Security and advertiser control by design
Security architecture and data-handling practices will continue to evolve as the product progresses through development and integration review.
Explicit authorization
Advertising accounts should only be accessed after authorization by the account owner through supported authorization mechanisms.
Least-privilege access
Request only permissions necessary to provide supported functionality.
Credential protection
Application credentials, authorization tokens, and other secrets must not be exposed publicly or shared unnecessarily.
Data minimization
Collect and retain only information reasonably necessary to provide the service.
Access control & Secure communications
Restrict sensitive information to authorized systems and personnel. Use HTTPS/TLS for data transmitted between users and the service.
Revocation and deletion
Design mechanisms allowing customers to disconnect accounts and request deletion of stored customer information subject to legal and platform requirements.