Trust & Security
Security built into every layer
Plain-English controls that protect your data, your customers and your spend.
Marketing platforms hold the keys to your ad accounts, your store and your customer data, so security is not a feature here - it is the foundation. Every claim on this page maps to real, shipped code in the product: encrypted token storage, role-based permissions enforced on the server, hardened authentication and a full audit trail.
Role-based access control
Six roles with centralized checks and privilege-escalation guards.
Workspace permissions
Owners, managers and members get exactly the access they need.
CSRF protection
Double-submit token enforcement on state-changing requests.
Hardened OAuth
Every connection uses PKCE with encrypted, single-use state.
Encrypted tokens
All credentials are sealed with AES-256-GCM and key rotation.
Rate limiting
Tiered, Redis-backed limits protect the endpoints.
Verified payments
PayPal webhooks are signature-validated before processing.
Per-request CSP
A nonce-based Content-Security-Policy is issued on every request.
Data separation
Every record is scoped per user in the database structure.
Built for businesses that take data seriously
Start free - your connections are encrypted from the first click.