Privacy policy

Last updated: 28 September 2026

This policy explains how Sales Leads Consulting and Marketing ("Sales Leads", "we", "us") handles personal data when you visit our website or use Sales Leads Crew (the "Platform"), our AI-assisted digital marketing service.

Who we are: Sales Leads Consulting and Marketing, a company registered in the Hashemite Kingdom of Jordan, registration number 200163766, Al-Madina Al-Munawarah St., 200, Amman 11185, Jordan.
Privacy contact: privacy@salesleads-mena.com, +962 79 700 2961.

1. What the Platform does, in short

Businesses subscribe to the Platform to plan and run their digital marketing. A team of AI agents drafts social posts, ads, creative and website changes, checks them against platform rules, and prepares campaign proposals. Nothing is published, changed or spent on a live advertising account or website without approval from a person at the client business, either for each item or under a written standing approval the client signs, with limits they set and can revoke at any time.

2. Our role

  • For the people who use the Platform on behalf of a client business (account users) and for visitors to our website, we are the controller of their personal data.
  • For data that belongs to a client business, such as its ad accounts, website, analytics and any information about its own customers, we act on the client's behalf and on its instructions (as a processor or service provider). The client business is responsible for having a lawful basis to share that data with us. If you are a customer of one of our clients, please contact that business first; we will help them respond.

3. What we collect

Account users

  • Name, business email address, job role, preferred language.
  • Phone number, only if you choose WhatsApp notifications.
  • Sign-in and security data: sign-in records, two-factor authentication status, the workspace you are working in.
  • Your actions in the Platform, including approvals, rejections and budget releases, with the time and your identity. These records exist so that every live change can be traced to the person who authorised it.

Client business information

  • The brief: products, brand names, markets, languages, business category, brand voice, budgets, and the documents and report exports you upload.
  • Content we produce for you: copy, images, video, voice-over, website changes and campaign proposals, each with a record of how it was generated and who approved it.

Data from accounts you connect

When you connect an account, you grant the Platform access through that platform's own authorisation screen. You can see and withdraw that access at any time (see our Data Deletion Instructions). Depending on what you connect:

  • Google Ads: account structure, campaigns, ad groups, ads, keywords, budgets, bids, conversion settings and performance reports.
  • Google Analytics 4 and Google Tag Manager: property and container configuration, event definitions and aggregated reports.
  • Google Search Console: search performance data for your verified sites.
  • Meta (Facebook and Instagram): ad accounts, campaigns, ad sets, ads, audience names, Pages and performance insights.
  • TikTok and Snapchat: ad accounts, campaigns, ads and performance reports.
  • WordPress: the site content we are asked to change, through a site-specific application password you create and can revoke.

We request only the access needed for the features you use.

Tracking we configure for you

If you use our measurement features, we configure tags on your website or app that send events to advertising and analytics platforms. Only events and parameters on a list you review and approve are sent. Data in the sensitive categories that apply to your business, for example health data for a fitness business, is removed before anything reaches an advertising platform. Your business remains the controller of your visitors' data.

Competitor research

Our competitor analysis uses publicly available advertising and search information and observations recorded by our analysts. It is about businesses, not individuals, and we do not use it to profile people.

Technical data

IP address, browser and device information, and error and security logs, used to keep the Platform working and secure.

4. How we use personal data, and why

Purpose Legal basis
Provide the Platform: prepare, check and, once approved, carry out marketing work Performance of our contract with the client business
Send notifications (email, and WhatsApp if you opt in) Contract; consent for WhatsApp
Keep a record of who approved what Contract and our legal obligations; our legitimate interest in accountability
Security, fraud prevention and abuse detection Legitimate interest; legal obligation
Usage and cost accounting for billing Contract
Comply with law and respond to lawful requests Legal obligation

We do not:

  • sell personal data;
  • use data from your connected accounts for any purpose other than providing the Platform to you;
  • use your data, or data from your connected accounts, to train AI models;
  • use data from one client to serve another client.

5. AI processing

The Platform's agents use large language models to draft and review work. We send the minimum needed for each task, such as your brief and the relevant campaign data, to our AI provider, Anthropic (Claude API, processed in the United States).

  • Under Anthropic's commercial terms, content sent through its API is not used to train its models. It may be retained for a limited period for safety and abuse monitoring, as set out in those terms.
  • Every AI output is automatically checked, and a person approves anything that goes live.
  • No decision with legal or similarly significant effects on an individual is made by the Platform solely by automated means.

Video and voice-over are generated through commercial providers selected for their licensing terms: Google Cloud Vertex AI and Runway (video), ElevenLabs (voice-over). Before delivery, generated creative is screened for trademarks, logos and likeness. Face detection is used only for that screen: we keep the result of the check, not any biometric template.

6. Google user data (Google API Services)

This section applies to data we receive through Google APIs, including Google Ads, Google Analytics, Google Tag Manager and Google Search Console.

  • What we access: only the data described in section 3, from the accounts you authorise.
  • How we use it: only to provide and improve the user-facing features of the Platform that you use: planning, proposing, checking and, with your approval, making changes to your own campaigns, tags and reports.
  • How we store it: encrypted, in the Platform's database, isolated to your workspace. Authorisation tokens are held in a separate secrets vault, never in the database.
  • Who we share it with: we do not transfer it to third parties, except:
    • as needed to provide those features (for example, sending a campaign summary to our AI provider to draft a proposal for you);
    • for security;
    • to comply with law;
    • as part of a merger or acquisition, with your prior consent.
    We never transfer or sell it to advertising platforms or data brokers, and never use it to serve advertising, including retargeting.
  • Human access: our staff do not read it unless:
    • you ask us to, for example for support;
    • it is necessary for security or to comply with law;
    • it is aggregated and anonymised for internal operations.
  • AI: it is not used to develop, improve or train generalised AI or machine-learning models.

Sales Leads Crew's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke our access at any time at myaccount.google.com/connections.

7. Meta platform data

Data we receive from Meta (Facebook, Instagram, WhatsApp) is used only to provide the Platform to the business that connected it, in line with the Meta Platform Terms. We do not sell it, use it to build profiles of individuals, or share it with other clients. To have it deleted, see our Data Deletion Instructions.

8. Who we share data with

We share data only with service providers that process it for us under written terms, and only as needed.

Provider Purpose Location
Supabase Database and sign-in EU (Frankfurt)
Amazon Web Services Notification email (Amazon SES) EU (Frankfurt)
Meta (WhatsApp Cloud API) WhatsApp notifications, if you opt in Global
Anthropic AI drafting and review United States
Google Cloud Video generation (Vertex AI); image screening (Cloud Vision) United States
Runway Video generation United States
ElevenLabs Voice-over generation United States

When you approve an action, the relevant data is sent to the advertising or website platform concerned (Google, Meta, TikTok, Snapchat or your WordPress site). That data is then also governed by that platform's own terms.

We may also disclose data to professional advisers, to a buyer in a business transfer (with the protections above), or where the law requires it.

9. International transfers

We are based in Jordan and serve clients in Jordan, the Gulf and elsewhere. Our providers process data in the locations listed above, so your data may be transferred outside your country. We transfer it only where the applicable law allows, for example:

  • with your consent where required;
  • to countries with adequate protection;
  • under contractual safeguards.

10. How long we keep data

  • Connected-account access: authorisation tokens are deleted as soon as you disconnect an account or your subscription ends.
  • Workspace data (briefs, uploads, drafts, content): kept while your subscription is active and deleted within 30 days after it ends, unless you ask for an export first.
  • Approval and audit records (who approved, rejected or released what, and when): kept for 5 years because they show who authorised each change to a live account. Where the law allows, we remove or anonymise the personal identifiers in them once they are no longer needed.
  • Backups: deleted records leave our backups within 30 days.
  • Security logs: 90 days.

11. Security

  • Each client's data is isolated from every other client's, enforced by the database itself.
  • Data is encrypted in transit and at rest.
  • Credentials for connected accounts are held in a secrets vault, not in the database.
  • Only one separately secured component can make changes to live accounts, and only after checking that a valid, matching approval exists.
  • Releasing ad spend requires two-factor authentication.
  • All approvals are recorded in a log that cannot be edited.

No system is perfectly secure. We will notify you and the relevant authorities of a personal data breach as the law requires.

12. Your rights

Subject to the law that applies to you, you can ask us to:

  • give you access to your personal data;
  • correct it;
  • delete it;
  • restrict or object to its processing;
  • withdraw consent;
  • give you a copy in a portable format.

Contact privacy@salesleads-mena.com. We will reply within 30 days. We may need to verify your identity first. To disconnect accounts or have your data deleted, see our Data Deletion Instructions.

If you are not satisfied, you may complain to your data protection authority, for example:

  • Jordan: the Personal Data Protection Council established under Law No. 24 of 2023;
  • Saudi Arabia: the Saudi Data & AI Authority (SDAIA);
  • the UAE: the UAE Data Office.

13. Our website and cookies

The Platform uses only the browser storage needed to keep you signed in and remember your selected workspace and language. It uses no advertising cookies. Our public website, salesleads-mena.com, runs on Shopify, which sets cookies needed to run the site and to measure visits, as described in Shopify's cookie policy. You can block or delete cookies in your browser settings.

14. Children

The Platform is a business service. It is not directed at anyone under 18, and we do not knowingly collect their data.

15. Changes

We will post any change here and update the date above. If a change materially affects how we use your data, we will tell account users by email before it takes effect.

16. Contact

Sales Leads Consulting and Marketing, Al-Madina Al-Munawarah St., 200, Amman 11185, Jordan
privacy@salesleads-mena.com · +962 79 700 2961