Privacy Policy

NOVA Installer OS works with Meta (Facebook and Instagram) in two ways: installers can connect their Meta ad accounts so NOVA can show them how their adverts perform, and installers can switch on conversion tracking so NOVA tells Meta when one of their adverts leads to an enquiry or a sale. This section explains what data is involved in each, why, and how to have it deleted.

Connecting Meta ad accounts (ad reporting)

How we connect. An administrator of the installer’s business signs in with Facebook Login for Business and chooses which ad accounts to share. Meta then gives NOVA a business access token that belongs to the installer’s business, not to the person who signed in. We ask for these permissions:

• ads_read - to read the performance of the shared ad accounts.

• business_management - to see which business owns each ad account and which businesses manage it, so we only connect accounts the installer owns, or that their marketing agency manages on the installer's behalf.

• pages_read_engagement and pages_show_list - Meta adds these because business_management depends on them. We use them only to read the text of the installer’s own ads when that text sits in a Facebook Page post rather than in the ad.

Some installers instead paste an access token they created in Meta themselves. We store and use that token in the same way.

What we collect. For each connected ad account:

• the ad account’s ID, name, currency, time zone, status and owning business;

• campaigns, ad sets and ads: names, statuses, objectives, budgets and dates;

• ad creatives: headlines, ad text and images (we keep a copy of each image so it still shows after Meta’s own link expires);

• daily performance figures: spend, impressions, reach, clicks, and the results Meta reports, such as leads and conversions;

• the business access token, and an ID for the system user Meta creates for NOVA in the installer’s business.

We do not read anyone’s personal Facebook profile, friends, posts or messages, and we never create, change, pause or delete adverts.

Why we use it. To show the installer their own advertising results inside NOVA, next to the enquiries and sales those adverts produced, so they can see what each customer cost.

How we keep it. The data is stored securely in the UK or European Economic Area, separated by installer, and is visible only to the installer’s own NOVA users and to NOVA staff supporting them. Access tokens are encrypted at rest and can only be read by NOVA’s servers, never by a browser.

Who we share it with. Nobody else. We do not sell Meta data, use it to advertise to anyone, or share one installer’s data with another. We use trusted service providers to host and run NOVA, such as cloud database, storage, web hosting and background processing providers. They process data only on our instructions and under contract. Some of them may process data outside the UK; when they do, we make sure appropriate safeguards are in place, such as the UK’s adequacy regulations or the UK International Data Transfer Agreement. We may disclose data where the law requires it.

How long we keep it. While the ad account is connected. When an installer disconnects an ad account in NOVA, we stop syncing it and delete its access token straight away. The reporting already imported stays in the installer’s workspace, so their past results remain available, until they delete it or ask us to. If an installer closes their NOVA account, we delete all Meta data we hold for them within 30 days.

Conversion tracking on NOVA forms (Meta Pixel and Conversions API)

Installers can add their Meta Pixel to the enquiry forms NOVA hosts for them, and switch on Meta’s Conversions API. When they do:

• the Meta Pixel runs in the visitor’s browser on that installer’s NOVA forms, and Meta may set its own cookies;

• NOVA sends events about the enquiry to the installer’s own Meta dataset: for example a new enquiry (Lead), and later stages such as a qualified lead or a sale, with the event time, an event ID, the form page address and, for some events, a value.

With each event NOVA sends, to help Meta match it to the advert that produced it:

• hashed (SHA-256) email address, phone number, first name, last name, postcode, country and a NOVA visitor ID;

• the visitor’s IP address, browser details and Meta’s own click and browser IDs.

The installer decides whether to use this and is responsible for it towards their customers; NOVA sends the data on the installer’s behalf and only to that installer’s Meta dataset. Meta uses it under its Business Tools Terms to measure and improve the installer’s adverts. If you made an enquiry through an installer’s form, the installer’s own privacy notice explains this, and you can ask them, or us, to stop it.

How to have your Meta data deleted

• Stop access: disconnect the ad account under Settings, Ad Accounts in NOVA. You can also remove NOVA in Meta Business Settings, under Integrations, Connected apps. Removing NOVA in Meta stops our access but does not by itself delete what we already hold.

• Delete what we hold: email info@novainstall.com from an address on the account, or send a data deletion request through Facebook. Requests from Facebook are handled automatically where we can match them to a connection, and you get a link to check progress; otherwise we complete them by hand within 30 days.

• Conversion tracking: ask the installer whose form you used, or email us at info@novainstall.com, and we will delete the events we hold about you and stop sending them.