Privacy policy

Effective and last updated: 22 September 2026

This policy explains how Shogun Media Ltd, trading as Cold Angles, handles information through Tatsuki Ongoing Api and the advertising-management workflows connected to it.

Who is responsible

Cold Angles is a trading name of Shogun Media Ltd, company number 16468957. We provide advertising management, creative analysis and reporting for business clients.

For privacy questions or requests, contact tatsuki@coldangles.com. Please identify the app and relevant business or ad account, but do not send passwords or access tokens.

We are responsible for personal information used to administer our own client relationships and app access. When we process a client's advertising data on its instructions, the client remains responsible for its purposes and we act on its behalf. This policy covers the app and related data workflows; it is not a notice for every form or tracking feature elsewhere on this website.

Information we access

The app uses Meta's APIs. The information available depends on the permissions granted, the assets shared with us and the services requested. It can include:

• Account and business information: business, ad-account, Page and connected Instagram account identifiers, names, account settings and access permissions.
• Advertising content and settings: campaigns, ad sets, ads, creative images and videos, copy, destination URLs, targeting settings, budgets, schedules and delivery status.
• Performance information: spend, impressions, reach, clicks, reported conversions, conversion values and aggregated reporting breakdowns provided by Meta.
• Connection and support information: access tokens, permission records, information needed to identify the authorised user, and details supplied when contacting us.

Information comes from Meta, authorised client representatives and the work carried out on their accounts. Ad creative and account names may contain personal information. This app's intended scope is advertising management and reporting, not collecting private messages, passwords or lead-form submissions.

How we use information

We use the information to connect authorised assets, analyse advertising performance, prepare reports, develop creative recommendations, troubleshoot access and carry out agreed advertising work. Where the necessary permissions and client authorisation are in place, that work includes creating or editing campaigns, ads, budgets, schedules and delivery settings.

Advertising reports may combine Meta metrics with information from other systems the client has authorised us to use. We save working files and reports where needed for delivery, comparisons over time and records of our work. Revoking API access does not automatically erase those saved copies.

For personal information we control, our purposes include performing a contract with the individual where applicable, our legitimate interests in providing and securing business services and managing client relationships, and complying with legal obligations. Where processing relies on consent, that consent can be withdrawn. Meta's technical permission to access an account does not, by itself, determine the legal basis for every use of its data.

Tools, service providers and sharing

Relevant information may be handled by authorised team members and contractors, the relevant client, and providers used for analysis, document storage, reporting and delivery. Our working tools include Anthropic's Claude, OpenAI's ChatGPT/Codex, Google Drive and Workspace, Notion and Asana. The tools used, and information supplied to each, depend on the task. Not every provider receives every client's data.

AI-assisted workflows may use selected advertising data and creative content to prepare analyses, recommendations or work products. Those uses involve processing by the applicable AI service; this policy does not promise that processing stays solely on our computers. Provider terms, account settings and any agreed client restrictions also apply.

We use Meta to retrieve account data and carry out authorised advertising changes. We do not sell Meta app data. Information may also be disclosed when legally required or necessary to establish, exercise or defend legal claims.

Some providers operate internationally and may process information outside the UK. Applicable transfer arrangements depend on the provider and service configuration. Contact us for details of the providers and transfer safeguards relevant to your engagement.

Storage, security and retention

App-related information may be held in local working files, connected tools and saved client reports. Access should be limited to people and services that need it for the agreed work. Access tokens must be treated as confidential credentials and must not be included in public reports or repositories.

We retain information for as long as needed for the services, ongoing reporting and legitimate record-keeping. We assess retention by the client relationship, the purpose and sensitivity of the information, deletion requests and any legal requirement to keep a record. Data that is no longer needed should be deleted or anonymised. Any information retained to meet a legal obligation or resolve a dispute is limited to that purpose.

Revoke access or request data deletion

1. Tell us the app name, your business name, and the relevant ad-account or business ID if known.
2. Explain whether you want access disconnected, saved data deleted, or both. Contact us from your usual business email where possible.
3. We may ask for proportionate information to verify your identity or authority. Do not send your password, access token or unnecessary identity documents.

We will review the request, delete relevant data under our control where required, and address copies held in connected tools used for the work. If we must retain particular information, we will explain the reason and applicable retention criteria. We will respond within the period required by applicable data-protection law, normally one month for a UK personal-data rights request, and explain any permitted extension.

You can also remove the app from your Meta Business Integrations settings or remove our access to the relevant assets in Meta business settings. Removing access stops future access through that authorisation; request deletion separately for existing copies. Deleting our copies does not delete your campaigns, ad account or information Meta holds independently.

Your rights

Depending on your circumstances, you may have rights to access, correct, erase or receive a portable copy of your personal information, restrict its use, or withdraw consent.

You can object to processing based on legitimate interests. Contact us using the address above. Where we act on a client's instructions, we may refer your request to that client or help them respond.

You can complain to the UK's Information Commissioner's Office at ico.org.uk/make-a-complaint, or to your local data-protection authority. Providing app access is voluntary, but we cannot carry out API-based work on assets that have not been authorised.

Visits to this policy page

This page has no advertising pixels, analytics scripts or forms. Our website host, Cloudflare, may process technical request information, such as IP address and browser details, to serve and protect the page. See Cloudflare's privacy policy.

Changes to this policy

We will update this page when the app or its data practices change and revise the date above. Material changes affecting existing client arrangements will be communicated through our usual client channels.