Privacy policy

Last updated 17 September 2026

Who we are

Installer Flow (installerflow.com) is operated by Attain Digital Ltd, a company registered in England and Wales (company number 13217646). Installer Flow is a reporting, advertising management and customer messaging service for home-energy installers and the marketing agency that looks after them.

Our role

For the people who sign in, and for the Facebook login someone uses to connect an account, we are the controller.
For information about a business’s own customers (its CRM contacts, leads from its lead forms, messages sent to its Page or WhatsApp number), the business is the controller and we process it on the business’s instructions under our service agreement with them.

What we collect

If you sign in

Your name, email address, role, the businesses you can access, and a record of changes you make through the service.

From a business’s own systems

When a business connects its CRM (GoHighLevel), we read its contacts (name, contact details and property address), sales opportunities, appointments and call records, so it can see how its pipeline performs by area, salesperson and source. Where it connects Google Ads, we read campaign spend and performance figures.

From Meta, when someone connects Facebook

An authorised person at the agency or business signs in with Facebook and chooses what to share. Depending on what they grant and which features the business uses, we receive:

Your Facebook profile basics: an app-specific user ID and your name, so the connection shows who made it (public_profile).
Business Manager details: the businesses you belong to and the ad accounts, Pages and WhatsApp accounts they own or have been given access to (business_management).
Advertising data: ad accounts, campaigns, ad sets, ads, ad previews, budgets and performance figures such as spend, reach, impressions, clicks and leads (ads_read).
Advertising changes: when an authorised user tells the service to, we create campaigns, ad sets and ads, switch them on or off, rename them and change budgets on the connected ad account (ads_management, pages_manage_ads).
Facebook Pages: the Pages you manage, and each Page’s name, category, follower count, recent posts and their engagement (pages_show_list, pages_read_engagement).
Instagram: the Instagram business account linked to a Page, meaning its username, profile picture and follower and post counts, so ads can run from it (instagram_basic).
Lead ads: a business’s lead forms, and the answers people give when they fill one in, usually name, phone number, email address and postcode (leads_retrieval). We also subscribe the Page to notifications so new leads and messages arrive straight away (pages_manage_metadata).
Messenger: conversations people start with a business’s Facebook Page, their name as shown on Messenger, and the replies the business sends (pages_messaging).
WhatsApp Business: a business’s WhatsApp Business accounts, phone numbers and message templates, and the messages exchanged with its customers on that number, including the customer’s WhatsApp name and number (whatsapp_business_management, whatsapp_business_messaging).

We only read the ad accounts, Pages and WhatsApp accounts the connecting person has access to on Facebook. We do not read anybody’s personal Facebook timeline, friends or private messages.

Cookies

Only the cookies needed to keep you signed in and to hold a shared-link or review session. No advertising or tracking cookies.

How we use it

To show each business the performance of its own sales pipeline and advertising.
To carry out the advertising changes an authorised user asks for, and to show what changed and who changed it.
To deliver a business’s leads and customer messages to its team so they can respond.
To keep the service secure, fix faults and answer support requests.

We do not sell personal data. We do not use data received from Meta to advertise to anyone, to build profiles of people, or to make decisions about people’s eligibility for anything, and we do not pass it to data brokers. We use Meta data only to provide the service to the business it belongs to, in line with Meta’s Platform Terms.

Legal basis

For people who sign in, performing our contract with their business and our legitimate interest in running a secure service. For a business’s customers, we process on that business’s instructions; the business is responsible for having a lawful basis, which is usually the customer’s own enquiry.

Who we share it with

Supabase: our database, hosted in London.
Vercel: hosts the application.
Meta, Google and HighLevel: only when we call their systems to read or make the changes described above.

Each business’s information is visible only to that business’s own users and to its agency. We will disclose information if the law requires it.

Where it is stored

Data is stored in the United Kingdom (London). Our hosting provider may process it in other countries while serving a page; where it does, the transfer is covered by the UK International Data Transfer Addendum or equivalent safeguards. Access tokens for connected accounts are encrypted (AES-256-GCM) before they are stored.

How long we keep it

Connection tokens: until the account is disconnected, the token expires, or the person removes Installer Flow from their Facebook settings.
Advertising, Page and lead form data: read from Meta when a page is viewed and held in memory for a few minutes. Daily spend and results per campaign are kept for the business’s reporting while it uses the service.
Lead notifications: we store the ID and time of each new lead, not the answers, for 90 days. The answers are read from Meta when someone opens them.
Messenger conversations: read from Meta when someone opens the inbox, and not stored by us.
WhatsApp messages: stored so the business can read and reply (WhatsApp offers no way to read them back later), and deleted 90 days after they were sent or received, or straight away when the account is disconnected.
Everything else: while the business uses the service, and deleted within 30 days of the service ending.

Your rights

You can ask to see, correct or delete the personal data we hold about you, to restrict or object to how it is used, or to receive a copy. Email hello@attaindigital.co. If you are a customer of a business that uses Installer Flow, you can also ask that business directly. You have the right to complain to the Information Commissioner’s Office (ico.org.uk).

Deleting data connected through Facebook

Removing Installer Flow in your Facebook settings (Settings & privacy › Settings › Apps and websites) and choosing to delete your data sends us a deletion request automatically. We delete your connection and everything read through it at once, and give you a confirmation code to check the status. Full instructions are on the data deletion page.

Security

All traffic is encrypted in transit. Every business’s data is separated from every other business’s, access is by individual login, stored tokens are encrypted, and changes to advertising are logged with who made them.

Children

Installer Flow is a business service and is not intended for anyone under 18.

Changes

If we change this policy we will update the date at the top. Significant changes will be told to the businesses that use the service.