Privacy Policy

Covering LEP Digital’s use of the Meta Marketing API through our reporting and campaign‑management platform, Interval.

Last updated 14 September 2026
 

01. Who we are

LEP Digital Pty Ltd (ABN 66 632 431 862) is an Australian digital marketing agency. We manage advertising campaigns and reporting on behalf of our clients across platforms including Meta (Facebook and Instagram), Google Ads, Google Analytics and Google Search Console.

This policy explains how we collect, use, store and protect data accessed through our integration with Meta’s Marketing API — the connection our internal platform, Interval, uses to pull reporting data from and, where authorised, create draft ads within our clients’ Meta advertising accounts.

02. Scope of this policy

This document covers data obtained specifically through Meta Platforms, Inc.’s Marketing API. It does not cover other personal information LEP Digital may hold in the ordinary course of business — for example, about website visitors or job applicants. If you have a question about those, contact us at the address below.

03. What we access, and why

We only ever access a Meta advertising account after its owner has explicitly granted our system user account admin access to it in Meta Business Manager, scoped to these permissions:

ads_read ads_management

Within an authorised account, we read and (only where a task is explicitly confirmed by an authorised LEP Digital staff member) write the following:

CategoryWhat it covers
account_structureAd account, campaign, ad set and ad identifiers, names and status
creative_contentHeadlines, body text, descriptions, destination links, images, video files and carousel card content
performance_metricsImpressions, clicks, spend, reach, conversions and related aggregate performance figures
targeting_configAudience, budget, schedule and bidding settings attached to a campaign or ad set

We do not access personal information about the people an ad is shown to. We don’t use Meta Pixel, Conversions API, or any consumer-facing Meta surface — our integration is limited to the advertiser-side Marketing API, for our own agency use and our clients’ authorised accounts only.

04. How we use it

Performance data is used to build the reporting dashboards each client views through their own private, token-secured link. Creative and structural data is used, on explicit instruction, to duplicate an existing campaign, ad set or ad as a starting point for a new one.

Nothing we create through this integration ever goes live automatically. Every object our platform creates in a Meta account is set to Paused at creation, without exception. A person — at LEP Digital or the client — always reviews and activates it manually inside Meta Ads Manager.
 

05. Storage and security

Data drawn from Meta is stored in a hosted PostgreSQL database, encrypted in transit (TLS) and at rest. Access to that database is restricted to named, authorised LEP Digital staff accounts.

The Meta system-user access token that authenticates our integration is held as an encrypted environment secret on our hosting infrastructure. It is never exposed to clients, stored in application code, or made accessible outside our engineering environment.

 

06. Sharing and disclosure

We do not sell data obtained through this integration, and we do not share it with unrelated third parties. It is only ever accessible to:

  • Authorised LEP Digital staff, for the purpose of managing and reporting on the relevant account
  • The client the data belongs to, through their own private Interval report link
  • Infrastructure providers who host our platform under standard data-processing terms, solely to operate the service
  • Where required by Australian law or a valid legal process
 

07. Retention

We retain data accessed through this integration for the duration of our engagement with the relevant client, and for a reasonable period afterwards for record-keeping and account-history purposes. Where a client relationship ends, we securely delete or de-identify the associated data unless we are required by law to retain it for longer.

 

08. Your rights

LEP Digital handles personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You may request access to, or correction of, personal information we hold, or raise a concern about how it has been handled, by contacting us at hello@lep.digital.

If you believe a concern hasn’t been resolved satisfactorily, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

09. Children’s data

This integration is a business tool for managing advertising accounts and is not directed at children. We do not knowingly collect data relating to children through it.

10. Changes to this policy

We’ll update the date at the top of this page whenever our use of the Meta integration changes in a way that affects what’s described here. Please check back periodically if you’d like to stay informed.