Permissions and data

When you connect an ad platform, you sign in on the platform’s own page and grant Guardified a set of permissions. Guardified then keeps a connection for your store so it can list your campaigns and switch them off and on when stock changes. This page lists those permissions and what Guardified keeps.

Meta Ads permissions

Permission	What Guardified uses it for
`ads_read`	Listing your ad accounts and their campaigns, ad sets and ads in the target picker.
`ads_management`	Setting a target’s status to Paused or Active.
`business_management`	Listing ad accounts that belong to your business, with the business’s name.

Google Ads permission

Permission	What Guardified uses it for
Google Ads (`adwords`)	Listing the Google Ads accounts your Google user can access, listing their campaigns, ad groups and ads, and setting a target’s status to Paused or Enabled.

Google asks for your consent each time you connect.

TikTok Ads permissions

Permission	What Guardified uses it for
`advertiser.info.basic`	Showing your advertisers’ names.
`campaign.read`, `adgroup.read`, `ad.read`	Listing campaigns, ad groups and ads in the target picker.
`campaign.write`, `adgroup.write`, `ad.write`	Switching a target off (Disable) and on (Enable).

Guardified uses the write permissions on every platform for one thing only: the status of the targets you add to your guards. It does not create, edit or delete campaigns, ads, budgets or audiences.

What Guardified keeps about a connection

For each connected platform, one record per store:

The active account: the ad account, customer account or advertiser Guardified works in.
The accounts you can reach, with what the card shows about them: name, currency and status; on Meta also the business name and the usernames of linked Instagram business accounts.
The access the platform issued: the tokens that let Guardified act for you, and when they run out. Guardified renews them when they are about to expire and it sends a pause or resume.

For each ad target on a guard, Guardified keeps the platform, the level (campaign, ad set, ad group or ad), the object’s ID and name, and the account it was picked from.

What Logs keep

Every pause and resume adds one row per target to Logs under Platform Actions. Its details hold the platform’s answer: status code, request ID, error code, the number of attempts, and short excerpts of the request and the response.

Before an excerpt is stored, tokens, secrets and authorization values in it are replaced with [REDACTED], and the excerpt is cut to 2,048 characters. Access tokens never appear in Logs.

Disconnecting and removing access

These are two different steps:

Disconnect in Guardified’s Settings deletes the stored connection, with its tokens. Guardified can no longer reach that platform for your store.
Your platform account still lists Guardified among its connected apps until you remove it there. If you want that too, remove Guardified in the connected-apps settings of your Facebook or Meta Business account, your Google Account, or TikTok For Business.

Uninstalling

Uninstalling Guardified from your Shopify store deletes every ad platform connection, along with your guards, their targets, saved email addresses and logs. Reinstalling starts with nothing connected.

More on the data Guardified keeps for your store is in Data and privacy.