Encryption in transit
TLS / SSL protected
Data moving between your browser, Backona, and connected services is protected in transit.
Backona is built to feel safe from the first login. Source platforms keep permission control, customer data is not used to train AI models, and access is protected by clear security controls.

The basics are handled with discipline
Backona focuses on the controls that matter most when customers trust a platform with marketing data: authenticated access, secure transport, scoped integrations, and explicit data handling.
Encryption in transit
Data moving between your browser, Backona, and connected services is protected in transit.
Secure sessions
Session identifiers and login cookies are tied to the authenticated user and cleared on logout.
CSRF and OAuth
We use CSRF protection and OAuth state validation so only approved actions and permissions flow through.
Restricted access
Sensitive credentials and tokens are stored with restricted internal access and operational controls.

A workspace invite does not unlock source data
A person can be invited into Backona AI without gaining automatic access to Google Analytics, Google Ads, Search Console, or Meta data. The source platform still decides what is available.
1. Invite access in Backona
A user joins the workspace, but the invite alone does not create source permissions.
2. Source platforms check permissions
Google, Meta, and other connected services continue to enforce their own access rules.
3. Only approved data appears
Backona only works with the data the user is already allowed to see.
Your data is used to answer your question, not to train a general model
Backona uses connected customer data to power the experience you asked for. It does not use that data to educate a general AI model on unrelated use cases.
I'm bringing your data to you and no one else
No training
Customer data is not used to train general models.
No bypass
AI features do not bypass source permissions.
Backona is designed to feel safe from the first login
Access
Source platforms stay in control of what users can see.
Security
Encryption, sessions, CSRF, and scoped integrations are built in.
AI policy
Customer data is used for the service, not for general AI training.
Control
Customers keep deletion and connection control.
Unlock your marketing insights and make your team more data-driven