Privacy Policy

Last updated: October 5, 2026

1. Who we are

"Second Pair of Eyes" (in Hebrew: זוג עיניים שני) is an AI agent service operated by Lemonedia. Lemonedia is the trading name of the registered business of Yuval Guy (legal business name: Follow My Lead), a sole proprietor based in Israel, who also trades as ProvenAd ("we", "us"). Our Meta app, "Lemonedia's AI Agents", is registered under the verified Meta business portfolio ProvenAd. Contact: office@lemonedia.co.il.

This policy covers the website agent.lemonedia.co.il and the AI agent service we provide to business clients (advertising agencies and advertisers).

2. Our role

• Controller for the details you submit through this website (the diagnostic call form) and for our client account records.
• Processor for data we access in a client's advertising accounts and Pages. The client is the controller of that data, and we process it only on the client's instructions and only to provide the service.

3. Data we collect

3.1 Website form

Full name, agency name, email, phone number and the number of ad accounts you manage. Submitting the form is voluntary.

3.2 Data accessed through advertising platform APIs

Only after a client explicitly authorizes our app, and only through the platforms' official APIs:

• Ad accounts, campaigns, ad sets, ads, creatives, audiences, budgets and performance data.
• Business Pages connected to those ad accounts and their lead ad forms.
• Leads submitted to the client's lead ads (contact details and form answers), where lead handling is part of the service.
• Access tokens issued by the platform when the client authorizes us.

3.3 Technical data

Standard server logs of this website kept by our hosting provider (IP address, browser type, pages requested).

4. How we use data

• Website form details: to contact you about the service and manage the sales process.
• Advertising account data: to monitor the client's accounts, detect errors and anomalies, send alerts and reports, and, where the client chose the autonomous level, perform the actions the client approved in advance.
• Leads: to deliver the client's leads to the client and to verify that the client's lead forms work correctly.

We do not sell personal data. We do not use client data for our own advertising or to build profiles. We do not use client data to train AI models, and we do not combine one client's data with another's.

5. Data received from Meta (Platform Data)

Clients connect through Facebook Login for Business and choose which business assets to share. Depending on the level the client chooses, our app requests these permissions: ads_read, ads_management, business_management, pages_show_list, pages_read_engagement, pages_manage_ads and leads_retrieval. We use data received from Meta only to provide the service to the client who authorized it, in accordance with the Meta Platform Terms. We do not transfer it to data brokers or advertising networks, and we do not use it for any purpose unrelated to that client's service.

6. Service providers

We share data only with providers that act on our behalf, to the extent needed to provide the service:

The AI agents run on Hermes Agent, open-source software by Nous Research that we host ourselves; Nous Research does not receive client data.

We may also disclose data where required by law. Some providers process data outside Israel, including in the United States and the European Union.

7. Storage and security

• Access tokens are stored encrypted and limited to the permissions the client granted.
• Each client has a separate, isolated workspace. An agent working for one client cannot access another client's data.
• We do not maintain our own database of clients' leads. Where lead handling is part of the service, leads are delivered to the client's CRM, directly or through an automation service. For reports, and to check that leads were delivered, we may hold working copies of lead data, for example a spreadsheet or the content of an AI-assisted work session.
• Only the data needed for a task is sent to a language-model provider.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Retention and deletion

We keep data only as long as needed to provide the service or as required by law. When an engagement ends, or when a client disconnects, access tokens are revoked and deleted, and the client's workspace data and any working copies of its leads are deleted. A client may ask us to delete lead data at any time. Website inquiries are kept until you ask us to delete them or they are no longer needed. See Data Deletion Instructions.

9. Your rights

Under the Israeli Protection of Privacy Law, 5741-1981, and, where it applies to you, the GDPR, you may ask to access, correct or delete your personal data, and to object to direct marketing. Email office@lemonedia.co.il; we respond within 30 days. If your data was collected by one of our clients (for example, you submitted a lead form on a client's ad), please contact that business; we will assist it in responding.

10. Children

The service is intended for businesses. It is not directed to anyone under 18 and we do not knowingly collect data from minors.

11. Changes

We may update this policy. Material changes will be published on this page with a new date.

12. Contact

office@lemonedia.co.il