Security
You are handing us access to your ad accounts
That deserves a straight description of what we do with it, not a page of badges.
Credentials
We never see your password
Access is granted through each platform's own OAuth flow, and can be revoked from their side at any time.
OAuth only
You authorise Cliqda through Google, Microsoft, Meta or LinkedIn directly. Your platform password is never entered into Cliqda and never transits our systems.
Tokens encrypted at rest
OAuth refresh and access tokens are encrypted with AES-256-GCM. The production server refuses to start without a valid encryption key configured.
Revocable by you
Disconnect an account in Cliqda, or revoke Cliqda from the ad platform’s own security settings. Either works, and takes effect immediately.
Writes
Nothing changes in your account without a decision
Read access and write access are different things, and we treat them that way.
Approval gate by default
Improvements are proposals. A person applies them. The only path to an automatic write is an automation you created and explicitly set to apply directly rather than propose.
Every write is logged
Who applied what, to which account, when. The log is queryable, and every applied change is measured afterwards in Change Impact.
Scoped access
Team members are granted the accounts they work on. Role-based access separates account work from billing and organisation settings.
No silent success
A push that failed is reported as failed. A delivery that bounced is never recorded as sent. Silent success is the failure mode we design hardest against.
Questions
Security FAQ
What data does Cliqda store?
Performance and structural data from the ad accounts you connect — campaigns, ad groups, keywords, ads, assets, search terms, and the metrics attached to them — plus your Cliqda account details. We store the data needed to produce the analysis you asked for.
Do you use my account data to train models?
Contact us for the current written policy on model training, aggregate data and anonymised use before connecting your accounts.
Where is data hosted?
On AWS. Specific regions and the sub-processor list are available on request and are covered in the data processing agreement.
Can I get a DPA?
Yes. Contact us and we will send the current data processing agreement.
How do I report a vulnerability?
Email hello@cliqda.com with the details. We will acknowledge receipt and keep you updated on remediation. Please give us a reasonable window to fix an issue before disclosing it publicly.
What happens to my data if I cancel?
Your connections are severed and the stored account data is scheduled for deletion. The exact retention window is set out in the data processing agreement.
Questions we have not answered here?
Security reviews and questionnaires are normal. Email hello@cliqda.com and we will work through yours.
14-day trial · No credit card · Approval required by default