Privacy Policy

forge-ads · Works by Shreyas · Last updated 9 August 2026

This policy explains how Works by Shreyas ("we") handles data in forge-ads, an internal tool we use to manage advertising and business accounts on behalf of our clients. forge-ads is not a consumer product, has no public sign-up, and is operated only by us.

Who the data belongs to

forge-ads acts on Meta assets — ad accounts, Facebook Pages, Instagram profiles and WhatsApp Business accounts — that are owned by our clients. Clients grant us access explicitly, either by assigning assets to our business portfolio or by adding us as a partner. Clients can revoke that access at any time from their own Meta Business settings, without contacting us.

What we access

• Advertising data: campaigns, ad sets, ads, creatives, budgets and performance metrics.
• Page and Instagram data: profile details, published content and engagement metrics.
• Aggregate messaging metrics, such as the number of conversations an ad started.

We access this data only to build, run, report on and troubleshoot advertising for the client who owns it.

What we do not do

• We do not sell, rent or share client data with third parties.
• We do not use client data to train machine learning models.
• We do not combine one client's data with another's.
• We do not collect personal data from members of the public through this app.

Storage and security

forge-ads runs locally on our own machines. Access credentials are stored on those machines in a restricted file and are never committed to source control or shared. Ads and performance data are read from Meta on demand; we retain only the working notes and reports needed to service the client engagement.

Retention

When an engagement ends, the client revokes our access to their assets and we delete the corresponding credentials. Reports and working notes already delivered to the client are deleted on request.

Your rights

If you are a client, or a person whose data you believe we hold, you may ask us what we hold, ask for a copy, or ask us to delete it. Email us and we will respond within 30 days. See also our Data Deletion Instructions.

Changes

If this policy changes, the revised version will be posted at this address with a new "last updated" date.