Who owns your data? Your guide to ad account access

In the rush to launch a new marketing campaign, boring administrative details often get shoved aside. You want to see ads live, traffic flowing and leads converting. We get it.

But business owners often ignore one boring detail. It can cost your business thousands of dollars. It can trigger platform bans. It can wipe out years of historical data.

That detail is ad account access.

We believe best in class service goes beyond high-performing ad copy. It is about structural integrity and data ownership. We frequently step in to fix broken access chains across Google, Meta and Microsoft. So we are accepting the challenge to explain why how you grant access matters just as much as who you grant it to.

The horror stories: when "it'll be fine" wasn't fine

Let's start with the nightmare scenarios. These aren't hypothetical. They are composites of real situations we help business owners navigate every month.

The "Steve" scenario (Google Ads)

Imagine you hired a freelancer three years ago to set up your Google Ads. They were great, affordable and quick.

They set up the account under their personal Gmail address (e.g. ads.expert.steve@gmail.com) because it was faster.

Fast forward to today. Steve has moved on. He changed careers. Perhaps you parted ways on bad terms.

Suddenly, you need to update your credit card or change your strategy. You try to log in. You realise you can't.

You don't have the password. You email Steve. The email bounces.

The result?

Losing access isn't just inconvenient. It forces a hard reset on your business intelligence.

The platform effectively locks you out of your own business asset. You have to start from scratch. This means a new account, zero history and a learning phase that wastes budget for weeks.

The "fake user" trap (Meta)

This issue is specific and dangerous with Meta. Business owners often feel uncomfortable linking personal Facebook profiles to business ads.

So they create fake dummy profiles to hold the assets. They use names like "Admin Staff" or "Marketing User".

This is a ticking time bomb.

Meta enforces a strict Real Identity policy. Their security bots actively hunt down profiles that don't represent a real human being.

If a fake profile owns your ad account and Meta bans it, you lose everything.

You cannot upload a driver's licence for a fake person to verify identity. Meta permanently disables the account.

Every asset attached to it freezes forever. This includes your pixel data, your audiences and your active campaigns.

The "agency hostage" situation

Some unscrupulous agencies create accounts inside their own master account without linking you as an admin. When you try to leave them, they say, "Sorry, that account belongs to us. We can't transfer the data."

They hold your historical performance data hostage to keep you paying their retainer.

These stories highlight a critical truth. Access is ownership. If you don't control the access, you don't own the data.

The true cost of starting over

We need to talk about what you actually lose when you lose an account. It is more than just settings and keywords.

1. The zombie account risk

The scariest part isn't what you lose. It is what remains. That old account still exists. It still has your credit card attached.

If a hacker breaches that account, or if an automated rule triggers a dormant campaign, the platform will bill you.

You cannot log in to pause it. Your only option involves cancelling business credit cards.

Have you ever tried to cancel a credit card locked inside an account you can't access?

It is a nightmare. You have to call the bank. You report it lost. You wait for a new card.

Then you must update payment details across every other subscription you have - software, utilities, subscriptions. It disrupts your entire business operation, not just your ads.

2. Loss of historical data (the AI factor)

Advertising these days runs on artificial intelligence. Google and Meta's algorithms rely on history to bid effectively. They look at what happened last month and last year to decide who sees your ads today.

When you start a new account, you force the algorithms back into the learning phase. You essentially pay to learn the same lessons twice. You waste budget while the system catches up to where you were three years ago.

3. You lose your retargeting data

All those tracking pixels on your site point to the old account. This means you lose your retargeting audiences. These are the lists of people who visited your site but didn't buy.

You have to install new pixels. Then you wait months to rebuild those audience pools from zero before you can market to them again.

Playing by the platform's rules

We are meticulous when setting this up correctly for another reason: compliance.

We don't operate in a vacuum. We play in the sandboxes of tech giants like Google, Meta and Microsoft. They have strict rules about accessing accounts. Breaking them puts your business at risk.

Password sharing is a bannable offence

The old school method of I'll just give you my login and password creates a massive liability.

Meta: Facebook often locks accounts immediately if it detects a login from a new location. If we log in to your personal account from the Refuel office, we trigger security bots. Severe cases result in permanent bans for the user profile. This kills your ability to advertise forever.

Google & Microsoft: Similar security protocols apply here. Frequent logins from different IPs trigger security lockouts. These require 2FA codes sent to your phone at 2 am.

Best in class means playing by the rules. These platforms built Agency and Partner protocols for a reason. Using them protects your account standing.

The Refuel guide to proper access

So how should it look? Here is the breakdown of how we structure access to ensure you retain ownership while we do the work.

Google Ads: The MCC (Manager Account)

Business owners often instinctively hit the plus button to add a new user by email when granting access.

“I’ll just add marketing-manager-sarah@agency.com as an admin.”

This seems harmless. But it opens a security hole.

The personnel problem. What happens when Sarah quits the agency, if you invited her as a direct user?

If the agency lacks strict offboarding protocols, Sarah might still have admin access to your credit card. You rely on the agency's internal HR processes to keep your data safe.

The solution? Link to Manager Account. Instead of adding a person, we link your account to the Refuel Creative Manager Account (MCC).

• Security: We manage who within our team sees your data. If an employee leaves Refuel, we remove them from our MCC. They instantly lose access to your account. You never have to worry about our staffing changes.
• Audit trails: Google tracks changes made by the manager account. This keeps a clear separation between your internal team and our agency actions.

Meta: Why you must own the Business Portfolio

Meta (Facebook and Instagram) is the most complex platform for access. There is a critical distinction between the Ad Account and the Business Portfolio (formerly Business Manager).

Think of the Business Portfolio as the house. Think of the Ad Account as a room inside it.

If an agency creates the Business Portfolio and just invites you in as an employee, they own the house.

This matters because modern tracking assets live at the House level. This includes your Domain Verification and your Meta Pixel (Dataset).

The Refuel Standard:

1. You own the House. You must have your own Business Portfolio.
2. You own the Domain. You verify your website domain inside your portfolio.
3. We are Partners. We request Partner access to share assets.

This ensures that if we part ways, you simply remove our Partner access. You keep the House, the Room and all the furniture (data) inside it.

Microsoft Advertising

Microsoft operates similarly to Google. We request to link to your account as an agency. This preserves your administrative rights while giving us the tools we need.

LinkedIn Campaign Manager

LinkedIn is often the silent offender in access issues. Many businesses accidentally run ads from a personal ad account attached to the Marketing Manager's LinkedIn profile.

When that manager leaves, they take the ad account with them.

We ensure your official LinkedIn Company Page owns your LinkedIn Ad Account, not a person. Then, we request access as a Partner to that ad account. This ties the asset to your brand entity, not a transient employee.

TikTok Business Center

TikTok has followed Meta's lead. They use a Business Center structure that mirrors Meta's Business Portfolio.

The same rules apply here. You must create the TikTok Business Center. You must own the pixels. We simply request Partner access to manage the campaigns.

Allowing an agency to create the Business Center puts you at risk. If the relationship ends, you could lose your creative assets and audience data.

Frictionless security: why we use a specific link

If these Partner methods are so much better, why doesn't everyone use them?

To be honest, platforms make the process annoying.

It is a hassle to find your 10-digit customer ID. It is difficult to find the Partners tab deep in Meta Business settings. Confirming the request via email often fails.

This friction explains why people default to the insecure ‘add a user’ method.

That is why at Refuel, we insist on using a dedicated onboarding tool. It bridges the gap between high security and user experience across Google, Meta, LinkedIn and Microsoft.

• How it works: We send you a specific, secure link. You log in with your credentials. The tool automatically detects your ad accounts and business assets. With one click, you grant partner access (not user access) to the correct assets.
• Why we use it: It eliminates the PhD in platform interfaces requirement. You don't need to know where the button is. The tool forces the correct permission level automatically.

We invest in this process to ensure your security protocols are perfect from day one. This prevents the accidental admin error. It ensures the link relies on correct agency protocols. This protects both of us.

How to check your current status (A mini audit)

Do you know who holds the keys right now? You can check your status quickly.

For Google Ads:

1. Log in to Google Ads.
2. Click Tools & Settings (or the wrench icon).
3. Click Access and Security.
4. Look at the Users tab. Are there old emails there? Remove them.
5. Look at the Managers tab. You should see your agency listed here.

For Meta (Facebook):

1. Go to https://www.google.com/search?q=business.facebook.com/settings.
2. Click People. Do you see past employees? Remove them.
3. Click Partners. You should see your agency listed here.
4. Click Ad Accounts. Check who owns the ad account. It should be your business name, not the agency's name.

For LinkedIn:

1. Go to Campaign Manager.
2. Click the gear icon (Settings) next to your account name.
3. Click Manage Access.
4. Ensure your Company Page owns the account, not an individual.

The philosophy of ownership: transparency as a feature

How an agency asks for access tells you everything you need to know about how they view the relationship.

Run if an agency is evasive about who owns the account. Run if they insist on creating a new account that you can't access for proprietary reasons.

Our philosophy is simple: the client is the asset owner.

• You pay the bills: You pay the platforms directly. We don't want to be the bank. This ensures you always have financial control and earn the credit card points.
• You own the data: If we part ways tomorrow, you keep everything. The keywords, the lookalike audiences, the conversion tracking, the ad copy testing. It is all yours.

We want you to stay with us because we deliver results. We don't want you to stay because we locked the door and hid the key.

Implementing proper access protocols is a small technical step. But it represents a massive philosophical leap. It says that we respect your business enough to protect it. It says that we are confident enough in our work to give you full transparency.

When we ask you to click that link, we aren't just asking for access. We are establishing a partnership based on trust, security and absolute ownership.

Is your ad account actually yours?

Are you unsure who actually holds the keys to your Google, Meta or Microsoft ad accounts? Do you worry that an old freelancer might still have access to your credit card?

Don't wait until the platform locks you out to find out.

Click here to claim your free Ad Account Audit