Privacy Policy for Facebook Lead Forms

This Privacy Policy explains how INHAYAT handles information connected to Facebook lead forms, Meta account connections, Facebook Pages, Lead Ads forms, and lead delivery webhooks.

This page is intended for customers who submit Facebook lead forms and for administrators who connect Facebook Pages or lead forms to INHAYAT.

When a customer submits a Facebook lead form connected to INHAYAT, we may receive the fields configured in that form, usually the customer's name and phone number.

We may also receive Meta delivery metadata such as lead ID, form ID, Page ID, campaign ID, ad ID, ad set ID, and submission time.

When an administrator connects a Facebook account, we may receive the administrator's Facebook user ID, display name, access token, Page list, Page IDs, Page names, Lead Ads form IDs, form names, and permissions granted through Meta.

We do not receive or store Facebook passwords. We do not request private messages, friend lists, personal posts, or unrelated Facebook profile content for this integration.

We use customer lead data to contact the customer about the submitted inquiry, confirm requested order details, provide support, and process the related order when the customer confirms.

We use administrator connection data to keep Facebook Page and Lead Ads form connections active, sync available forms, subscribe to lead delivery webhooks, monitor delivery status, and troubleshoot failed requests.

We do not sell personal data received from Facebook lead forms.

We do not use Facebook lead data to build unrelated interest profiles or for purposes unrelated to responding to the customer's inquiry and operating the lead form integration.

Lead information may be visible to authorized INHAYAT administrators and staff who need it for lead intake, customer contact, order confirmation, delivery coordination, security, auditing, and support.

We may use service providers that help us host, secure, monitor, and operate the application. These providers process information only for operational purposes.

We may disclose information if required by law, court order, regulatory request, security investigation, or to protect our rights, users, staff, and services.

Facebook access tokens and Page/form connection records are stored only for as long as the administrator keeps the integration active or as needed to operate the lead forwarding service.

Lead records may be retained as part of customer service, order fulfillment, accounting, anti-fraud, dispute handling, and legal compliance.

Webhook request logs are kept for operational monitoring, retry, debugging, and security review, and may be deleted or minimized when no longer needed.

If a Facebook user removes our app or requests deletion through Meta, Meta may send a signed deletion request to our Data Deletion Callback URL. We verify the request, delete stored Facebook connection tokens for that Meta user, disable related form mappings, remove related forwarder request logs, and return a confirmation code with a status URL.

Administrators can also disconnect their Facebook account from the INHAYAT control panel lead forwarder page.

Customers who submitted a lead form may request review, correction, or deletion of their contact information by contacting us through Telegram. Some records may be retained where required for accounting, legal, security, or dispute-resolution purposes.

We use access controls, authenticated admin endpoints, OAuth state validation, Meta signed request validation for deletion callbacks, and operational logging to protect integration data.

No internet service can be guaranteed to be completely secure, but we limit access to Facebook lead data to operational needs and remove or disable integration data when deletion is requested.

Facebook administrators can remove INHAYAT's access from Facebook or Meta Business settings, or disconnect the integration from the INHAYAT control panel.

Customers can choose not to submit a Facebook lead form. Customers who already submitted a form can contact us to request information about their lead record.

For privacy questions, Facebook lead form questions, or data deletion support, contact us through Telegram at @inhayat_bot.

We may update this Privacy Policy as our Meta integration, business operations, or legal requirements change. The latest version will be published on this page with the updated date.