Security and your data
What Adintel asks Google for and why, what it reads and keeps, who processes it, and how to take its access away. Each answer links the help article with the full rules.
What does Adintel ask Google for, and why?
One Google Ads permission, which Google’s consent screen words as “See, edit, create, and delete your Google Ads accounts and data.” It is the only permission the Google Ads API has, so every tool that works with Google Ads asks for the same one, and it covers reading and changing.
- Read, so Adintel can sync and analyse the accounts you choose.
- Change, so the changes you approve in Adintel can be applied. Nothing else is ever changed (below).
Beside it, Adintel asks for the email address of the Google login you connect, which tells it which login is which, and Google’s standard sign in identity. On Google’s screen the Google Ads permission is its own checkbox: leave it ticked, or Adintel cannot read your accounts.
More: Connecting Google Ads.
Is signing in to Adintel the same as connecting Google?
No. You sign in to Adintel with a link we email you; there is no password. Connecting a Google login is a separate step, and it is how Adintel reaches your Google Ads accounts. The two can be different addresses. Signing out of Adintel disconnects nothing, and adding a Google login does not change how you sign in.
More: Signing up and signing in.
What does Adintel read, and when?
When you connect a Google login, Adintel lists every Google Ads account it reaches, with what each spent over the last 30 days, so you can choose which to monitor. Only the accounts you choose are synced. Each is read early each morning and again later in the day: the last 30 days up to yesterday, and 90 days once a week. Accounts you leave unticked stay listed and are not synced.
| What Adintel reads | When | What it keeps |
|---|---|---|
| Every account a connected Google login reaches | When you connect the login and when you reconnect it; its spend again once a month while your trial or plan is active | Each account's name, customer ID, currency and recent spend, so you can choose which to monitor |
| The accounts you choose to monitor | 90 days of history when you first choose one; then early each morning and again later in the day | The account's settings and daily figures, such as its campaigns, ad groups, keywords, ads, search terms, products, budgets, bids, targets and conversions |
| Google's own activity in those accounts | Once a day, with the morning read | Google's change history and auto-apply settings, its recommendations, the assets it made, its impression share figures and, where products are advertised, their status |
| Your Google connection | When you connect | The email address of the Google login, and the tokens Google issues, encrypted before they are stored |
| What you do in Adintel | As you do it | Your decisions and their reasons, your notes and business context, and a record of every change Adintel made: when, what, before and after, why and who |
All of it is kept while your trial or plan is active, so Adintel can show trends, and deleted 30 days after your access ends (below).
More: When Adintel reads your accounts and Choosing the accounts you monitor.
What does Adintel change in my accounts?
Only what you choose, when you click. Nothing reaches Google Ads without your click. There is no automatic mode and no setting to turn one on.
- Before a control, an audit fix or an Undo is sent, Adintel reads the account from Google, shows the item as it is now and as it will be, and asks Google to check the exact change without making it. Triage, the search terms page and Actions show where a change goes and send it on your click.
- Every change is logged: the time, the account, what it touched, the value before and after, why, and who made it.
- Undo puts back the value a change replaced, and never overwrites a newer edit made in Google Ads without your tick.
Has Adintel been through Google's verification?
Adintel has completed Google’s OAuth verification for the Google Ads permission it asks for. Access tokens are encrypted before they are stored.
How does Adintel use what it reads from Google?
Only to run the features you use: showing your accounts’ performance, finding anomalies, sorting search terms, suggesting and applying the changes you approve, audits, reports, and answers in Ask Adintel. Never for advertising, and never to build profiles for anything else.
Adintel’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
What does the language model see?
Rules find, score and rank. A language model explains, sorts search terms inside rules that check it, and words your briefing. It never changes an account. You do. What each use sends it:
- Search term triage: each term with its figures, the campaign types and keyword it ran under, your business context, what the account sells (the products it served, its categories, keywords, ad headlines and landing pages), and your earlier decisions with their reasons.
- Anomaly explanations: the figures, the evidence the rules worked out, and your business context.
- Your briefing: the candidates the rules found and ranked, to pick at most five and word them. It cannot add one.
- A suggestion in Actions: its figures, after the rule has decided it, to write its summary and reasoning.
- A written audit report: each finding’s facts, to reword them in plain words without changing them.
- A client report’s summary: the sections you have not hidden. Every number in the summary is checked against them.
- Draft from account data, when you choose it in business context: the account’s name, its campaign and asset group names, keywords, ad copy, landing page addresses and search terms, to propose values you then review. It saves nothing.
- Ask Adintel: your question, the conversation so far, the page you asked on, and the help articles and account data read to answer it.
The model is Anthropic’s. Anthropic processes this data on our behalf to return a result, and does not use it to train its models.
More: How triage sorts search terms, How the briefing chooses and Asking Adintel.
How long is my data kept, and how is it deleted?
- When your access ends, everything stays readable for 30 days, and we email you five days before anything is deleted. Then the Google Ads data Adintel synced for you, and everything built from it, is deleted, and Adintel’s access to your Google login is revoked at Google.
- Ask Adintel’s answers are deleted 24 hours after a conversation’s last question; the words of your questions, after 90 days.
- We keep your sign in email, your plan and payment records, and the customer IDs of the deleted accounts and of accounts used in a free trial, to run billing, meet legal and tax obligations, show what was deleted, and allow each account one free trial.
- Deleted data can stay in our database provider’s backups for a short time, until those backups expire.
To have your data deleted sooner, email support@adintel.io. More: When access ends, and your data.
What can my teammates see and do?
Only the accounts you give them, in the role you choose on each: an editor makes changes through your connection, and a viewer only reads. Teammates sign in with their own email and never connect Google for your accounts. Only you, as the team’s owner, connect Google, choose what the team monitors and manage the plan. Every change is logged under the person who made it, and removing a teammate ends their access at once.
More: Team seats.
How do I take Adintel's access away?
Remove Adintel in your Google Account’s third-party access settings, at any time. From then on Adintel cannot read or change the accounts that login reaches. To stop syncing one account and keep the rest, take it off your selection on the Connect page instead; its data stays readable.
More: Connecting Google Ads.
Who processes data for Adintel?
A small number of services, each only on our behalf and only to run Adintel. We do not sell your data.
- Supabase: the database, sign in and stored data.
- Railway and Vercel: hosting for Adintel's servers and website.
- Anthropic: the language model (below).
- Resend: email: sign in links, the briefing, notices about your plan.
- Stripe: payments, subscriptions, invoices and tax.
- Sentry: reports of errors in the website, the app and the servers.
- Google Analytics: counting visits to the public website, never the app.
What each receives, and for how long: our privacy policy.
How do I report a security problem?
Email support@adintel.io with what you found and how to see it. A person reads every message and replies.
See it before you connect anything: a real account, read only, with nothing to sign up for.