Lead forms

curl -X POST https://api.pozy.ai/v1/ads/lead-forms \
  -H "Authorization: Bearer $POZY_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "accountId": "66b2e19d8c3f5a7e9d0b1c2f",
    "name": "Q3 benchmark report",
    "privacyPolicyUrl": "https://example.com/privacy",
    "platformSpecificData": {
      "adAccountId": "517258773",
      "headline": "Get the 2027 benchmark report",
      "description": "Tell us where to send it.",
      "state": "PUBLISHED",
      "questions": [
        { "kind": "text", "name": "company", "question": "Company name", "maxResponseLength": 120 },
        { "kind": "multipleChoice", "name": "team_size", "question": "Team size",
          "choices": [ { "id": 1, "text": "1 to 10" }, { "id": 2, "text": "11 to 50" }, { "id": 3, "text": "51 or more" } ] }
      ],
      "consents": [ { "description": "I agree to be contacted about this report", "required": true } ]
    }
  }'

curl "https://api.pozy.ai/v1/ads/leads?accountId=66b2e19d8c3f5a7e9d0b1c2d&status=new&limit=50" \
  -H "Authorization: Bearer $POZY_API_KEY"

{
  "status": "success",
  "leads": [
    {
      "id": "66f1a2b3c4d5e6f7a8b9c0d1",
      "leadgenId": "5566778899001122",
      "formId": "1029384756102938",
      "formName": "Kitchen remodel quote",
      "adId": "120260000000000000",
      "campaignId": "120250000000000000",
      "isOrganic": false,
      "createdTime": "2027-02-14T10:31:05.000Z",
      "fields": { "full_name": "Jamie Rivera", "email": "jamie@example.com", "phone_number": "+14155550199", "budget": "over_10k" },
      "consents": [],
      "status": "new"
    }
  ],
  "pagination": { "hasMore": false, "cursor": null }
}

curl -X PATCH https://api.pozy.ai/v1/ads/leads/66f1a2b3c4d5e6f7a8b9c0d1 \
  -H "Authorization: Bearer $POZY_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "status": "converted", "value": 18500, "currency": "USD" }'

{
  "id": "evt_8a1f4c2e9b7d3a60",
  "event": "lead.received",
  "timestamp": "2027-02-14T10:31:07.000Z",
  "profiles": [{ "id": "66b2e19d8c3f5a7e9d0b1c2a", "externalId": "client_482" }],
  "lead": {
    "id": "66f1a2b3c4d5e6f7a8b9c0d1",
    "leadgenId": "5566778899001122",
    "formId": "1029384756102938",
    "formName": "Kitchen remodel quote",
    "adId": "120260000000000000",
    "campaignId": "120250000000000000",
    "fields": { "full_name": "Jamie Rivera", "email": "jamie@example.com", "budget": "over_10k" },
    "consents": [{ "checkboxKey": "call_consent", "isChecked": true }],
    "isOrganic": false,
    "createdAt": "2027-02-14T10:31:05.000Z"
  },
  "account": { "id": "66b2e19d8c3f5a7e9d0b1c2d", "platform": "facebook", "profileId": "66b2e19d8c3f5a7e9d0b1c2a" }
}

import crypto from "node:crypto";
import express from "express";

const app = express();
const seen = new Set<string>(); // use a database table in production

app.post("/webhooks/pozy", express.raw({ type: "application/json" }), async (req, res) => {
  const expected = crypto.createHmac("sha256", process.env.POZY_WEBHOOK_SECRET!).update(req.body).digest("hex");
  const given = req.header("X-Pozy-Signature") ?? "";
  if (given.length !== expected.length || !crypto.timingSafeEqual(Buffer.from(given), Buffer.from(expected))) {
    return res.status(401).end();
  }
  const event = JSON.parse(req.body.toString("utf8"));
  res.status(200).end(); // answer fast, work after

  if (event.event !== "lead.received" || seen.has(event.lead.leadgenId)) return;
  seen.add(event.lead.leadgenId);

  const tenant = event.profiles?.[0]?.externalId; // your customer id, if you build a platform
  await upsertCrmContact(tenant, {
    name: event.lead.fields.full_name,
    email: event.lead.fields.email,
    phone: event.lead.fields.phone_number,
    source: `${event.lead.formName} (ad ${event.lead.adId ?? "organic"})`,
    callConsent: event.lead.consents.find((c: { checkboxKey: string }) => c.checkboxKey === "call_consent")?.isChecked ?? false,
  });
});

declare function upsertCrmContact(tenant: string | undefined, contact: Record<string, unknown>): Promise<void>;