Privacy Policy
This policy explains how Unimi collects and manages information submitted through websites, contact forms, and Meta Lead Ads, including Facebook and Instagram.
1. Who is responsible for the data
Unimi operates unimi.io and the lead-management platform used to receive and manage business inquiries. Privacy questions may be sent to contact@unimi.io.
2. Information we process
- Name, telephone number, email address, and the inquiry or answers submitted in a form.
- Source identifiers such as Page, form, campaign, ad, and submission time when supplied by Meta or the website.
- Operational CRM data such as status, assignment, communications, and relevant work notes.
- For the business administrator who connects Meta: email address, selected Business, Page and form identifiers and names, granted permissions, connection status, health checks, and connection events.
- Access tokens required to operate the connection. Tokens are encrypted at rest and are never displayed in the dashboard.
- Basic technical and usage measurements, subject to the applicable cookie settings and choices.
Please do not submit medical, financial, government-identification, or other sensitive information that is not necessary for the inquiry.
3. Where the information comes from
Information comes directly from the person submitting a website form or a Meta Lead Ads form on Facebook or Instagram, and from the authorized business administrator who connects selected Meta assets. Meta sends Unimi the form data and lead identifier according to the permissions and asset choices made in Meta.
4. Why we use the information
- Receive an inquiry and allow the relevant business to respond.
- Store and display the lead in that business's isolated CRM workspace.
- Send operational email notifications and document follow-up.
- Identify the source of an inquiry and improve the contact process.
- Operate, monitor, secure, and troubleshoot the Meta integration.
- Prevent misuse and comply with applicable legal obligations.
Processing is based, as applicable, on the person's request to be contacted, consent given in the form, the legitimate need to manage business inquiries, contractual service obligations, and applicable law.
5. Storage, access, and retention
Lead data is stored in Unimi's database and is visible only to authorized users in the workspace belonging to the business connected to the form. Access is role-controlled and client workspaces are logically isolated.
Meta access tokens are encrypted at rest. Disconnecting the integration immediately deletes the stored token, stops new lead retrieval, and attempts to remove the Page webhook subscription.
Information is retained while needed to handle the inquiry, operate the workspace, provide support, document security events, resolve disputes, or comply with law. Limited connection identifiers and audit events may remain after disconnection for security and troubleshooting, but the business administrator may request their deletion. Data is deleted, anonymized, or minimized when it is no longer needed.
6. Service providers and disclosure
Information may be processed by service providers that support hosting, databases, email, security, and measurement, only to the extent needed to provide the service. Meta also processes Lead Ads data within its own services. Information may be disclosed when required by applicable law or a valid authority request.
Unimi does not sell lead data or use client lead data for unrelated advertising.
7. Your rights and choices
You may ask what information we hold about you, correct inaccurate information, object to a particular use, or request deletion. We may ask for limited information to verify that the request concerns your data. If retention is legally required, we will restrict use instead of deleting the information immediately where appropriate.
A business administrator may disconnect Meta at any time from the Integrations page. See the Data Deletion Instructions for deletion of lead data, connection metadata, and integration history.
8. Policy updates
We may update this policy when our services or data practices change. The current version and its effective date will remain published on this page.