For agencies that grow D2C brands
How does ai-dm handle data security for each brand?
ai-dm keeps each brand's data in its own separate space, never sells or shares it, and deletes it on request. Accounts connect by secure sign-in, so no passwords change hands. Every record is stored as it arrived, every number traces back to it, and nothing is written to a brand's accounts without your team's approval.
3 decisions in Moolwan's ledger, each approved by a person before it ran · Moolwanai-dm · Decision ledger · baseline frozen 26 Sep 2026 · real data
What you'll see in 10 minutes
- Your first brand's report, built from its domain alone, before any account is connected.
- Each platform's own sign-in screen when you connect an account, one channel at a time.
- An empty approval queue: nothing reaches a brand's accounts until your team approves it.
What do brands ask before they let an agency connect their accounts?
Second call with a new brand. The founder liked the audit, then forwards a questionnaire from their finance lead: who sees our data, can your tools change our ads, what happens if we leave. The deal waits until someone answers.
A vague answer stalls the deal. A confident answer that later proves wrong costs the brand. The questions are predictable, so the answers should be ready before the call, each with where it's written down. These are the ones that come up most.
| The brand asks | ai-dm's answer | Where it's written |
|---|---|---|
| Who can see our data? | Only people your agency gives access to; each brand's data is kept apart from every other brand's | Team roles, privacy policy |
| Is it sold or shared? | Never | Privacy policy |
| Can the tool change our ads on its own? | No; every change waits for a person to approve it, and is logged | Decision ledger |
| Do you hold our passwords? | No; accounts connect by secure sign-in and access can be removed at any time | Each platform's sign-in screen |
| Do you read our Shopify orders or customers? | No order, revenue or customer data from Shopify is read | Product scope |
| Can our data be deleted? | Yes, on request | Data deletion page |
How should an agency check a tool before connecting a brand's accounts?
Ask these six questions of any tool, ours included. They take ten minutes, and the answers go straight into the brand's questionnaire. A tool that can't answer one of them in writing isn't ready for a brand's accounts.
Check how accounts connect
Accounts should connect by secure sign-in on the platform's own screen, so no passwords are shared and the brand can remove access from that platform's settings at any time.
Check who can see what
Ask how team access works and whether one brand's data can ever appear in another brand's work. Each brand's data should sit in its own space.
Check whether the tool can act alone
Find out what the tool can change in a brand's accounts and who approves it. Nothing should be published, paused or edited without a person saying yes.
Check where the numbers come from
Every figure should open the raw record it came from, stored as it arrived. If records can be edited later, the numbers can't be trusted.
Check what happens to the data
Ask whether data is ever sold or shared, and where the list of service providers who process it is published.
Check how to leave
Before you connect anything, know how to export the reports you need and how to ask for the brand's data to be deleted.
In ai-dm, the record behind every figure is one click away on the evidence trail, and every approved change, with why it was made and what it should move, sits in the decision ledger. The full terms are in the privacy policy, and the data deletion page explains how to remove a brand's data.
How do you answer a brand's security questionnaire quickly?
Tick what the brand asked and send the answers. Each documented answer comes with where it's written. Anything we haven't documented on this site shows as a question to confirm with us in writing, never as a claim.
Build a brand's data-handling answer pack
Tick the questions in the brand's questionnaire. The pack updates as you go.
- Only the people your agency gives access to, through ai-dm's team roles. Each brand's data is kept separate from every other brand's.documented in ai-dm team roles and the privacy policy
- Never. Each brand's data and model stay private to that brand. The service providers that help run ai-dm are listed in the privacy policy.documented in the privacy policy
- No. Every change waits for a person on the agency's team to approve it, and each approved change is logged with what it was expected to move.documented in the decision ledger
- No. Accounts connect by secure sign-in on each platform's own screen, and access can be removed from that platform's settings at any time.documented in each platform's sign-in screen
- No. ai-dm reads no order, revenue or customer data from Shopify.documented in ai-dm's product scope
- Yes, on request. Export the reports you want to keep first, because deleted data can't be brought back.documented in the data deletion page
- Yes. ai-dm's tracking works with Google Consent Mode, OneTrust and CookieYes, and person-level IDs are issued only after the brand acknowledges ai-dm as a sub-processor.documented in the privacy policy
- No. Records are stored exactly as they arrived and never overwritten, and every number opens the record it came from.documented in the evidence trail
- Yes, on enterprise plans, with audit and security controls.documented in enterprise plan features
- Not documented on this site yet. Ask ai-dm and we answer in writing.ask us
- Not documented on this site yet. Ask ai-dm and we answer in writing.ask us
- Not documented on this site yet. Ask ai-dm and we answer in writing.ask us
- Not documented on this site yet. Ask ai-dm and we answer in writing.ask us
answer pack to send the brandHow ai-dm handles Dewleaf Skincare's data, as of 19 October 2026 • Who can see our data? Only the people your agency gives access to, through ai-dm's team roles. Each brand's data is kept separate from every other brand's. Documented in ai-dm team roles and the privacy policy. • Is our data sold or shared? Never. Each brand's data and model stay private to that brand. The service providers that help run ai-dm are listed in the privacy policy. Documented in the privacy policy. • Can the tool change our ads or posts on its own? No. Every change waits for a person on the agency's team to approve it, and each approved change is logged with what it was expected to move. Documented in the decision ledger. • Do you hold our passwords? No. Accounts connect by secure sign-in on each platform's own screen, and access can be removed from that platform's settings at any time. Documented in each platform's sign-in screen. • Can our data be deleted if we leave? Yes, on request. Export the reports you want to keep first, because deleted data can't be brought back. Documented in the data deletion page. To confirm in writing with ai-dm: • Do you hold security certifications such as SOC 2 or ISO 27001? • Where is our data stored? Questions: ai-dm@ai-dm.ai or WhatsApp +91 99458 05800.
Free, no login. Dewleaf Skincare and Northlight Growth are an illustrative example.
(login required) · Start from a brand's domain; connect accounts only when the brand is ready.
How does ai-dm protect a brand's data from sign-in to deletion?
The same rules apply to every brand, including our own. Accounts connect one channel at a time through each platform's sign-in. ai-dm stores what each platform reports exactly as it arrived, keeps every brand in its own space, and drafts changes that wait for your team's approval. When a brand leaves, its data is deleted on request.
3 decisions recorded · each approved by a person · every number linked to its record
On Moolwan, our own D2C brand, Search Console, GA4 and Meta Ads connect by secure sign-in, raw records are stored as captured, and Moolwan's data is kept apart from every other brand's. A decision to fix 24 invalid product rich-result items waited for a person's approval and was logged with a baseline frozen on 26 September 2026.
Connect only what each brand is ready for. A brand's first report needs nothing but its domain, and each account after that is a separate sign-in your team can remove later. You can see every channel ai-dm can connect, one at a time, and watch ai-dm run Moolwan under the same rules.
Related pages
Questions agencies ask about brand data
Does ai-dm sell or share brand data?
No. Each brand's data and model stay private to that brand. ai-dm never sells or shares them, and the service providers that help run ai-dm are listed in the privacy policy. Your agency decides who on its team can see each brand.
Can ai-dm change a brand's ad accounts on its own?
No. ai-dm drafts changes, such as new ads, posts, replies or budget moves, and every one waits in your approval queue. Nothing is written to a brand's accounts until someone on your team approves it, and every approved change is logged in the decision ledger.
How do a brand's accounts connect to ai-dm?
By secure sign-in on each platform's own screen, so nobody shares a password. The brand or agency can remove ai-dm's access from that platform's settings at any time, and connections can be added one channel at a time.
Who on the agency team can see a brand's data?
The people your agency gives access to. ai-dm has team roles and permissions for agency staff, and each brand's data is kept separate from every other brand's. A brand sees only its own portal and reports.
Can a brand's data be deleted?
Yes, on request. The data deletion page explains how to ask. Export any reports you want to keep first, because deleted data can't be brought back.
Does ai-dm read Shopify customer or order data?
No. ai-dm reads no order, revenue or customer data from Shopify. Shopify is used only for content and catalogue work, and revenue in reports comes from GA4 and the ad platforms, as each one reports it.
Does ai-dm have security certifications?
Ask us and we'll answer in writing. Enterprise plans include single sign-on, audit and security controls, and we answer brand security questionnaires directly. Email ai-dm@ai-dm.ai or WhatsApp +91 99458 05800.
No plan to pick. Billed in USD and INR. A brand's data is deletable on request.