Built so the decisions stay yours.

Official sign-in

We connect your accounts through each platform’s official OAuth flow. You sign in on the platform’s own page and choose the permissions yourself.

We never see or store your platform passwords, and we never access the payment methods on your ad accounts.

Encryption

Access keys are stored encrypted with AES-256-GCM and are never shown to anyone on our team.

All traffic is encrypted with HTTPS/TLS. Session tokens and assistant authorisations are stored hashed, never in plain text.

Controls in the server, not the AI

Safety rules are enforced in the server itself, so no request or instruction to the AI can get around them:

• New campaigns are always created paused.

• Turning a campaign on, or raising its budget beyond your limit, needs your approval in the dashboard.

• A daily budget cap per campaign that you set, customisable per client.

• The server has no tool that deletes a campaign, ad set or ad.

• Tag Manager changes stay as drafts unless you allow publishing.

A full activity log

Every read, change and blocked attempt is logged with the time, client, platform and the assistant that asked, and you can review it at any time.

As little data as possible

Campaign numbers are fetched from the platform when you ask so your assistant can show them. We never use your data for advertising or to train AI models, and we never sell it.

Disconnecting and deletion

You can disconnect any platform from the dashboard or from the platform’s own settings, and we delete its access keys immediately. See the data deletion page for details.

Infrastructure

Go Shift runs on Cloudflare’s global network, with isolated databases and built-in DDoS protection.

Reporting a vulnerability

If you find a security issue, email [email protected] and we will reply within three business days.