Security & data handling
Caybl.ai only does what you explicitly allow it to. Access is granted through Google’s standard consent screen, credentials are encrypted at rest, and you can revoke access at any time by disconnecting. This page is a plain-language walkthrough - for the formal policy, see our Privacy Policy.
Scoped by design
Caybl.ai requests Google’s Analytics scope, which covers running reports plus two narrow write actions - marking a GA4 event as a key event, and linking a Google Ads account to your property. It cannot change any other GA4 settings, delete anything, or touch your website. Connecting Google Ads is separate and optional: read access works on its own, and write access - creating or changing campaigns, budgets, keywords, and ads - only switches on for an account when you explicitly turn it on in your dashboard.
No tokens to handle
You connect Google Analytics through Google’s own “Sign in with Google” consent flow - the same one you’d see for any trusted app. Caybl.ai never receives your password, and you never paste an API key or config file. The access Caybl.ai receives is stored encrypted at rest and used only to fetch the data you ask for.
Your AI, your data path
Caybl.ai connects to the AI agent you choose - Claude or ChatGPT. The reasoning runs on your own agent under your own terms; Caybl.ai’s job is only to fetch the Google Analytics data needed to answer a question. Your analytics isn’t sent anywhere it doesn’t need to go.
The in-app assistant (Ask)
If you ask questions inside the Caybl.ai dashboard instead of in your own AI, the answer is generated by Anthropic’s Claude API. Your question, plus the data Caybl.ai’s tools return for that question, is sent to Anthropic to write the answer. A small Claude model (Haiku) also checks each question is on topic and gives new chats a title. Anthropic doesn’t use API data to train its models by default, and keeps API inputs and outputs only under its standard API data retention.
Chat transcripts are stored by Caybl.ai in the EU (AWS eu-west-1) and deleted automatically 30 days after a chat’s last message. You can delete a chat, or all your chats, at any time - they’re removed from our database straight away, not just hidden. Your credit history keeps only the date and amount of each charge, never the question.
The assistant can’t change your accounts by itself. When it suggests a change - adding negative keywords, pausing or enabling a campaign, or changing a budget - it shows you a card, and nothing happens until you click to apply it. Every action, from the assistant or your own AI, respects the read/write switches you’ve set for each account. Usage logs record metadata only (tool name, status, row count), as they do today - never your analytics content.
EU hosting & minimal processing
Caybl.ai runs in the EU (eu-west-1). It doesn’t warehouse your analytics - data is fetched on demand to answer a question and not retained beyond that. Usage tracking, which powers the “questions this month” view in your dashboard, records metadata only (which tool ran, when, how many rows, success or failure) - never the contents of your reports.
Disconnect anytime
You’re in control of the connection. Disconnecting in your dashboard removes the stored connection and revokes Caybl.ai’s access to your Google Analytics.
What we collect
To run Caybl.ai we store: your account email (from Google or the email you sign up with), an encrypted Google Analytics access credential once you connect a property, and metadata about each question your agent asks (tool name, timestamp, row count, success/failure, latency). We do not store the analytics data returned by a query, or the content of your questions - except chat transcripts if you use the in-app assistant, which are kept for 30 days as described above.
Who we share it with
Google Analytics data is fetched from Google on demand and passed to the AI agent (Claude, ChatGPT, or another MCP-compatible client) that you connected and are actively using - that agent processes it under your own account with that provider. Our infrastructure runs on Amazon Web Services (eu-west-1); AWS acts only as our hosting provider and does not use your data for its own purposes. If you use the in-app assistant, your question and the data returned for it go to Anthropic to generate the answer, as described above. We do not sell data or share it with advertisers.
Google API Services User Data Policy
Caybl.ai's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Retention & deletion
Your encrypted Google Analytics credential is kept until you disconnect, at which point it and Google's grant are deleted immediately. Usage metadata is kept for as long as your account is active so your dashboard can show recent activity, and is deleted with your account. Chat transcripts are deleted 30 days after a chat's last message, or straight away when you delete them. You can request account and data deletion at any time by contacting us below.
Who runs Caybl.ai
Caybl.ai is an independent, bootstrapped product - see About for more. Support requests get a direct answer, not a ticket queue.
Contact
Questions about this page, or requests to access or delete your data: support@caybl.ai. For the terms that govern using Caybl.ai, see our Terms of Service; for the full legal Privacy Policy, see here; for a Data Processing Agreement, see here.
No tokens, revoke anytime
Connect Google Analytics and ask questions in the AI you already use.
Get started freeFAQ
Can Caybl.ai change my Google Analytics or my website?
Mostly no. Caybl.ai requests Google's Analytics scope, which lets it report on your data and perform two specific actions - marking a GA4 event as a key event, and linking a Google Ads account to your property - when your agent asks for them. It cannot change any other GA configuration, audiences, or your site.
Can Caybl.ai spend my Google Ads budget?
Only if you connect a Google Ads account and explicitly turn on write access for it. Read access works immediately and by itself. With write access on, changes can be dry-run first and anything newly created that could serve is paused by default - but you're in control of the switch, per account.
What can Caybl.ai do with Bing Webmaster Tools?
If you connect Bing Webmaster Tools, Caybl.ai signs in through Bing's own consent screen and can read your Bing search data, crawl status and backlinks. When your agent asks, and only where you allow changes, it can also submit URLs or a sitemap for indexing and add or verify a site. It cannot remove sites, block URLs or change crawl settings. Changes can be switched off for the whole connection or per site.
What can Caybl.ai do with Microsoft Advertising?
If you connect Microsoft Advertising, Caybl.ai signs in through Microsoft's own consent screen (a Microsoft login is required) and can read your campaigns, ad groups, keywords, ads, performance and search terms. Only where you allow changes, and with a preview first, it can also pause or resume items, adjust bids and budgets and add negative keywords or paused keywords and ads. Changes are off by default and can be switched off at any time.
Do you store my Google password or tokens I can see?
No. You authorize Caybl.ai through Google's own consent screen. The resulting access is stored encrypted; you never see or handle a token, and Caybl.ai never receives your Google password.
Where is my data processed?
Caybl.ai runs in the EU (eu-west-1) and processes only what's needed to answer your question. Analytics data isn't warehoused - it's fetched on demand.
What happens when I disconnect?
Disconnecting removes the stored connection and revokes Caybl.ai's access to your Google Analytics.