Read-only by default
Advertising connections should request reporting permissions rather than the ability to create, edit, pause or delete campaigns.
Security and control
Your advertising accounts remain under your control.
AdSpend Lens is designed around read-only permissions, encrypted credentials, strong tenant separation and clear disconnection and deletion processes.
Security principles
Access only what the product needs to explain performance.
Encrypted token storage
OAuth access and refresh tokens must be encrypted at rest and never exposed to the customer’s browser.
Strong tenant separation
Every query and background job must be scoped to the correct customer, business and selected advertising account.
Synchronised data in our database
Dashboards should use stored data instead of calling Meta or Google every time a filter changes.
Audit and synchronisation logs
Record connection changes, sync runs, failures and important administrative actions.
Disconnect and deletion controls
Customers should be able to revoke access and request removal of stored advertising information through a defined GDPR process.
What read-only means
AdSpend Lens can analyse. It cannot manage the campaigns.
The platform is intended to retrieve permitted reporting data, creative information and account settings required for analysis.
Data trust and operational warnings
Security also means being honest about stale or incomplete data.
Expired permissionTell the customer when a token needs reconnecting.
Stale syncShow when the latest account data was successfully received.
API limitationExplain when a field is not available for a campaign type.
Deletion requestTrack and complete deletion across active and historical tables.
Independent advertising visibility
View the product demoIndependent visibility should not require giving up control.
AdSpend Lens is designed to remain read-only, transparent and removable whenever the customer decides to disconnect.