Matus can change your ad accounts and your store, so it asks first. This page explains exactly what needs your approval, what you see before you decide, and what happens after.
Every change Matus makes to a connected ad account or Shopify store shows an approval card first, and nothing is sent to the platform until you approve it. There is no setting that turns this off.
Reading your data, answering questions, writing plans and ad copy, and generating images or video do not change your accounts, so they run without a card. Generation uses your plan’s allowance.
Matus can also save a note to its own memory about your business. Each one is shown in the conversation, and you can remove it there or under Context → Memories.
The account it will act on, the exact change (with its current value beside the new one when Matus has already read it), and the rules that apply. Your approval covers that exact change: if anything about it is different, it is not sent, and you are asked again.
For the riskiest changes you also type a short confirmation: deleting a campaign (Meta, Google, Amazon or TikTok), a Google ad group or budget, a TikTok ad, a Shopify product or discount, an Instagram post or comment, or an asset in your library; cancelling or refunding a Shopify order; running a raw Shopify data change; and erasing all of Matus’s memory. Other changes, including some other removals, use the ordinary approval card.
Some changes are refused before they reach you, with the reason and what to do instead: a budget of zero or an absurd amount, for example, or a change the platform would reject, such as a Shopping campaign with no Merchant Center account.
Before a change is sent, Matus saves a record of it; if that record cannot be saved, nothing is sent. Afterwards it records what the platform returned, so a change that half-worked is reported as such, not as a success.
A schedule or automated rule is approved once and then runs on its own until you change or remove it: an Amazon bid schedule, a Meta budget schedule, or a TikTok automated rule, for example.
Access tokens for your platforms are stored encrypted (AES-256-GCM). Customer emails and phone numbers are hashed (SHA-256) before they are uploaded to an ad platform audience. You can disconnect any platform at any time from Account → Platform Connections, and delete your account entirely. How long data is kept is set out in the Privacy policy.