PPC management platform security and access controls
The PPC management platform from NegativeKeywords connects through each ad platform's OAuth flow and limits its work to search-term reporting, negative keywords and shared lists. You control approvals, can revoke the connection at any time and have an audit trail for every negative added.
Authorize each ad platform directly
Connect Google Ads, Microsoft Advertising or Amazon Ads through that platform's OAuth authorization screen. Your ad platform password stays with the platform. Review the requested permissions before authorizing the accounts you manage, including child accounts reached through a Google Ads manager account.
In plain words, the workflow reads advertising reports and manages negative keywords and shared lists where the platform supports them. It does not change billing, campaign budgets, bids or ad creative. The names and breadth of OAuth scopes differ by platform; a platform may bundle permissions more broadly than the actions this service uses.
- Read search-term reports and account context needed for conflict checks.
- Add and remove negative keywords and manage supported shared lists.
- Keep billing and budget changes outside the service's actions.
Use the workflow guide to connect those permissions to the steps the product performs.
Keep account access proportionate to the job
Grant access only to accounts your workspace needs to review. Use the minimum platform permissions the connection supports, and revisit access when account ownership or team responsibilities change. An agency manager connection does not remove the need to choose the intended accounts carefully.
You can revoke access through the ad platform at any time. Revocation stops further access through that connection; it does not remove negatives already applied or automatically delete account history held in the workspace. Request deletion separately when that is your intention.
Do not send ad platform passwords, access tokens or other secrets to support. Questions about the connection can be described using the network, the action attempted and the visible error text without copying confidential query exports.
Protect reports in transit and at rest
Data is encrypted in transit and at rest. Access to connected account data is restricted to the service workflow and authorized workspace access. Keep the underlying ad platform permissions under review as well as the permissions inside NegativeKeywords.
We never sell or share search terms. They are not distributed to advertisers, data buyers or unrelated workspaces. Processing by service providers is limited to operating the service under appropriate confidentiality and data protection obligations. Reports you choose to export or share remain your responsibility to send to authorized recipients.
The one-off demo processes your pasted CSV or TSV in the browser. It never sends the report to the service and never stores it. Connecting an account through OAuth is a separate workflow that processes ad account data for ongoing sweeps.
Read the privacy policy for data categories, purposes, provider categories and your rights.
Align workspace access with responsibility
Agency provides 15 team seats with roles. Use those roles to reflect who reviews proposals and manages account work. Enterprise adds unlimited seats, SSO through SAML and SCIM so access can follow the organization's identity and provisioning process.
- Review team access when someone changes responsibilities or leaves.
- Keep rule ownership clear before enabling autopilot.
- Review the ad platform connection when an agency account moves between teams.
Starter includes 1 seat and Growth includes 3. Compare the plan controls when deciding whether your review process needs Agency roles or Enterprise identity management.
Trace each exclusion and reverse the added negative
Approval mode requires a review decision before proposals change an account. Growth and above also support autopilot rules you define. Conflict checks reject proposals that block active keywords, products or converting queries in the reviewed data.
Every negative added is recorded with its reason and supports one-click undo. Removing an added negative does not recover auctions already missed. If a rule caused the decision, review the rule's conditions before the next sweep.
| Plan | Audit log retention |
|---|---|
| Starter | 30 days |
| Growth | 1 year |
| Agency | 2 years |
| Enterprise | Unlimited with export |
These periods describe audit history, not a promise that every other data category has the same retention period. Account operation, legal recordkeeping and deletion requests have separate purposes and handling requirements.
Request deletion when the service no longer needs the data
We retain account and connected ad data for the purposes described in the privacy policy, including operating the workspace and maintaining the plan's audit history. Data that is no longer needed is deleted or anonymized, subject to legal obligations and legitimate security or dispute needs.
You can request deletion at [email protected]. Identify the workspace and the data concerned without sending credentials. Verification may be required before we act. Limited billing, legal or security records can remain where retention is required or justified; the privacy policy explains the applicable rights and exceptions.
Choose the access and retention your team needs
Review the subscription comparison for account coverage, seats and audit retention. Enterprise adds SAML SSO, SCIM and procurement documentation when your organization needs those controls.