Privacy Policy

The Lead Machine is operated by VanMeter Ventures (“we,” “us,” or “our”). Our website is located at leads.presoldout.com. For privacy-related questions, you can reach us at mason@ml.masonvanmeter.com.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use The Lead Machine platform. By accessing or using our service, you agree to the practices described in this policy.

2.1 Account and Onboarding Data

When you create an account and complete our onboarding wizard, we collect:

• Full name and email address
• Phone number (optional)
• Insurance product vertical (e.g., Mortgage Protection, Final Expense)
• Ideal client profile data — demographics, geography, income range, and interests you describe
• Daily advertising budget you intend to spend
• Offer differentiators and client success stories you provide
• Campaign structure preferences and settings

This information is used solely to generate your personalized AI-driven campaign materials and is stored in your account.

2.2 Meta Ad Account Data (OAuth)

If you choose to connect your Meta (Facebook) ad account, we access the following data via Meta's OAuth 2.0 authorization flow:

• Your Meta ad account ID(s) and account name(s)
• Ad account currency and status
• Campaign performance data — spend, impressions, clicks, and lead counts at the ad level
• Your Meta access token, which is stored encrypted in our database

We do not access your personal Facebook profile, friends, posts, messages, or any data outside of your Business Manager and ad account. The permissions we request are limited to ads_management, ads_read, business_management, and pages_read_engagement.

Your Meta access token is stored server-side only and is never exposed to your browser or any third party. All Meta API calls are made server-to-server.

2.3 Payment Information

We process payments through Stripe and may also accept payments via PayPal. We do not store your credit card numbers, bank account details, or full payment credentials on our servers.

Stripe and PayPal are PCI-DSS compliant payment processors. When you complete a purchase, your payment information is transmitted directly to and stored by those processors under their respective privacy policies:

• Stripe Privacy Policy: stripe.com/privacy
• PayPal Privacy Policy: paypal.com/us/legalhub/privacy-full

We do receive and store your billing name, email address, and the last four digits of your payment method for your records and our accounting purposes.

2.4 Usage and Technical Data

We automatically collect certain technical data when you use our service, including:

• IP address and approximate geographic location
• Browser type, version, and device type
• Pages visited, time spent, and actions taken within the platform
• Error logs and performance diagnostics

This data is used to maintain service quality, debug issues, and improve the platform. It is not used for advertising targeting.

We use the information we collect to:

• Create and maintain your account
• Generate AI-powered ad campaigns, copy, and campaign structures specific to your market
• Display your live ad performance data on your dashboard
• Push campaign configurations to your connected Meta ad account at your direction
• Send transactional emails — account creation, purchase receipts, campaign status
• Provide customer support when you contact us
• Comply with legal obligations and enforce our Terms of Service

We do not use your data to train AI models for third-party use, build advertising profiles, or make automated decisions that produce legal or similarly significant effects on you.

VanMeter Ventures does not sell, rent, trade, or otherwise transfer your personal information to third parties for their marketing or advertising purposes — ever.

We share your data only in the following limited circumstances:

• Service providers: We share data with Supabase (database hosting), Stripe and PayPal (payment processing), Anthropic (AI generation — only the campaign inputs you provide, no personal identifiers), and Vercel (hosting infrastructure). Each provider is contractually bound to use your data only to provide services to us.
• Legal requirements: We may disclose your information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of VanMeter Ventures, our users, or others.
• Business transfer: If VanMeter Ventures is acquired or merges with another entity, your information may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.

Your data is stored in Supabase, hosted on AWS infrastructure in the US East (N. Virginia) region. We implement the following security measures:

• All data in transit is encrypted via TLS 1.2+
• All data at rest is encrypted using AES-256
• Meta access tokens are stored encrypted using pgcrypto
• Row-level security policies restrict database access to each user's own data
• Authentication is handled via Supabase Auth with bcrypt password hashing
• Access to production infrastructure is limited to authorized personnel only

While we take security seriously, no method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at mason@ml.masonvanmeter.com.

We retain your account data for as long as your account remains active. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal or accounting purposes (typically up to 7 years for financial records).

Campaign performance data pulled from Meta is retained in your account for dashboard display purposes. This data is also available directly in your Meta Ads Manager account.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Delete your personal data (“right to be forgotten”)
• Export your data in a portable format
• Disconnect your Meta ad account at any time
• Opt out of non-transactional emails

To request data deletion: Email mason@ml.masonvanmeter.com with the subject line “Data Deletion Request” and the email address associated with your account. We will confirm receipt within 5 business days and complete the deletion within 30 days.

You may also disconnect your Meta account at any time by contacting us. Disconnecting removes our access token and stops all Meta API calls from our platform.

We use cookies and similar technologies for the following purposes:

• Authentication: Session cookies to keep you logged in
• Security: CSRF protection tokens
• Preferences: Remembering your settings

We do not use third-party advertising cookies or tracking pixels. We do not participate in cross-site tracking or behavioral advertising networks.

The Lead Machine is intended for use by adult business professionals. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected information from a minor, we will delete it promptly.

If you are a California resident, you have the right to request disclosure of the categories of personal information we have collected about you, the purposes for collection, and any third parties with whom we have shared it in the past 12 months. As stated in Section 4, we do not sell personal information.

To exercise your CCPA rights, contact us at mason@ml.masonvanmeter.com. We will respond within 45 days.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the effective date at the top of this page. Continued use of The Lead Machine after changes take effect constitutes acceptance of the revised policy.

For any questions, concerns, or requests related to this Privacy Policy: