Connecting Google Ads to Buddy
What Buddy asks Google for
When you sign in with Google, the consent screen asks for these permissions, and only these:
| Permission | Why |
|---|---|
Google Ads (adwords) |
Read reports and, only after you approve a change, edit campaigns. Google offers no read-only Ads scope, so this one permission covers both. |
Google Drive, app files only (drive.file) |
Save exports and reports you ask for. Buddy can only see files it created or that you open with it. |
Search Console, read-only (webmasters.readonly) |
Answer organic search questions alongside paid data. |
Basic profile and email (openid email profile) |
Identify your Buddy account. |
Buddy does not request Gmail, Calendar, Contacts, or full Drive access. Buddy never sees your Google password; Google issues an access token, which Buddy stores on Cloudflare's infrastructure, encrypted at rest.
Which accounts Buddy can reach
Buddy sees exactly the Google Ads accounts your Google login can see, nothing more. Google enforces this on every request. If you work through a manager account (MCC), sign in with a login that has access to the manager, then ask Buddy to list the accounts underneath it and pick one.
If Buddy reports permission denied for an account, your login doesn't have access to it. Ask the account owner to add your Google login in Google Ads under Admin → Access and security.
Disconnecting and revoking access
- Sign out in Buddy deletes the stored Google token from our side right away. That also ends any MCP connections that used this session.
- Revoke at Google: open Google Account → Third-party connections, find Buddy in the list, and remove access. That cuts Buddy off even if you are still signed in elsewhere.
- Delete your account: follow account deletion. We cancel any website subscription, revoke the Google token, and erase your conversations, memories, exports, and account records.
How long a connection lasts
A Buddy sign-in lasts 90 days. Google can end it sooner, for example if you change your Google password, remove access, or a Workspace admin restricts third-party apps. When that happens Buddy will say the token failed; sign out and sign in again.
Something here wrong or out of date? Tell us and we will fix the page.