Security — access, storage, and what we physically can't do

What we request: Viewer

A single OAuth permission adds our service account as a Viewer on your GA4 property. Read-only, scoped to that property, granted by you.

What we physically cannot do

Change your GA4 settings, add or remove other users, edit your site, access billing, or reach any Google product beyond the property you grant.

Where data lives

Queries run against your own GA4/BigQuery via the service account's own credentials. Report data is stored only as long as needed to generate and deliver your report.

Never used for model training

Your data produces your report and nothing else. It isn't folded into any training set, ours or a third party's.

HTTPS/TLS throughout

All communication is encrypted in transit. OAuth tokens are stored securely and never shared with a third party.

Offboarding

Revoke access anytime from your own Google Account permissions — one click, immediate, no ticket required on our end.

Compared to the free option

Not the same thing as GA4's built-in Ask Advisor

GA4's free assistant answers from your dashboard, in your dashboard. Polaris additionally walks your actual pages, cross-references your data against them, runs a verification pass, and puts a human in the loop before anything reaches you — a materially different scope of access and process, not just a nicer chat window.

	GA4 Ask Advisor	Polaris
Reads your GA4 data	Yes	Yes
Walks your actual pages	No	Yes
Verification pass on claims	No	Yes
Human review before delivery	No	Yes

What we ask for, and what we physically can't do