Effective Date: July 14, 2026 Last Updated: July 14, 2026

1. Introduction

JustLED Technology ("JustLED Technology," "we," "us," or "our") is committed to protecting the privacy and personal data of individuals who interact with our application (the "Application"), which integrates lead data generated through Meta's advertising platforms (Facebook and Instagram) into our customer relationship management ("CRM") system on behalf of our clients.

This Privacy Policy explains what personal data we collect, how it is collected through the Meta Lead Generation API ("Lead Ads API"), how it is used, stored, protected, and shared, and what rights individuals have regarding their personal data under applicable data protection laws, including the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados, "LGPD") and the European Union's General Data Protection Regulation ("GDPR").

By submitting information through a Lead Ads form on Facebook or Instagram associated with our clients' advertising campaigns, or by otherwise using the Application, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy is intended to comply with the Meta Platform Terms, Meta Advertising Policies, and the technical and policy requirements applicable to the use of the Lead Generation API (Lead Ads) under Meta's Developer Policies and App Review guidelines.

​

2. Personal Data We Collect

Through the use of the Lead Ads API, the Application may collect the following categories of personal data submitted voluntarily by users through Lead Ads forms on Facebook and Instagram:

• Identification data: full name.

• Contact data: telephone number and email address.

• Additional form data: any other information voluntarily provided by the user in response to custom questions configured in the Lead Ads form by our clients (for example, company name, job title, city, product or service interest, or similar business-related fields).

• Campaign and technical metadata: lead identification number, form identification number, campaign identification number, ad identification number, and the timestamp of form submission, as provided by the Meta Lead Ads API.

We do not collect sensitive categories of personal data (such as data concerning health, racial or ethnic origin, religious beliefs, political opinions, or biometric data) through the Application. Lead Ads forms are configured by our clients to request only the data necessary for legitimate commercial contact purposes.

​

3. How Data Is Collected Through the Meta Lead Ads API

When a user submits a Lead Ads form on Facebook or Instagram in response to an advertisement placed by one of our clients, Meta generates a lead record containing the information submitted by the user. Our Application connects to the Meta Lead Ads API, using credentials and permissions authorized by our client (the Page or Business Manager administrator), to automatically retrieve these lead records in accordance with Meta's technical specifications and rate limits.

Data retrieval occurs exclusively through Meta's official webhooks and API endpoints, using access tokens authorized by the Page administrator responsible for the advertising campaign. The Application does not access, scrape, or collect data from Facebook or Instagram through any means other than the officially sanctioned Lead Ads API and associated Meta developer tools.

Once retrieved, lead data is transmitted securely to our servers and subsequently synchronized with the CRM system designated by the respective client for lead management purposes.

​

4. Purpose of Data Use

Personal data collected through the Lead Ads API is used exclusively for the following purposes:

• Lead management: organizing, qualifying, and tracking leads generated through our clients' Facebook and Instagram advertising campaigns.

• Commercial contact: enabling our clients or their authorized representatives to contact leads regarding products or services in which the individual expressed interest.

• Authorized automations: triggering client-authorized workflows, such as automated welcome messages, internal notifications, or task assignments within the CRM, strictly in connection with the lead generated.

• CRM integration: consolidating lead data within the client's CRM environment to support sales and customer relationship processes.

We do not use personal data collected through the Lead Ads API for any purpose other than those described above, including advertising, profiling for unrelated purposes, or resale to third parties.

​

5. Sharing of Information

We do not sell, rent, or trade personal data collected through the Application to any third party.

Personal data is shared only to the extent necessary for the provision of our services, including with:

• Our clients: the businesses that own the Facebook or Instagram advertising campaigns and Lead Ads forms, who receive the leads generated by their own campaigns for legitimate commercial follow-up.

• CRM service providers: third-party CRM platforms designated by our clients, used solely to store and manage lead data on the client's behalf.

• Service providers and subprocessors: technology vendors that support the infrastructure of the Application (such as hosting and data processing providers), who are bound by confidentiality and data protection obligations and who process data solely on our instructions.

• Legal and regulatory authorities: where disclosure is required by law, regulation, legal process, or governmental request.

All data sharing is conducted in compliance with Meta's Platform Terms, Meta's Developer Policies, and applicable data protection legislation, including contractual safeguards with third parties who process personal data on our behalf.

​

6. Data Storage and Security

Personal data collected through the Lead Ads API is stored on secure servers using industry-standard technical and organizational security measures, including data encryption in transit and at rest, access controls, authentication protocols, and regular security monitoring.

Access to personal data is restricted to authorized personnel and systems that require such access to perform the purposes described in this Privacy Policy. We implement reasonable safeguards designed to protect personal data against unauthorized access, alteration, disclosure, or destruction.

Notwithstanding these measures, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security of personal data.

​

7. User Rights (LGPD and GDPR)

Depending on your jurisdiction, you may have the following rights regarding your personal data under the LGPD, the GDPR, or other applicable data protection laws:

• Right of access: to confirm whether we process your personal data and to obtain a copy of such data.

• Right of rectification: to request correction of inaccurate or incomplete personal data.

• Right of erasure: to request deletion of your personal data, subject to applicable legal or contractual retention requirements.

• Right to restrict or object to processing: to request that we limit or cease certain processing activities.

• Right to data portability: to request that your personal data be provided in a structured, commonly used format.

• Right to withdraw consent: where processing is based on consent, to withdraw such consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

• Right to information: to obtain clear and accessible information regarding the entities with which your data is shared and the criteria used for such sharing.

• Right to lodge a complaint: with the applicable supervisory authority, such as the Brazilian National Data Protection Authority (ANPD) or, for individuals in the European Union, the relevant national data protection authority.

To exercise any of these rights, please contact us using the information provided in Section 11 below.

​

8. How to Request Deletion of Your Data

Users who wish to request the deletion of their personal data collected through Lead Ads forms may do so by:

1. Sending a written request to sales@justledtechnology.com, including your full name and the phone number or email address used in the Lead Ads form submission, so that we may locate and verify your record; or

2. Contacting the business (client) whose advertisement generated the lead, who may also submit a deletion request to us on your behalf.

Upon receipt of a valid deletion request, we will verify the requester's identity and remove the corresponding personal data from our systems and, where applicable, instruct relevant CRM subprocessors to do the same, within the timeframe required by applicable law. We will confirm completion of the deletion request in writing.

Certain data may be retained where necessary to comply with a legal obligation, resolve disputes, or enforce our agreements, as permitted by applicable law.

​

9. Data Retention

We retain personal data collected through the Lead Ads API only for as long as necessary to fulfill the purposes described in this Privacy Policy, namely lead management and commercial contact, or as otherwise required by our contractual obligations to clients and by applicable law.

As a general rule, lead data is retained for the duration of the commercial relationship or active follow-up period, and for an additional period thereafter as reasonably necessary for legal, accounting, or dispute-resolution purposes, after which it is securely deleted or anonymized.

​

10. Cookies

The Application itself, as a backend integration tool connecting the Meta Lead Ads API to our clients' CRM systems, does not directly deploy cookies on end users' devices during the lead submission process, since lead capture occurs within Facebook's and Instagram's native Lead Ads forms.

However, if this Privacy Policy is published on a website that uses cookies or similar tracking technologies (for example, to analyze website traffic or improve user experience), such cookies will be described in a separate Cookie Notice or Cookie Policy made available on the website, and your consent will be requested where required by applicable law.

​

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technical requirements of the Meta Lead Ads API. Any changes will be posted on this page with a revised "Last Updated" date.

We encourage users to review this Privacy Policy periodically. Continued use of the Application or continued submission of data through Lead Ads forms after any changes constitutes acceptance of the revised Privacy Policy.

​

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us at:

JustLED Technology Email: sales@justledtechnology.com Website: https://www.justledusa.com/

This Privacy Policy has been drafted to comply with the data handling and disclosure requirements applicable to the use of Meta's Lead Generation API (Lead Ads), as well as the Meta Platform Terms, Meta Developer Policies, the Brazilian General Data Protection Law (LGPD), and the European Union General Data Protection Regulation (GDPR).