Security and data
What we access, and what we will not do
Written in plain language, and limited to what the product actually does. We describe measures we have implemented — not certifications we do not hold.
Connectors available today: Meta Ads. Everything else is labelled in development or planned on the integrations page.
Practices
How access and actions are handled
Credentials encrypted at rest
Connector credentials are encrypted before storage rather than kept in plain text.
Read-only by default
Reporting works entirely on read access. Write permissions are only requested when you enable approved actions.
Session-based authentication
Access is scoped to your signed-in session and organisation, so members only see the workspaces they belong to.
Approval before execution
Changes to budget, status, or targeting require an explicit review step and produce an audit record.
Honest data states
Stale or partial data is labelled in the affected charts. Missing data is never replaced with zeros.
No autonomous execution
Nothing is executed unless a user approves it, or you have explicitly configured a specific automation.
Data access
Plain-language answers
- What data is accessed
- Campaign, ad set, ad, and delivery metrics for the ad accounts you select, read through the platform APIs.
- Which permissions are requested and why
- Read access for reporting. Write permissions are only requested if you enable approved actions, and each permission is listed on the connection screen.
- Who can connect or disconnect
- Workspace administrators manage connections. Members with reporting access can see the resulting data.
- How to revoke access
- Disconnect from the Integrations page, which removes stored credentials, or revoke the app from the platform itself.
- How data is stored
- Credentials are encrypted at rest. Performance data is stored for the reporting window you enable.
- Which actions need approval
- Anything that changes budget, status, or targeting requires an explicit review and confirmation step before execution.
FAQ
Security and data questions
What data does the platform access?
Campaign, ad set, ad, and delivery metrics for the ad accounts you explicitly select, plus account and page context needed to attribute that data. Access is read-only unless you enable an approved action that requires write permission.
Does it make changes automatically?
No. Recommendations are proposals. Nothing that changes budget, status, or targeting is executed without your review and confirmation, unless you have explicitly configured an automation that authorises the specific change.
Can I review recommendations before execution?
Yes. Every recommendation shows the current value, the proposed value, the evidence, the assumptions behind any estimate, the risk, and whether the change is reversible.
How do I disconnect an account?
Open Integrations, choose the connection, and select Disconnect. Stored credentials are removed, and you can also revoke access from the platform itself at any time.
Request access and review the permissions yourself.
You see the exact permissions being requested before a connection is completed.