Privacy Policy: BOCO Ads Executor
Effective date: 23 October 2026
Who we are
BOCO Ads Executor ("the App") is an internal tool operated by Boco Ventures Private Limited ("BOCO", "we"), 4-2-708, Floor No. 1, Ramkote, Hyderabad - 500001, Telangana, India. BOCO is a marketing agency. Only BOCO staff use the App, to manage advertising for client businesses that have given BOCO partner access to their Meta assets. The App is not offered to the public and does not use Facebook Login.
What data the App accesses
Through the Meta Marketing API, and only for ad accounts and Pages our clients have shared with BOCO's business portfolio:
- Ad account details (name, ID, status, currency, time zone).
- Campaign, ad set and ad settings (names, status, budgets, bids, targeting settings, creative references).
- Performance insights (spend, impressions, reach, clicks, conversions and similar aggregate metrics).
- The names and IDs of Custom Audiences used in or excluded from those campaigns.
- Lists of Pages and assets shared with BOCO (names, IDs, access levels).
We do not access Facebook users' personal profiles, messages or friend lists. Insights are aggregate and do not identify individuals.
How we use it
The App reads this data to produce performance reports and alerts for the client the data belongs to, and to check our reports against the client's other reporting tools. The App does not change campaigns, budgets or audiences. Any future ability to apply changes would need the client's permission and an explicit human approval for every change.
We do not sell this data, use it for our own advertising, or share it with third parties. The only exceptions are the service providers that host our systems: Supabase (database) and our own servers managed with Coolify.
Retention
- Performance data is kept for the duration of the client engagement plus 12 months, then deleted.
- Access tokens are kept only in our server environment. They are never shown in logs, expire after 60 days, are replaced before they expire, and are revoked when no longer needed.
- Records of App activity are kept for 24 months.
- When a client ends its engagement or removes BOCO's partner access, we stop accessing its data. We delete its stored data within 30 days of a request.
Security
Access is limited to authorised BOCO staff. Each ad account gets the minimum access the App needs, and tokens never appear in logs or messages.
Your choices and deletion
Clients can revoke BOCO's access at any time in Meta Business Suite → Settings → Users → Partners. To request deletion, see www.boco.agency/data-deletion or email abhishek@boco.vc.
Changes
When our practices change, we will update this page and its effective date.
Contact
Boco Ventures Private Limited, 4-2-708, Floor No. 1, Ramkote, Hyderabad - 500001, Telangana, India, abhishek@boco.vc
