Security you canread line by line.
Every action lands in the . Every permission is a grant you can read and revoke — check the yourself.
Six guarantees, by construction.
OAuth-only connections
Platforms connect via OAuth — Offloda never sees or stores your passwords. Tokens are scoped to the access you grant and encrypted at rest.
One private workspace per client
Every client brand is its own private workspace, enforced by row-level security in the database itself — nothing crosses between clients.
Approval-gated writes
Nothing changes on a live account without explicit approval. High-risk actions need a second acknowledgement; new campaigns launch paused.
Hashed API keys
API keys are stored as one-way hashes — shown once when created, revocable instantly, scoped to your agency.
Immutable audit log
Every read and every write is recorded — who asked, what changed, and when it was approved.
No AI keys in the browser
All AI calls run server-side; your browser never holds a model key. Chat surfaces run on your own AI subscription.
Least privilege, per seat.
Three roles
Owners manage the workspace, managers run operations, operators execute — each with exactly the permissions the role needs.
Brand scoping
A seat can be limited to specific client brands — the rest don't exist for them.
Platform scoping
Seats can also be limited per platform — an operator can hold Google Ads without ever touching Meta.
The part they didn't expect.
“Wow. It's the first time I truly understand what is going on in our marketing campaigns with such detail.”
“I just cleared my weekly account checklist by 11am on Monday. I might have to find some new clients to stay busy.”
“I audited our site and fixed 3 issues on Search Console and Key Events missing in Google Analytics that I did not know were missing.”
Security questions
Can Offloda — or the AI — spend money on its own?
No. Every budget or bid change is shown to you as an exact before-and-after and waits for your confirmation; new campaigns launch paused; high-risk changes ask for a second acknowledgement. The AI proposes, a person approves.
What data do you store?
Encrypted OAuth tokens, the performance data needed to render dashboards and reports, and the audit trail of actions. We never see platform passwords, and we don't sell or share client data.
Who on my team can see what?
Whatever you scope them to: roles control what a seat can do, and per-brand and per-platform grants control what it can see. Client portal seats are view-only by design.
How do I delete my data?
Disconnecting a platform removes its credentials and connected data. Meta users can also trigger deletion from their Facebook settings — see the data-deletion page for status lookups. For full account deletion, contact us and we'll confirm completion.
Have a question this page didn't answer?
Security review for your agency or franchise? We'll walk your team through it.