into EntecLeadAI CRM for instant AI qualification.
Strict No-Posting & Scope Enforcement Guarantee
EntecLeadAI uses Meta permissions ONLY to connect business accounts, list Facebook pages, retrieve lead form submissions, synchronize lead records, and display actionable lead metrics inside the EntecLeadAI dashboard. EntecLeadAI NEVER posts content, publishes status updates, or modifies your Facebook Pages or Ads without your explicit, manual instruction.

3B. Google Ads Data (Google API Services)

EntecLeadAI lets each user connect their own Google Ads account by signing in with Google (OAuth 2.0). Users never enter API keys or passwords into EntecLeadAI. This section explains exactly which Google user data we access, why, and how it is protected.

https://www.googleapis.com/auth/adwordsGoogle Ads API

The only Google scope EntecLeadAI requests. With it we read: the Google Ads accounts you can access (account ID, name, currency, time zone), your campaigns (name, status and performance totals), your Lead Form assets, and the lead form submissions on the forms you choose (the answers people entered — typically name, phone number, email, city and your custom questions).

Purpose: To show you your lead forms, let you choose which ones send leads to EntecLeadAI, and place each new submission in your Lead Inbox so your team (and, if you enable it, the EntecLeadAI WhatsApp assistant) can follow up with that person.
Optional webhook: If you add your EntecLeadAI webhook URL and key to a lead form in Google Ads, Google also sends each new submission of that form directly to EntecLeadAI. These leads are handled exactly like the ones above and go only to your own Lead Inbox.

What we do not do with Google data

  • We do not create, edit, pause or delete your ads, campaigns, budgets or lead forms.
  • We do not sell Google user data, use it for advertising, or use it to build profiles unrelated to your leads.
  • We do not use Google user data to train generalized artificial-intelligence or machine-learning models.
  • We do not share it with anyone except the service providers that run EntecLeadAI for you (hosting on Amazon Web Services, and — only for leads you choose to contact on WhatsApp — Meta's WhatsApp Business Platform), or when the law requires it.
  • People in our company cannot read it, except with your permission for support, for security investigations, or where the law requires it.

Storage, retention and deletion

Google access and refresh tokens are encrypted with AES-256-GCM and stored on our AWS servers in India (ap-south-1). They are only used to read your lead forms and submissions. Leads imported from Google Ads stay in your EntecLeadAI account until you delete them. When you disconnect a Google Ads account on the Google Ads page, its tokens are deleted at once and no further data is read. You can also remove EntecLeadAI's access at any time at myaccount.google.com/permissions. To have all Google-derived data deleted from our systems, use the data deletion page or email us (see Contact Information); we complete deletion within 30 days.

Google API Services User Data Policy — Limited Use
EntecLeadAI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Use Your Information

We process collected data exclusively to deliver, maintain, optimize, and protect the EntecLeadAI SaaS platform. Key usage operational areas include:

  • Enterprise CRM & Pipeline Management: Aggregating lead records from Facebook, Instagram, Google Ads, and manual entries into a centralized workspace dashboard.
  • Real-Time Lead Synchronization: Instantly capturing incoming leads via webhooks and updating lead status, contact details, and custom field values.
  • AI Qualification & Scoring: Processing lead parameters using trained AI algorithms to score purchase intent, extract client preferences, and assign leads to sales representatives.
  • WhatsApp Business Automation: Triggering automated WhatsApp welcome messages, follow-up drip sequences, appointment reminders, and interactive chatbots.
  • Campaign Management & Analytics: Tracking ad campaign conversion rates, cost-per-lead metrics, lead source attribution, and generating executive reports.
  • System Notifications & Security Alerts: Sending transactional emails, login verifications, password reset links, and workspace activity alerts.

5. Third Party Services & Integrations

EntecLeadAI connects with trusted third-party platforms to execute multi-channel marketing workflows. We share data with third parties only to the extent necessary to perform integration services under strict confidentiality and privacy agreements.

Service ProviderIntegration TypeData Shared / RetrievedPrivacy Policy Link
Meta Platforms Inc.Facebook Lead Ads & PagesLead Form Submissions, Page Tokens, Business IDsMeta Privacy Policy
Instagram (Meta)Instagram Professional AccountsProfile IDs, Webhooks, Direct MessagesInstagram Policy
WhatsApp BusinessWhatsApp Cloud APIPhone Numbers, Messaging Templates, Chat LogsWhatsApp Policy
Google LLCGoogle Ads & Google OAuthOAuth sign-in, Google Ads accounts, lead forms and lead form submissions (read-only)Google Privacy
Amazon Web Services (AWS)Infrastructure & DatabaseEncrypted Application Databases, BackupsAWS Privacy

6. Data Storage & Encryption Architecture

Data security is at the core of EntecLeadAI's architecture. All customer data, connected asset tokens, and lead records are securely stored using industry-leading infrastructure standards:

PostgreSQL Relational Storage
Enterprise PostgreSQL database clusters with automated snapshot backups, point-in-time recovery, and strict database connection pooling.
Encrypted Access Tokens (AES-256)
All Meta Page Access Tokens, User Access Tokens, and Google OAuth Refresh Tokens are encrypted at rest using AES-256 military-grade encryption.
HTTPS TLS 1.3 / 1.2 Transit Security
Every API payload, webhook event, and user session is transmitted strictly over TLS 1.3 encrypted HTTPS channels. HTTP connections are automatically upgraded.
Secure Authentication Protocols
Stateless JWT tokens, secure HTTP-only cookies, password hashing with bcrypt, and session revocation capabilities.

7. Enterprise Data Security & Isolation

EntecLeadAI enforces rigorous logical and physical security controls to guarantee enterprise tenant isolation:

  • Workspace & Company Isolation: Logical database boundary segregation prevents any cross-workspace or cross-tenant data leakage. Users access only authorized workspace data.
  • Role-Based Access Control (RBAC): Fine-grained permissions (Owner, Admin, Manager, Agent) restricting user actions and visibility within each enterprise workspace.
  • System Audit Logs: Immutable log records tracking user logins, Meta token updates, lead data modifications, and deletion requests for compliance auditing.
  • Continuous Vulnerability Monitoring: Regular dependency scans, automated security patches, and network intrusion prevention systems.

8. Cookies & Tracking Technologies

EntecLeadAI uses essential and functional cookies to deliver a seamless web experience. Cookies are small text files stored on your browser when visiting our platform.

Essential Session Cookies
Required to maintain secure user authentication sessions and preserve active workspace context.
Security & Anti-CSRF Tokens
Prevents cross-site request forgery attacks and validates authorized API form submissions.
Preference Cookies
Stores user theme preferences (Dark Mode / Light Mode), sidebar state, and language settings.

You can manage or disable non-essential cookies via your browser settings. Note that disabling essential cookies may impact platform functionality.

9. User Data Rights & Controls

In compliance with global data privacy regulations (GDPR, CCPA, CPRA), EntecLeadAI grants users full control over their personal and enterprise data:

Right to View & Access
Request a complete copy of all lead records, connected accounts, and user information stored in your account.
Right to Rectify & Update
Edit, update, or correct inaccurate user account details, workspace profiles, or mapped lead fields anytime.
Right to Disconnect Accounts
Revoke connected Meta Facebook Pages, Instagram Business Accounts, or Google Ads accounts instantly in Settings.
Right to Erasure (Delete Data)
Request permanent deletion of your EntecLeadAI workspace, associated lead records, and stored tokens.

10. Facebook Data Deletion Instructions

In compliance with Meta Platform Terms, EntecLeadAI provides a dedicated, direct self-service process for requesting the complete removal of connected Facebook and Meta user data.

If you wish to delete your connected Meta asset data, Page tokens, or lead form submissions retrieved from Facebook, you can initiate the request in two simple ways:

  • Option 1: Direct In-App & Self-Service Deletion Page: Visit our official Data Deletion Portal at /data-deletion and enter your email or workspace ID to trigger an instant deletion workflow.
  • Option 2: Meta App Settings Removal: Go to your Facebook Profile → Settings & Privacy → Settings → Apps and Websites → Find EntecLeadAI → Click Remove. You can also click View Removed Apps and click Send Request to request data deletion.
Request Facebook Data Removal
To view step-by-step instructions, check deletion request status, or submit a manual Meta data wipe request, access our dedicated Data Deletion callback page below.

11. Children's Privacy Compliance

EntecLeadAI is an enterprise B2B SaaS platform intended solely for business professionals and commercial organizations. Our service is not directed to individuals under the age of 18 (or 16 in certain jurisdictions).

We do not knowingly collect or solicit personal data from children. If we become aware that a child under 18 has provided us with personal information, we will take immediate steps to delete such data from our databases and revoke active account access.

12. Changes & Updates to This Policy

We may update this Privacy Policy periodically to reflect enhancements to our AI CRM capabilities, changes in Meta or Google platform requirements, or evolving legal standards.

When material changes are made to this policy, we will update the "Last Updated" date at the top of this page and notify registered workspace administrators via email or an in-app system notification at least 30 days prior to effective implementation.

13. Contact Information

If you have any questions, concerns, or legal inquiries regarding this Privacy Policy, your data rights, or Meta App Review compliance, please contact our dedicated Data Protection & Legal team:

Registered Address
H.No. 1, New Swarn Singh Colony, Jalbera Road, Sonda, Ambala, Haryana 134003, India
Company Entity
Entec Media (operator of EntecLeadAI)
Legal & Privacy Email
info@entecleadai.com
Official Website
www.entecleadai.com