About lead ads security and Terms of Use

In order to run lead ads on Facebook or Instagram, you must review and accept the Lead Ads Terms. If you run lead ads on multiple Facebook Pages, you must accept the Lead Ads Terms for each Page. If you choose to use custom questions in your Instant Form, you must also follow these Advertising Policies.

For more information about security, review the FAQs below.

Will other advertisers receive my lead ad data?

No. Your lead ad data will only be provided to you to be accessed by one of your Page admins. Users may, of course, choose to share the same or similar information through different lead ads created by other advertisers. Facebook will also use the information submitted by users through the lead ad, subject to its Data Policy.

Where is my lead ad data stored?

Your lead ad data is stored on Facebook's servers. Facebook operates large, distributed computing systems, where information is stored in many places at once. We have data centres in different geographic areas, each of which stores copies of the information in Facebook's databases.

This distributed model helps us provide access to Facebook without long delays. The model also provides redundancy, ensuring that Facebook will continue to function even if a single data centre is receiving an unusually high amount of traffic, experiences a network problem or becomes unavailable for another reason. We also store emergency backups of Facebook data in multiple locations to protect against data loss. We invest heavily in technologies, processes and teams of dedicated security staff to help ensure the security of our production data centres.

Who owns the lead ad data?

Lead ad data is provided to Facebook by individuals with their permission to share the data with a specific advertiser. Facebook uses the lead ad data according to its Data Policy and the advertiser is permitted to use the data shared according to their own privacy policy and other relevant terms as disclosed in the ad.

What does Facebook do with the lead ad data?

Facebook may use lead ad data as permitted by its Data Policy including to pre-fill future Instant Forms that individuals may complete. Facebook does not use the data from advertiser's custom questions.

Under the General Data Protection Regulation (GDPR), is Facebook the data controller or data processor for lead ads?

In the case of lead ads, both Facebook and the advertiser are data controllers. As a result, both parties are responsible for ensuring compliance by providing notice and establishing a legal basis for processing the data provided by a person using our platform. The lead ads product gives advertisers an option to link to their privacy policies and terms related to the collection and use of personal data.

Is my Facebook ad account secure?

Facebook invests heavily in technologies to protect its customers' accounts. For added security on your advertising account, we offer free, optional security technologies such as login approvals, which is a "two-factor authentication" solution.

Does Facebook have a security incident response process?

Facebook has a detailed process for handling any security incidents, which includes a complete internal review of any incidents.