// LEGAL
Privacy policy.
01 Who we are
Media Leadmon S.A. de C.V. ("Media Leadmon," "we," "us," or "our") is a digital marketing agency based in Mexico. We operate the Media Leadmon Platform — a software application that enables our clients and their teams to manage digital advertising campaigns, access unified performance reports, approve creative assets, and administer business accounts across multiple advertising channels, including Meta (Facebook and Instagram).
This Privacy Policy applies to all Platform users: agency staff, client contacts, and any person who authenticates via Facebook Login.
02 Data we collect
2.1 Data you provide directly
- Name, email address, and job title (account registration)
- Company name and billing information
- Creative assets and campaign briefs uploaded to the Platform
- Communications and approvals submitted through the Platform
2.2 Data collected automatically
- IP address, browser type, and device identifiers
- Pages viewed and features used within the Platform
- Session timestamps and authentication events
2.3 Data from third-party integrations
When you connect your Meta Business account, Facebook Pages, or Ad Accounts to the Platform, we collect data as described in Section 3. We may also receive data from other authorized integrations (e.g., Google Analytics, DV360, Campaign Manager).
03 Facebook & Instagram data
Important: Media Leadmon accesses Meta platform data exclusively on behalf of our clients and solely to deliver the advertising management services described below. This data is never sold, never used for our own advertising, and never shared with unrelated third parties.
When a user authenticates via Facebook Login or connects a Meta Business account, we request and process the following data through Meta's Graph API:
| Permission | Data Accessed | Purpose | Stored? |
|---|---|---|---|
public_profile | Name, profile picture, user ID | Authenticate and personalize the Platform session | User ID + name only |
ads_management | Campaigns, ad sets, ads, budgets, bids, creatives | Create, edit, pause, and optimize client ad campaigns | Campaign IDs & config |
ads_read | Impressions, clicks, reach, spend, conversions, ROAS | Generate unified performance reports and optimization recommendations | Aggregated metrics (90 days) |
business_management | Business Manager structure, user roles, system users | Onboard clients, assign team access, manage business portfolios | BM structure only |
pages_manage_ads | Page-connected ad creation and management | Create boosted posts and Page-identity ads for clients | No |
pages_read_engagement | Page posts, engagement metrics, follower count | Include organic Page performance in client dashboards alongside paid data | Aggregated insights (90 days) |
pages_show_list | List of Pages administered by the user | Display available Pages during client onboarding for selection | No |
Business Asset User Profile Access | Name, email, and role of Business Manager users | Display team information in agency dashboard; enforce access controls | Name + role only |
3.1 Data use restrictions
All Meta platform data is used exclusively to provide the following services to the client who owns the corresponding assets:
- Campaign management — creating, modifying, and monitoring advertising campaigns on the client's behalf
- Performance reporting — generating unified dashboards combining paid and organic metrics for the client
- Creative workflow — facilitating review and digital approval of ad creatives before publication
- Campaign optimization — analyzing data to deliver actionable recommendations to the client
- Business Manager administration — setting up and maintaining client Business Manager accounts and user permissions
Meta platform data is never used to: build user profiles unrelated to campaign management, target users with our own advertising, train machine learning models for external use, or any purpose beyond what is described in this Policy.
3.2 Data deletion
If you disconnect your Meta account or request deletion, all Meta-derived data associated with your account will be deleted within 30 days. Deletion requests submitted through Facebook's Data Deletion Callback are honored automatically.
04 How we use your data
- Provide, operate, and improve the Platform and its features
- Execute digital advertising campaign management services on behalf of clients
- Generate performance reports and campaign analytics
- Manage creative approval workflows (including DocuSign digital signatures)
- Send service communications: account alerts, report notifications, approval requests
- Maintain security, detect fraud, and enforce our Terms of Service
- Comply with applicable legal obligations
We do not sell your personal data. We do not use your personal data for our own advertising purposes.
06 Data retention
| Data Type | Retention Period |
|---|---|
| Account information (name, email) | Duration of client relationship + 3 years |
| Meta ad performance metrics | 90 days from collection (rolling) |
| Campaign configuration and IDs | Duration of campaign activity + 12 months |
| Creative assets and approvals | Duration of client relationship |
| Usage and access logs | 12 months |
| Financial and billing records | 5 years (Mexican tax law) |
Upon termination of the client relationship or upon request, personal data is deleted within 30 days, except where retention is legally required.
07 Security
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- Role-based access controls — team members access only data relevant to their assigned clients
- OAuth 2.0 for all Meta API authentication — Facebook passwords are never stored
- Audit logs of all actions performed on client data
- Regular security assessments
In the event of a data breach, affected individuals and relevant authorities will be notified as required by applicable law.
08 Your rights
Access
Request a copy of the data we hold about you
Rectification
Correct inaccurate or incomplete data
Erasure
Request deletion of your personal data
Objection
Object to specific processing
Portability
Receive your data in a machine-readable format
Restriction
Request restriction of processing
To exercise any right, contact us at privacy@medialeadmon.com. We respond within 20 business days as required by the Mexican LFPDPPP.
09 Cookies
- Session cookies: Maintain your authenticated session (essential; cannot be disabled)
- Preference cookies: Remember language and display preferences
- Analytics cookies: Understand Platform usage to improve it (can be disabled in settings)
We do not use cookies to track users across third-party websites or to serve behavioral advertising.
10 Children's privacy
The Platform is intended for business use only and is not directed at individuals under 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
11 Changes to this policy
We may update this Privacy Policy periodically. When material changes are made, registered users will be notified by email and the "Last updated" date will be revised. Continued use of the Platform after changes are posted constitutes acceptance.
12 Contact us
For questions, to exercise your rights, or to report a privacy concern:
Privacy officer — Media Leadmon
- operaciones@medialeadmon.com
- www.medialeadmon.com
- Media Leadmon S.A. de C.V.
- Mexico
Response time: within 20 business days — LFPDPPP Art. 24