Security and privacy
Client data, staff data and fees are kept to the people who need them. Here is how that works.
Enforced in the database
Who can read and change what is decided by database rules, so hiding a button is never the only protection.
Admin-created logins
Public sign-up is off. Only admins create logins, and deactivating someone removes their access.
A permanent record
What changed entries can't be edited or deleted, and records that hold history are archived rather than removed.
Private report links
Shared reports are frozen copies. Links last up to 90 days and can be turned off at any time.
Encrypted Google tokens
Google sign-in tokens are encrypted, kept on the server and never sent to the browser.
Encrypted connections
Data travels over encrypted connections, and every screen in the CRM needs a sign-in. Shared reports open from their private link instead.
Five access levels
Each person has a role for what they do, and an access level for what they can see and change.
| Access level | Clients | Fees and MRR | Can change data | Admin tools |
|---|---|---|---|---|
| Master Admin | All | Yes | Yes | All, including roles |
| Super Admin | All | Yes | Yes | Team and scoring, but can't manage Master Admins |
| Manager Access | Their own or the whole team | Yes | Yes, plus platforms and deal stages | None |
| Standard Access | Their own or the whole team | No | Yes, within limits | None |
| View Only Access | Only clients given to them | No | No | None |
How the CRM uses Google Ads
Team members with manager access can sign in with Google to link a client's Google Ads account. The CRM uses that access to:
- list the Google Ads accounts the login can reach, so the right one can be picked for the client
- show the linked account's name, currency and the manager account it's linked through
- show a history of changes made in the account, so the team can see what changed and when. This feature is in testing and isn't turned on for customers yet
- check the account's time zone and conversion action settings
The CRM only reads this data. It doesn't change anything in a Google Ads account, and we don't sell the data or use it for advertising. You can read the details in the privacy policy.
Have security questions?
Bring them to your demo, and we'll go through how your data would be handled.