Your leads are your business
A client list is one of the most valuable things an agency owns. Here is exactly how we keep yours separate, protected, and yours to take back at any time.
Tenant isolation in the database
Every table carrying agency data is protected by PostgreSQL row-level security. A query can only ever return rows belonging to your organisation — the isolation is enforced by the database, not by application code remembering to add a filter.
Role-based access
Owners and Managers see the whole agency. Agents see only the leads assigned to them. These roles are enforced in the same row-level policies, so an agent cannot reach another agent's leads by changing a URL or calling the API directly.
Encrypted in transit and at rest
All traffic runs over HTTPS with modern TLS, and the managed Postgres database encrypts data at rest. Passwords are hashed by Supabase Auth — we never see or store them in readable form.
Secrets stay on the server
Privileged credentials — the database service-role key and Meta app secret — exist only in server-side environment variables. They are never bundled into the browser and never exposed to a client request.
Facebook & Instagram data
Connecting a Page is optional, and the access it grants is deliberately narrow.
- We request only the permissions needed for the features you turn on, and you approve them in Facebook's own login dialog.
- We store a long-lived access token and the list of Pages you manage — nothing more from your Facebook account.
- Tokens are held server-side and used solely to publish content and retrieve leads on your behalf.
- Our handling follows the Meta Platform Terms and Developer Policies, including the Limited Use requirements.
- Disconnecting in Settings → Integrations immediately deletes the token we hold for your Page.
Full detail lives in our Privacy Policy.
You stay in control
- Your data is yours. We do not sell personal information, and we do not use your lead data for any purpose other than running the service for you.
- Export whenever you want. The dashboard exports your leads to CSV — no support ticket, no waiting.
- Deletion within 30 days. Request removal and we delete your personal data within 30 days, except where the law requires us to keep something.
- Revoke access instantly. Disconnecting Facebook or deactivating a team member takes effect immediately.
Sub-processors
A deliberately short list of providers who help us run the platform. Each is bound by its own data-protection terms.
Supabase
Managed Postgres database, authentication, and file storage
Vercel
Application hosting and content delivery
Meta Platforms
Publishing to and receiving leads from Pages you choose to connect
We'll update this page before adding a sub-processor that handles customer data.
Where we are, honestly
We think a security page is worth less than nothing if it overstates things. So to be clear: The Land Lead is a small, independent product. We do not currently hold SOC 2, ISO 27001, or any similar certification, and we have not commissioned a third-party penetration test. What we do have is a deliberately simple architecture, tenant isolation enforced at the database layer, and managed infrastructure from providers who do carry those certifications.
If your agency has a procurement checklist or a specific security requirement, send it over — we'll tell you plainly what we meet and what we don't.
Reporting a vulnerability
Found something? Please tell us before telling anyone else. Email security@thelandlead.com with the steps to reproduce it. We aim to acknowledge reports within two business days and will keep you posted until it's fixed. We won't pursue action against researchers who report in good faith and avoid accessing other customers' data.
General questions about security or privacy? support@thelandlead.com or use the contact form.