Cedar Creek AnalyticsAccess to your ad account is access to your money. We treat it that way.
Tokens are encrypted at rest
Any token you send is encrypted with AES-256-GCM before it is stored. The key lives only in our server environment, so a copy of our database alone cannot reach your account.
We ask for the least access that does the job
Read-only access for measurement. Management access only when we run your ads. We never ask for business management or admin rights.
Nothing changes without a person approving it
Our system proposes budget moves, pauses and launches. A person approves each one. There is no code path that approves on your behalf.
Every change is logged and reversible
Each action records the state before and after, who approved it and why. Any change can be undone, and the reversal is logged too.
Your data stays in your systems
With database integration we read only the tables you grant, inside read-only transactions. Raw customer records are not copied into our systems; we store daily counts.
You can leave in one click
Remove our partner access or revoke the token in Meta Business Settings, and our access ends immediately. Ask, and we delete what we hold.
Questions from your security team are welcome. Ask us directly.