LeadSource is a messaging assistant that replies to booking inquiries on behalf of event performers. It is operated by Tal Yosef Zahavi, a sole proprietor based in Israel ("we", "us").
This policy explains what data LeadSource collects through the Meta platforms, why, how long we keep it, and how to have it deleted.
Two groups of people are involved:
LeadSource uses the Meta Graph API, the Instagram Platform API and the Messenger Platform. We request only the permissions listed below, and we use each one solely for the stated purpose.
| Permission | What we use it for |
|---|---|
instagram_business_basic | Identify the connected Instagram professional account (account ID and username) so replies are sent from the right account. |
instagram_business_manage_messages | Read incoming Instagram Direct messages and send replies to booking inquiries. |
pages_show_list | Let the performer choose which of their Facebook Pages to connect. |
pages_manage_metadata | Subscribe to message webhooks on the connected Page so we receive new inquiries. |
pages_messaging | Read incoming Messenger conversations and send replies. |
pages_read_engagement | Read the Page's basic profile so replies carry the correct business identity. |
business_management | Required dependency for the Page permissions above; used only to complete the connection. |
We do not request permissions to publish posts, run ads, read friend lists, or access any content unrelated to messaging.
We do not collect payment card details, government identifiers, precise location, or biometric data.
We do not sell personal data, share it with data brokers, or use it for advertising or profiling. We do not use message content to train third-party AI models on our own initiative; where an AI provider processes message text to compose a reply, it acts as our processor under contract and does not retain the content for its own training.
We use a small number of service providers strictly as processors: cloud hosting, database storage, and an AI language-model provider used to compose replies. Each is bound by contract to process data only on our instructions. We do not transfer personal data to any other third party except where required by law.
You may request access to, correction of, or deletion of your personal data at any time. Performers can also disconnect LeadSource at any moment from Meta's own settings, which immediately revokes our access.
Email tal.zahavi2@gmail.com with the subject line "Delete my data", from the address associated with your account, or state the Instagram username / Facebook Page involved.
We confirm receipt within 5 business days and complete deletion within 30 days.
Step-by-step instructions: Data Deletion Instructions.
LeadSource is not directed at children under 13, and we do not knowingly collect their data. If we learn that we have, we delete it.
Data is transmitted over TLS and stored encrypted at rest. Access tokens are stored encrypted and are never exposed to other users of the service. Access to production data is limited to the operator.
If we change this policy we will update the date at the top of this page. Material changes affecting connected accounts will be communicated by email.