Skip to content

Security

How Nightro protects your account.

Access, encryption, the checks on every change, and what we never do with your data.

Google-reviewed
Google reviewed and approved how Nightro uses Google Ads access
AES-256-GCM
Google sign-ins and site keys sealed again with our own key
Row-level security
On every table, so each business reads only its own rows
7-day undo
Every change recorded with who allowed it and why

How a change travels

The same six steps for every change.

Approved by you, confirmed in the chat, or made on Autopilot.

  1. Step 1

    Proposed

    Nightro's checks or Nightro AI prepare a change with its evidence. The AI cannot write to Google Ads itself.

  2. Step 2

    Checked

    Your budget, your limits, campaigns still settling and recent no's are checked before anything moves.

  3. Step 3

    Allowed

    You approve it, or on Autopilot it waits its notice (48 hours for bigger changes) so you can stop it.

  4. Step 4

    Re-read

    Right before writing, Nightro reads the live account again and stops if anything changed.

  5. Step 5

    Applied

    One executor makes the change through Google's official API. Nothing else writes.

  6. Step 6

    Recorded

    Who allowed it, why, and what it replaced, with one-click undo for 7 days.

In detail

What we do, and what we never do.

Your Google account

  • You sign in and allow access on Google's own screen. Nightro never sees your Google password.
  • Nightro reaches Google Ads only through Google's official Google Ads API.
  • It never changes billing or payments. Who can open your account changes only if you ask Nightro to invite its team.
  • Remove Nightro's access at any time at myaccount.google.com/permissions, and all reading stops at once.

Encryption

  • Everything travels over HTTPS.
  • Data is encrypted at rest by our database host.
  • Saved Google sign-ins and website keys are encrypted again with AES-256-GCM, using a key only Nightro's servers hold.

Who can see what

  • Each business is its own workspace. Only the people invited to it can open it.
  • Row-level security is on for every table in the database, and every action checks access again on the server.
  • Sign-ins last at most 30 days and are checked against the team list on every action. Owners remove people in Settings, Team.

AI with limits

  • Nightro AI can only propose changes. Writing to Google Ads goes through the same checks as everything else.
  • Every number it shows or says comes from your own account data.
  • We never use your data to train AI models, and our AI provider does not train on it under its business terms.

Running it safely

  • Every write, from your approval to an emergency pause at 3 AM, runs through one executor that reads the live account and re-checks the rules first.
  • New kinds of writes are proven against Google with validate-only checks that change nothing.
  • Health checks run around the clock, and Nightro checks its own reading of each account every day.

Your data, your call

  • We never sell your data and never use it for advertising.
  • Customer data goes back to Google only when an owner switches it on.
  • Ask us for a copy or deletion at any time. The Privacy Policy explains how long we keep each kind.

Security reports

Found a security issue? Tell us.

Send the details and the steps to reproduce it. Give us a fair chance to fix it before telling anyone else, and never read or change other people's data while testing.

admin@nightro.aiRead the Privacy Policysecurity.txt