brandandco-auth-core

The internal Google integration service of Brand &

Brand & is an AI innovation agency in San Francisco. We build websites, manage local search presence, and run paid-media campaigns for the businesses that hire us.

brandandco-auth-core is the single internal service that holds our agency's Google API credentials. Our other internal tools never store Google credentials of their own — they request a short-lived access token from this service over a private, non-public connection whenever they need to call a Google API for the accounts we manage.

What it does

• Google Business Profile care — reads reviews and business information for the client locations we manage, so our team is alerted to new reviews, can publish owner replies they have approved, and can keep hours, contact details and posts current.
• Google Ads operations — retrieves campaign performance for our internal dashboards and client reports, monitors budget pacing, and applies the campaign changes our account managers initiate.
• Credential custody — stores the agency's OAuth refresh token and API keys encrypted at rest, issues short-lived access tokens on request, and records an audit entry for every token it hands out.

Who uses it

Brand & employees only. There is no public sign-up, no end-user accounts, and no resale of access. It authorizes with a single Google Account owned by our agency — the account that already manages the client properties we service.

Google API scopes requested

• https://www.googleapis.com/auth/business.manage — manage the Google Business Profile listings our agency administers.
• https://www.googleapis.com/auth/adwords — read reporting from, and manage campaigns in, the Google Ads accounts under our manager account.

Our Privacy Policy sets out exactly how Google user data is accessed, used, shared, stored, retained and deleted. See also our Terms of Service. Questions: [email protected].