Privacy Policy

LeadAIvisor is a service operated by Hello Thesa LLC. It helps small business owners build and manage Facebook lead-generation ads through a chat interface. This policy explains what we collect, why, how we store it, and how you can have it deleted.

What we collect

Account information. The email you sign up with, and the business details you enter during setup: business name, what you sell, your best customer, your offer, service area, and brand voice.

Facebook information. When you connect your Facebook account through Facebook Login for Business, we access, with your consent: your Facebook name and user ID, the Pages you manage, the ad accounts you manage, the lead forms on your Pages, and the leads people submit to those forms (which can include name, email, phone number, and any other fields the form asks for). We request the permissions pages_show_list, pages_read_engagement, pages_manage_ads, ads_read, ads_management, business_management, and leads_retrieval to do this.

Access tokens. So the app can act on your behalf (build campaigns, read your Pages, retrieve your leads), we store a Facebook access token. It is encrypted at rest with AES-256-GCM. It is never displayed in your browser, never returned in an API response, and never written to logs.

Usage information. We count chat rounds and image generations for internal billing.

How we use it

We use this information only to run the service you asked for: to write ad copy, generate creative, build lead forms, set targeting and budget, create campaigns on your ad account (always paused, never spending money on their own), retrieve the leads your forms collect, and show you performance. We do not sell your data. We do not send marketing on your behalf. We do not post to your Pages.

Where it is stored and who processes it

The application runs on Vercel and stores data in a Supabase (PostgreSQL) database. To generate ad copy and images, the text of your prompts and business details is processed by Anthropic and Google. These providers process data on our behalf to deliver the feature you requested; they are not permitted to use it for their own purposes.

Retention and deletion

You can disconnect Facebook at any time from inside the app. Disconnecting immediately deletes the stored access token. You can request deletion of your entire account and all associated data at any time. See our data deletion instructions for how.

Contact

Questions about this policy or your data: ivan@leadsystemsgo.com.