Access you understand, limits that hold
Connecting your ad accounts and letting software move budget is a real act of trust. We treat it that way: plain-language access scopes, encryption as standard, and spend guardrails enforced as hard technical limits rather than good intentions.
Exactly what you are granting, in plain terms
No vague blanket permissions. Each scope is explained before you approve it, and you can pull it back whenever you choose.
Read access
Performance, spend, and campaign structure are read so the studio can measure and decide. This is the baseline every connection needs.
Write access
Budget shifts and creative publishing require write access, granted per platform. You see exactly which actions each scope permits before you approve it.
Revoke any time
Access can be narrowed or withdrawn from the platform's own settings and from within CRAFTSGRO. Revoking write access stops all automated changes immediately.
Encryption in transit and at rest
Data moving between your browser, our systems, and the ad platforms is encrypted in transit. Stored data, including the credentials that authorise platform access, is encrypted at rest. Access tokens are held rather than raw passwords, and they carry only the scopes you granted.
Guardrails as hard technical limits
Your spend limits are not policy promises, they are enforced in the code path that executes every change:
- Daily and lifetime spend caps are enforced before any reallocation executes, not checked after the fact.
- Per-channel minimums and maximums bound every budget shift, so no single move can breach the box you set.
- Paused and manually pinned campaigns are excluded from automated changes entirely.
- Creative is never published automatically - a human approval is required for every asset.
Stated honestly, current status only
We will not claim certifications we do not hold. Our practices - encryption in transit and at rest, scoped and revocable access, and enforced spend limits - are in place today. Where a formal audit or certification is in progress rather than complete, we will say so plainly rather than imply otherwise. As our compliance position advances, this page will reflect the real status and nothing beyond it.
Handling a specific security or data-processing question for your organisation? Reach the team through the contact page and we will answer directly.
Connect with limits you set and can revoke
Grant only the access you are comfortable with, keep spend inside hard caps, and change your mind at any time. Start a trial when you are ready.