Privacy Policy

Last updated: August 31, 2026

Introduction

GrowLead CRM (“GrowLead”, “we”, “us”) is a customer relationship management platform used by businesses to manage campaigns, leads, pipeline activity, and connected advertising accounts. This Privacy Policy explains what information we collect, how we use it, and the choices available to you.

By creating an account or using the service, you agree to this policy. If you do not agree, do not use GrowLead CRM.

Information We Collect

We collect information that you or your organization provide, and information created while you use the product:

• Account information — name, email address, password, phone number (if added), organization name, industry, timezone, and currency.
• Workspace data — campaigns, leads, notes, activities, tasks, opportunities, tags, custom fields, team membership, and similar CRM records your organization stores in the product.
• Lead form submissions — name, email, phone number, and other fields submitted through online forms or Meta Lead Ads.
• Usage and technical data — login sessions, last-active timestamps, and server logs needed to operate and secure the service.

Facebook/Meta Information

If an authorized user connects Meta Ads, GrowLead CRM receives only the data Meta returns for permissions the user approves. Depending on that authorization, this may include:

• the Facebook user’s name and user ID;
• a Meta access token, stored encrypted, so the connection can stay active and sync;
• Business Managers, ad accounts, and related names, IDs, currency, and status;
• ad campaign names, status, budgets, dates, and performance insights;
• Facebook Pages associated with selected businesses, used to locate Lead Ads forms;
• Lead Ads form names and lead submissions (field data such as name, email, and phone).

We process Meta/Facebook API data only to provide CRM functionality: connecting ad accounts, importing campaigns, importing leads, matching those leads to campaigns, and related lead-management in the workspace. We do not use Meta APIs to send Facebook messages, publish posts, or run ads on your behalf.

How We Use Information

We use information to:

• create and operate organization workspaces and user accounts;
• respond to inquiries and help teams contact prospective customers;
• import and display campaigns and leads from connected Meta accounts;
• assign, score, route, and report on leads inside the CRM;
• maintain security, debug connection issues, and improve the service;
• comply with law and enforce our Terms of Service.

Facebook Pages and Connected Accounts

After a user connects Meta, they choose which Business Managers (and personal ad accounts, if listed) GrowLead CRM should sync. We list Pages tied to those businesses only so we can retrieve Lead Ads forms and import leads. Page names and IDs may be stored with imported lead records. Disconnecting Meta stops further Page and ad-account access.

Messages and CRM Data

Notes, activities, tasks, and other CRM records that users enter are stored in the organization’s workspace. GrowLead CRM does not read or send Facebook Messenger conversations. Other channels shown in Integrations (for example WhatsApp) are optional connections configured by the organization and are used only if that organization supplies its own credentials.

Data Storage

Information is stored in our application database and related server storage used to run GrowLead CRM. Meta access tokens and similar integration secrets are encrypted at rest in the application. Hosting may be provided by the organization that operates this deployment (for example on the domain where you access the CRM).

Data Sharing

We do not sell personal information. Information may be shared only:

• with members of your organization according to their CRM roles and permissions;
• with infrastructure and email providers needed to host and operate the service;
• with Meta, when you choose to connect an account, as part of Facebook Login and the Graph API;
• when required by law, or to protect the rights, safety, or security of users and the service.

Data Security

We use reasonable administrative and technical measures, including encrypted storage of integration credentials, authenticated sessions, and role-based access inside the CRM. No method of transmission or storage is completely secure. Please use a strong password and grant Meta access only to users who should manage advertising integrations.

Data Retention

We retain account, campaign, and lead records for as long as the organization keeps using the workspace, or until a valid deletion request is processed, unless a longer period is required for legal, security, or dispute-resolution reasons. Meta connection data is kept while the integration remains connected and is cleared from the integration record when Meta Ads is disconnected.

User Rights

Depending on applicable law, you may request access, correction, or deletion of personal information we hold about you. Organization administrators can update many workspace records directly in the CRM. For Meta-connected data and account-level requests, follow the User Data Deletion Instructions or email us at developer@5as-pk.com.

Data Deletion

You may request deletion of your personal information by following our User Data Deletion Instructions or by contacting us at: developer@5as-pk.com.

Third-Party Services

Meta/Facebook is a third-party platform. Their collection and use of data is governed by Meta’s own policies. Optional integrations (such as other ad platforms or messaging tools) are similarly governed by those providers. We are not responsible for third-party practices.

Changes to This Privacy Policy

We may update this policy from time to time. The “Last updated” date at the top of this page will change when we do. Continued use of GrowLead CRM after an update constitutes acceptance of the revised policy.

Contact Us

For privacy-related questions, contact us at: developer@5as-pk.com