Security and privacy
Letting an assistant near your social accounts should feel safe. These are the guarantees AdVentur.ai builds in, whichever assistant you connect.
Nothing posts without you
Section titled “Nothing posts without you”- New posts are drafts that wait in Review. They go out only after you approve them, in the app or by asking your assistant to.
- Replies are drafted, never sent, until you approve the exact text.
- Tools that publish or delete say so in their annotations, so clients like Claude can ask before running them.
You choose what an assistant can do
Section titled “You choose what an assistant can do”When you connect, the consent screen lists the permissions the assistant asked for. Untick any you don’t want: tools that need a permission you didn’t grant are hidden from the assistant and refused if it calls them anyway. Read access (mcp:read) is always required; writing, scheduling, publishing, deleting and brand changes are each separate.
The consent screen also shows where the assistant will send you back to, so you can spot a client that isn’t what it claims to be.
Standard, short-lived sign-in
Section titled “Standard, short-lived sign-in”- The MCP server uses OAuth 2.1 with PKCE (S256 only) and dynamic client registration. Your password never reaches the assistant.
- Access tokens last one hour. Refresh tokens last 30 days and are replaced every time they’re used, so a stolen one stops working after its next use.
- Tokens are stored as hashes, never in plain text.
- Revoking a connection in AdVentur.ai ends its access straight away, including tokens already issued. Removing the connector in your assistant stops that client using it; revoke it in AdVentur.ai to invalidate its tokens too.
Every call is logged
Section titled “Every call is logged”Each tool call is recorded against your workspace with the tool, the user and the outcome, so you can see what an assistant did and when. Product analytics record which tools are used and the types of the arguments, never their values, so the content of your posts and prompts isn’t sent to analytics.
Limits that protect you
Section titled “Limits that protect you”Each user can make 60 tool calls a minute. Usage credits cap spending on AI features each month, and publishing never spends them. See Limits and usage.
Your data
Section titled “Your data”AdVentur.ai stores what you create and the tokens needed to post on your behalf, encrypted at rest in AWS. Social accounts can be disconnected at any time from Settings → Accounts. Read the privacy policy, the terms and how to delete your data.