Why AIM asks for Google permissions
Each Google permission AIM asks for, what you get from it, what it reads, and how your data is handled.
AIM connects to your Google accounts so its agents can work from your real results instead of guesses. Google asks you to approve each permission, and this page explains why AIM asks for it and what you get in return.
Each permission is requested only when you connect that account, and you can leave out any account you do not use.
What each permission gives you #
| When you connect | Permission | What you get | Without it |
|---|---|---|---|
| Google Ads | See, edit, create, and delete your Google Ads accounts and data | Search ads written for your business inside your budget, published when you approve them, with budget, audience, results, and a pause button in one place | You would rebuild each ad by hand, and AIM could not see or stop it |
| Google Analytics | See your Google Analytics data (read-only) | Plain visits, conversions, landing pages, and channels with filters, plus a written view of what to do next | Reports could not tell an ad that brings customers from one that only brings clicks |
| Google Search Console | See your Search Console data (read-only) | Articles planned around the searches people really use to find you | Article topics would be guesses |
| Google Tag Manager | See your Tag Manager setup (read-only) | A warning about missing or unpublished tags before you spend on ads | You would find tracking problems after the budget had gone |
Google offers only one permission for Google Ads, and it covers both reading and changing. The other three are read-only, the narrowest Google offers for what AIM does.
What AIM does in Google Ads #
The Google Ads permission is broad, so here is exactly how AIM uses it.
- It creates only what you approve. AIM creates one Search campaign when you click Approve and publish. The campaign goes live straight away, inside your budget.
- It changes only its own campaigns. AIM pauses, resumes, changes the budget of, or removes a campaign it created, when you ask or approve the change. It never edits campaigns it did not create.
- It stays inside your budget. The ads AIM runs cannot add up to more than your monthly budget.
- It never touches billing. AIM cannot change your payment details or account settings.
If you turn on automatic approval, AIM publishes and adjusts ads inside your budget without the click, and emails you what changed. It is off until you turn it on.
What AIM reads #
| Account | What AIM reads | What it does not read |
|---|---|---|
| Google Ads | Your accounts, then spend, clicks, impressions, and conversions, plus the campaigns, ads, and keywords AIM created | Search terms, billing details |
| Google Analytics | Your properties, then totals for visits, users, page views, key events, and engagement, by day, channel, landing page, device, and country | Anything about an individual visitor |
| Google Search Console | Your sites, then clicks, impressions, and positions, plus your top searches and pages | Anything about an individual searcher |
| Google Tag Manager | Your containers, then counts of tags, triggers, and unpublished changes | The contents of your tags |
How your data is handled #
- Your password stays with Google. Google gives AIM an access grant, which is encrypted and stored only for your workspace.
- Your workspace is yours. Your Google data is never shown to or mixed with another customer's.
- AI agents see totals, not access. To write your reports and suggestions, AIM sends totals such as weekly visits and ad results to its AI model provider. Your access grant is never sent.
- It does not train AI. AIM does not use your Google data to train generalized AI models, and does not allow its model provider to.
- It is not sold. AIM does not sell your Google data or use it for advertising.
The filtered numbers on the Website results tab are read from Google when you open them, kept for 15 minutes, and not sent to the AI model.
AIM's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The privacy policy has the full details.
How to remove access #
- Open Integrations, choose the account, and open Overview.
- Click Disconnect. AIM's access is deleted straight away.
- To remove the grant on Google's side too, open your Google Account and remove AIM under Third-party apps & services.
Ads already running in Google Ads keep running after you disconnect, so pause them first if you want them to stop. Totals AIM already read stay in your workspace until you delete it or ask us to delete them.