Privacy Policy

Last updated: 21 October 2026

This policy explains which data the LeadLine Meta Ads application (“Application”, LeadLine), provided by CBN Teknoloji Anonim Şirketi (“CBN Tech”, “we”), processes and for what purpose. The Application delivers leads from businesses' Facebook and Instagram lead forms to their Bitrix24 portals, reports ad spend together with the sales in Bitrix24 and, if the business chooses, reports sales results back to Meta.

1. Data we process

• Portal data: Bitrix24 portal address and ID; the Bitrix24 user ID, name and assigned roles of the people who install and use the Application.
• Access data: Bitrix24 OAuth access and refresh tokens, Meta (Facebook) Page and user access tokens, the Conversions API key. These are stored encrypted. Your Facebook and Bitrix24 passwords never reach us; you sign in on their own platforms.
• Lead data: what the person filling in the lead form enters (full name, phone, e-mail and the other answers in the form) and consent checkbox choices; the Page, form, campaign, ad set, ad, platform and time; the delivery status and the ID of the Bitrix24 record created.
• Ad data: daily spend, impression and click totals of the connected ad accounts. No personal data.
• Read from Bitrix24 for the reports: stage, amount, currency, responsible user, source, dates and linked contact of deals; name, phone, e-mail, source and creation date of contacts (for duplicate detection and the contact report); type, direction, responsible user and time of activities (the content of activities is not read); user and department names. Only data within the Bitrix24 permissions granted by the business is read.
• Licence and contact: licence and payment requests (e-mail, phone), invoicing details, support requests, the contact form on our website (name, company, phone, e-mail, Bitrix24 address, message).

2. Purposes

We process data only to deliver leads to Bitrix24, find duplicate records and merge them at the business's request, prepare reports, report sales results to Meta if the business turns this on, monitor connections and send alerts, handle licensing and invoicing, and answer support requests. We do not use data for advertising or profiling and we do not sell it to third parties.

3. Retention

• Personal lead data (name, phone, e-mail, form answers) is kept for at most 90 days and then deleted automatically. The Bitrix24 records they were delivered to remain in your portal. Campaign, status and outcome data of leads is kept for the reports as long as the Application is installed.
• Data read from Bitrix24 for the reports is kept as long as the Application is installed and is synchronised with Bitrix24 regularly.
• Database backups are encrypted and deleted automatically within 12 months at the latest.
• When the Application is uninstalled from Bitrix24, access tokens are deleted immediately; if “Clear application data” is selected during uninstallation, all records of the portal (leads, forms, rules, reports) are deleted.

4. Where data goes

Data is stored on our servers in Turkey. As required for the Application to work, leads are read from Meta and written to the business's Bitrix24 portal; the privacy policies of those services apply.

If the business turns on “Sales feedback”, won deals are sent to the Meta Conversions API together with a one-way hash (SHA-256) of the person's phone and e-mail; the plain values are not sent. As Meta Platforms, Inc. is located outside Turkey, this transfer happens only when the business enables the feature; when it is off, no transfer takes place. Apart from this, data is not transferred abroad.

5. Security

Connections are encrypted with HTTPS; access tokens are stored encrypted with AES-256-GCM. Access to servers and to the management panel is limited to authorised staff; in the panel each user sees only the screens they are allowed to. No access tokens, passwords or personal data are written to application logs. The website and the panel use only a session cookie; no tracking or advertising cookies are used.

6. Controller and processor

For leads and data read from Bitrix24, the business using the Application is the controller and CBN Tech is the processor acting on its behalf. For licence, payment, support and contact form data, CBN Teknoloji Anonim Şirketi is the controller.

7. Your rights

Depending on where you live, you have the right to access, rectify and erase your data, to restrict or object to processing, to data portability and to lodge a complaint with a supervisory authority (GDPR Articles 15–22 and 77; Turkish Personal Data Protection Law No. 6698, Article 11). If you filled in a lead form, you can send your request to the business that owns the form or write to us; we will forward it to that business and help resolve it. Deletion options are on the Data Deletion page. Requests: info@cbntech.com.tr

8. Contact

CBN Teknoloji Anonim Şirketi · Bulgurlu Mahallesi, Alemdağ Caddesi No: 110/19, Üsküdar / Istanbul, Turkey · Tax no 2030929127 (Ümraniye tax office) · info@cbntech.com.tr

Support is available every day 09:00–23:00 (Turkey time, GMT+3); requests are answered within 1 hour. Contact: WhatsApp +90 507 696 54 86 · info@cbntech.com.tr