Aflame AI
Account Access & Data Security

Your accounts stay yours

AflameAI connects through each platform's own authorization — Google, Meta, TikTok and YouTube. We never need your platform passwords. Each platform shows you what you're granting, and you can take access back at any time.

  • Google Business Profile
  • Google Ads
  • Facebook
  • Instagram
  • YouTube
  • TikTok

AflameAI is an independent service provider and is not affiliated with, partnered with or endorsed by these platforms.

01 / How authorization works

It all happens on the platform's own pages

  1. 1

    You click Connect

    In your AflameAI portal, pick the platform to connect.

  2. 2

    The platform's own page opens

    It belongs to Google, Meta or TikTok. You sign in there.

  3. 3

    You review and approve

    The platform lists what this authorization includes. You decide.

  4. 4

    We receive a token

    A revocable token, not your password. It is stored encrypted.

  5. 5

    Take it back anytime

    Disconnect in your portal, or remove us in the platform's settings.

What we can do

  • Read the data your active services need
  • Publish content you have approved
  • Carry out actions you have confirmed, in features that are open to your account
  • Build and optimize campaigns under a Google Ads management service

What we can't do

  • See or store your platform passwords
  • Act outside the access the platform granted
  • Take ownership of your account or change your payment method
  • Stop you from disconnecting or revoking access
  • Publish content or reply to reviews without your confirmation
02 / Three ways to give access

There are three common ways to give a provider access

They work differently. Here is how each one works, and where AflameAI uses it.

Platform authorization (OAuth)

Password needed
No
Where it happens
The platform's authorization page
Can you see the scope
Listed by the platform when you approve
How to take it back
Disconnect in the portal, or remove in platform settings
Account ownership
Unchanged
Where AflameAI uses it
Google Business Profile, Google Ads data view, Facebook, Instagram, YouTube, TikTok

A management role inside the platform

Password needed
No
Where it happens
The platform's access settings
Can you see the scope
Defined by the platform's role
How to take it back
Remove it inside the platform
Account ownership
Unchanged; no ownership transfer
Where AflameAI uses it
Google Ads management (manager account link)

Sharing the account password

Password needed
Yes
Where it happens
No separate authorization step
Can you see the scope
Same as signing in as you
How to take it back
Change the password
Account ownership
Unchanged, but credentials are shared
Where AflameAI uses it
Never
03 / Platform by platform

How you authorize, what we get, how you take it back

This is the general picture. Step-by-step instructions and service details live on each service page.

Google Business Profile

How you authorize
On Google's authorization page.
What we get
We read your profile and reviews; AI reply suggestions are confirmed by you. Review replies and updates are posted only after you confirm each one. We don't edit your profile.
How to take it back
Disconnect in your portal and we also send Google a revoke request, or remove us in your Google Account settings.
After you disconnect
Tokens, location data and reply suggestions are deleted right away. Records of published replies are kept for 12 months. Photos, videos and update records you submitted are not deleted on disconnect; delete them in your dashboard or email us.
Google Business Profile service

Google Ads · manager access

How you authorize
You accept a link request from our manager account inside Google Ads. No authorization page and no password involved.
What we get
We build and optimize campaigns as agreed in the management service. No account ownership, no changes to your payment method.
How to take it back
Remove it in Google Ads under Access and security. You don't need to go through us.
After you disconnect
We hold no token for this. Removing the link does not pause campaigns that are running.
Google Ads service

Google Ads · portal data view

How you authorize
On Google's authorization page.
What we get
Currently read-only: it shows your ad data in the portal and does not change your ads.
How to take it back
Disconnect in your portal and we send Google a revoke request.
After you disconnect
The whole connection record is deleted. No token is kept.
Google Ads service

Facebook / Instagram

How you authorize
On Meta's authorization page. No Facebook or Instagram password is needed.
What we get
We publish content you have approved and read performance data for your Page and posts. What we can do depends on the permissions you approve.
How to take it back
When you disconnect in your portal, we delete the stored token right away and stop accessing the account. To fully revoke on Meta's side, also remove the app in your Facebook settings.
After you disconnect
Tokens and statistics are deleted right away. A token-free disconnected record and records of published content are kept.
Social media service

YouTube

How you authorize
On Google's authorization page.
What we get
We read basic channel information and upload videos you have approved. We don't read comments or subscriptions.
How to take it back
Disconnect in your portal and we also send Google a revoke request, or remove us in your Google Account settings.
After you disconnect
Tokens are cleared right away, and channel-related data is cleaned up within 7 days.
Social media service

TikTok

How you authorize
On TikTok's authorization page.
What we get
We publish videos and photos you have approved and read basic account and post data. What is available depends on the scopes TikTok has approved.
How to take it back
Disconnect in your portal and we also send TikTok a revoke request, or remove us under Manage app permissions in TikTok.
After you disconnect
Tokens are cleared right away. A token-free disconnected record and records of published content are kept.
Social media service
04 / Disconnecting and your data

Done with us? It's simple.

Click Disconnect in your portal and we delete the stored token right away and stop accessing the account. For most platforms we also ask the platform to revoke the authorization. For Facebook and Instagram, you currently also need to remove the app in your Facebook settings to fully revoke it on Meta's side.

Disconnecting does not erase every record. Records of published content, billing and necessary operational logs are kept for the periods set out in our Privacy Policy.

Tokens

Stored encrypted, deleted when you disconnect, and not kept for any other use.

Business records

Such as published content, review-reply records and billing. Social publishing logs are kept for up to 180 days.

Want it deleted sooner

Email [email protected] with the platform and account. We verify your identity and process the request.

Full termsPrivacy PolicyTerms of ServiceData Deletion
05 / FAQ

What people ask most about access and data

Will AflameAI see my password?

No. Sign-in and authorization happen on Google's, Meta's or TikTok's own pages. All we receive is a revocable authorization token, never your password.

Can I take access back at any time?

Yes. Disconnect in your AflameAI portal, or remove us in the platform's own settings. Google Ads manager access is removed inside Google Ads under Access and security.

After I disconnect, can AflameAI still act on my account?

No. We delete the stored token right away and stop accessing the account. For Facebook and Instagram, we recommend also removing the app in your Facebook settings so it is fully revoked on Meta's side.

Does AflameAI become the owner of my account?

No. Authorization grants access to act, not ownership. A Google Ads manager account link also does not involve account ownership or your payment method.

Why does the authorization page sometimes list so many permissions?

Platforms bundle permissions, and some have no narrower version. Google Ads, for example, has a single scope and no separate read-only one. We only do what your active services need.

Does AflameAI sell my data to third parties?

No. We do not sell or rent personal information. See our Privacy Policy for details.

What happens to my data when I stop using the service?

Tokens are deleted when you disconnect. Records of published content, billing and necessary operational logs are kept for the periods in our Privacy Policy. To have data deleted sooner, email [email protected].

What is the difference between Google Ads manager access and the read-only connection?

Manager access is a link you accept inside Google Ads from our manager account, used to build and optimize campaigns in the management service. The read-only connection is a Google authorization made in your portal, currently used only to show you your ad data without changing your ads. They are independent, and you can end either one on your own.

Still have a concern?

Ask us anything specific before you connect an account.

Contact us Read the Privacy Policy

Google, Google Ads, Google Business Profile and YouTube are trademarks of Google LLC. Facebook, Instagram and Meta are trademarks of Meta Platforms, Inc. TikTok is a trademark of TikTok and its affiliates. AflameAI is an independent service provider and is not affiliated with, partnered with or endorsed by these companies.