Privacy Policy

BAD ERP · Operator: TIRKASHOV OG'ABEK · Last updated: 2026-10-06

BAD ERP is a CRM / ERP system operated by TIRKASHOV OG'ABEK. Businesses use it to receive leads from their Facebook and Instagram lead ads (Instant Forms) directly into their sales pipeline. This policy explains which data the BAD ERP Facebook integration processes and why.

Data we receive from Meta

• Facebook account of the person who connects the integration: user ID, name and profile picture, and the list of permissions granted — to show who connected the integration.
• Facebook Pages the person manages: Page ID, name, picture, linked Instagram username and Page access tokens — to list Pages and lead forms and to subscribe the Page to lead notifications.
• Lead form submissions (leads) of the selected Pages/forms: the answers the lead entered (for example name, phone number, email, city and custom questions) and ad context (campaign, ad set and ad names, form ID, platform).

How we use it

Only to provide the service the business configured: lead submissions are created as contacts and deals in that business's own BAD ERP installation, assigned to its sales staff, and shown with the form answers and ad (UTM) context. We do not sell data, do not use it for advertising, and do not share it with third parties except the hosting providers that run the service.

Where it is stored

Lead data and access tokens are stored in the BAD ERP installation of the business that connected the Page. Access tokens are stored encrypted (AES-256-GCM). The central integration service (https://meta-hub.mathleti.uz) stores only which Page belongs to which installation; it does not store lead answers, and the user access token it obtains during login is handed to the installation once and kept for at most 5 minutes.

Retention and deletion

Data is kept while the business uses the integration. Disconnecting the Facebook account in BAD ERP (Facebook → "Chiqish") deletes the stored tokens and stops receiving leads. Leads already created as deals are business records of that company and are deleted by the company in its CRM. See Data deletion for how to request deletion.

Security

All traffic uses HTTPS; Meta webhooks are verified with the app signature; requests between the central service and installations are signed (HMAC-SHA256).

Contact

Questions or requests: amirbekdeveloper@gmail.com.

Maxfiylik siyosati (oʻzbekcha)

BAD ERP — TIRKASHOV OG'ABEK tomonidan yuritiladigan CRM / ERP tizimi. Bizneslar undan Facebook va Instagram lid reklamalaridan (lid formalari) kelgan murojaatlarni toʻgʻridan-toʻgʻri savdo voronkasiga qabul qilish uchun foydalanadi.

Meta’dan olinadigan maʼlumotlar

• Integratsiyani ulagan Facebook foydalanuvchisi: ID, ism, profil rasmi va berilgan ruxsatlar.
• U boshqaradigan Facebook sahifalari: ID, nomi, rasmi, bogʻlangan Instagram akkaunti va sahifa tokenlari.
• Tanlangan formalarga yuborilgan lidlar: lid kiritgan javoblar (ism, telefon, email, shahar, qoʻshimcha savollar) va reklama maʼlumotlari (kampaniya, reklama guruhi va reklama nomlari).

Qanday ishlatiladi

Faqat biznes sozlagan xizmat uchun: lidlar oʻsha biznesning BAD ERP tizimida kontakt va bitim sifatida ochiladi. Maʼlumotlar sotilmaydi, reklama uchun ishlatilmaydi va uchinchi shaxslarga berilmaydi.

Saqlash va oʻchirish

Lidlar va tokenlar sahifani ulagan biznesning BAD ERP tizimida saqlanadi, tokenlar shifrlangan. Markaziy servis faqat qaysi sahifa qaysi tizimga tegishli ekanini saqlaydi. Facebook akkauntidan chiqilganda (“Chiqish”) tokenlar oʻchiriladi. Oʻchirish soʻrovi: Maʼlumotlarni oʻchirish. Aloqa: amirbekdeveloper@gmail.com.

Contact / Aloqa: amirbekdeveloper@gmail.com