The short answer
Connect only the sources your questions need, with read-only access, and find out beforehand how you take access back. In Mitos, every source starts read-only, only an owner or admin can allow changes per source, anything that would go live waits for approval, and you can revoke the AI assistant within about a minute. Take extra care with Magento, where the AI assistant can read customer names, emails and order history.
Before you connect a Magento store, read what the Magento connection can read, customer records included.
Key points
- Read-only access, the default, lets the AI assistant read your data and change nothing.
- WooCommerce orders reach the AI assistant without customer names, addresses, emails or phone numbers.
- A Magento connection includes customer records. Decide whether your questions need them.
- Find out where to revoke access before you grant it.
What each connection can reach
| Source | What the AI assistant can read | Limit |
|---|---|---|
| Google Analytics | Reports, conversions, funnels and property details for the properties you choose | Read-only Google permission by default. Changes need permission and approval. |
| Search Console | Queries, clicks, impressions, pages, sitemaps and indexing for the properties you choose | Read-only Google permission. Nothing can be submitted or removed. |
| WordPress and WooCommerce | Published posts and pages on any WordPress site. With WooCommerce, also products, orders, stock, sales summary and categories | Orders exclude customer names, addresses, emails and phone numbers. Read-only by default, and publishing needs approval. |
| Magento / Adobe Commerce | Orders, invoices, products, inventory, customers, reviews and more | Customer names, emails and order history are readable. The app warns you first. |
1. Check that access is read-only by default
An AI assistant should be able to read your data without being able to change it, unless you allow it.
In Mitos, Google Analytics and Search Console connect with Google's read-only permissions (analytics.readonly and webmasters.readonly), and ChatGPT and Claude see read tools only. Only an owner or admin can allow changes per source; then new WordPress content becomes a draft, anything that would go live waits for a person's approval, in the chat where your AI assistant supports it, otherwise in Mitos, and every change is logged.
2. Limit what each connection reaches
Each WordPress connection points to one site and each Magento connection to one store. From GA4 and Search Console, only the properties you choose are read, each for one of your sites. Each AI connector reaches one organization, and each organization is isolated from every other.
Agencies keep client data apart by creating one organization per client.
3. Decide about customer data
Most questions about traffic and sales need no customer details. WooCommerce orders reach the AI assistant without names, addresses, emails or phone numbers.
In Magento, the AI assistant can read customer names, emails and order history, and the Mitos app warns you before you connect. Think about who on your team will use that connection and whether your questions need it.
4. Know what is stored
Ask any provider what it keeps. For Mitos, the list is below. Your conversation history follows ChatGPT's or Claude's own settings.
- Source credentials are encrypted at rest and never shown back.
- Mitos does not record the questions asked or the data returned.
- Failure records are kept for 30 days.
- The most recent 14 backups are kept, replaced nightly.
- Expired OAuth tokens are purged daily.
5. Know how to revoke access
Before you grant access, find where you take it back.
- Revoke an AI assistant in the Mitos app. It takes effect within about a minute.
- Disconnecting a Google source also revokes the Google access Mitos has.
- The activity log records connections, chosen properties, AI access grants and revokes, role changes and invitations.
Questions to try
- Which landing pages brought in the most visitors this month?Sources: Google Analytics
- Show me our most recent orders.Sources: WooCommerce
- Which products are running low on stock?Sources: WooCommerce
- Which products sold best this month?Sources: Magento
Questions people ask
Does read-only access remove every risk?
No. It prevents changes to your data. You still decide who on your team uses the AI assistant, which sources to connect and whether customer records belong in the conversation. AI answers can also be wrong or incomplete.
Does Mitos record my questions?
No. Mitos does not record the questions asked or the data returned. It keeps the connection details it needs to reach your sources, encrypted.
What happens when I disconnect Google Analytics?
The Google access Mitos has is revoked as well, and the AI assistant can no longer read that property.