Security model

AdSoups limits access to authorized internal users and approved Google Ads accounts.

The platform is operated as a private internal tool with account-scoped access, operational logging, credential controls, and manual review points for production changes.

Access Controls

Users

Internal operators only

AdSoups does not provide public registration. Access is restricted to operators responsible for authorized advertising accounts.

Accounts

Authorized account scope

Operators may work only on Google Ads accounts that our organization owns or is authorized to manage.

Changes

Review before execution

Account-impacting updates are reviewed through internal operating rules before production API mutations are executed.

Monitoring

Operational records

Important campaign updates, failures, and review outcomes are retained for troubleshooting and audit purposes.

Credential Handling

OAuth credentials and refresh tokens are used only to authenticate authorized Google Ads API requests. Credentials are not published on this website, are not included in support tickets, and are not exposed to public visitors.

Access can be revoked through the connected Google Account security settings. Once revoked, AdSoups cannot continue making authorized API requests for that Google account unless access is granted again.

Production Safeguards

  • Write operations are separated from reporting operations.
  • Campaign creation follows approved account, budget, ad group, keyword, and ad content inputs.
  • Negative keyword and CPC changes are based on internal review rules and operator confirmation.
  • Failed API operations are inspected and corrected before retrying broad updates.
  • Developer tokens, client secrets, and refresh tokens are treated as confidential operational credentials.