Security & Data

You stay in control. Highclicks Ads acts only on your behalf and only for the accounts you authorize.

Credentials

• Ad accounts are connected via OAuth: we never see your platform password.
• Access tokens are stored encrypted and only used to carry out the actions you request.
• You can disconnect at any time , in the app or directly on the platform (e.g. in Facebook settings under Apps and websites).
• Manual MCP tokens (for your own clients) can be revoked under API-Keys at any time.API-Keys

Built-in safeguards

• Paused by default: New campaigns are always created paused. Budget only flows after your explicit approval.
• Your budget stays yours: Ad spend is billed directly by the platform. Highclicks Ads never moves money on your behalf.
• Tenant isolation: Every request runs strictly within your account context. Tools only see your connections and campaigns.
• Reports without account access: Shared report links show only stored snapshots. Opening the link does not trigger any access to your ad account.

Data handling

We do not sell data, do not use it for advertising or to train general AI models, and share it only with the service providers required to operate the platform. For Google data, the Google API Services User Data Policy, including its Limited Use requirements, applies explicitly.