Who Owns Your Digital Marketing Accounts? What Every Business Owner Should Control

The Risk Nobody Talks About Until It's Too Late

One of the most overlooked risks when hiring a marketing company has nothing to do with rankings, ad performance, or reporting. It's ownership.

Here's how it usually surfaces. A business decides to change agencies. They ask the new provider to take over. The new provider asks for access to Google Ads, Google Analytics, the domain, the website. And the business owner discovers, one platform at a time, that they don't actually control any of it. The ad account lives inside the old agency's manager account. The analytics property was created under an employee's login who left two years ago. The domain is registered to the agency. The website is on the agency's hosting with no export option. Three years of data and a website they paid for, and they can't take any of it with them.

I see some version of this several times a year, and it's rarely malicious. Usually the agency set things up the fastest way, under its own accounts, and never thought about the day the relationship would end. The result is the same either way: the business paid to build assets it doesn't own.

This article is the checklist I wish every business owner had before signing with anyone, including us.

Ownership Is Not the Same as Access

The distinction that matters on every platform is this. Access means you can log in and see or change things. Ownership means you control who else can.

On nearly every marketing platform there's a top-level role that can add and remove all other users. It's called Administrator in some places, Owner or Primary Owner in others, Admin in a few. Whoever holds that role owns the account in every practical sense, regardless of whose name is on the invoice. If your agency holds that role and you hold something lower, you have access, they have ownership, and your access exists at their discretion.

Google Ads is the clearest example, because Google's documentation spells it out. An agency typically works through a manager account, which Google describes in its manager account documentation. Linking a manager account to your account is one thing. Granting that manager account ownership is a separate, further step, and ownership is what lets the manager control user access on your account. The same documentation notes that a client account's admin has to grant that ownership.

Separately, Google Ads has five user access levels: email-only, billing, read-only, standard, and admin. Admin is the one that can give access, change access levels, cancel invitations, and accept or reject manager account link requests. Google also warns that an account with only one admin risks being locked out if that person becomes unavailable.

So when a business owner tells me "I can see the Google Ads account," my next question is always: at what level, and who else is an admin? Seeing the account and controlling it are different things, and the difference only becomes visible when you try to remove someone.

The Ownership Checklist

For each item, the question is the same: does the business hold the top-level role, on a login the business controls?

Domain registrar. The domain should be registered in your business's name, at a registrar account you can log into, with your email as the contact. This one outranks everything else. Whoever controls the domain controls where the website and email go.

DNS. Often at the registrar, sometimes at a separate provider like Cloudflare. Whoever controls DNS can point your domain anywhere, or break your email. You should own the account, and your agency should have a user login you can revoke.

Website hosting. The hosting account should be yours, or the site should be exportable in full to another host. Agency-owned hosting is a common and legitimate arrangement, but the contract needs to say the site files and database are your property and will be handed over on request.

Website source code or CMS. For WordPress, that means an administrator login on the site. For a custom build, it means the repository. For a proprietary platform that can't be exported, understand that leaving means rebuilding, and price that into the decision. This is why we build websites on platforms the client can take with them.

Google Analytics. The GA4 account should be created under a Google account your business controls, with your business holding the Administrator role. Google's documentation is explicit that Administrator is the role that manages users, and that Editor, one step below, cannot. If the property was created under the agency's account, your history leaves with them.

Google Search Console. Your business should be a verified owner of the property. Google's documentation distinguishes verified owners, who proved ownership with a token, from delegated owners, who were granted ownership by a verified owner. Only owners can add or remove other users. If the only verified owner is the agency, they can remove you.

Google Ads. Covered above. Your business owns the account and holds admin access. The agency links a manager account or uses a login you can revoke. Google's transparency requirements also say third parties must report the exact amount Google charged, separate from their fees, or let you sign in directly to see it.

Google Tag Manager. The container that fires your tracking. Google's Tag Manager permissions documentation describes account-level Admin as the role that manages users, and warns directly that if the sole administrator changes roles, you can be locked out. Your business should be an account admin.

Google Business Profile. Google's owners and managers documentation describes three roles: Primary Owner, Owner, and Manager. Only owners can add or remove users, and only the primary owner can transfer primary ownership. The primary owner should be a Google account your business controls. Your agency can be a Manager, or an Owner if they need it, but not the primary.

Meta Business Manager. Your business should own the Business Manager (or Business Portfolio) that contains the ad account, the page, and the pixel. Agencies get partner access, which you grant and can remove. If the ad account was created inside the agency's Business Manager, it doesn't move.

Meta Pixel and datasets. Same as above. The pixel belongs to whichever Business Manager created it. Check that it's yours.

CRM. The subscription should be in your business's name, with you as the account owner, regardless of who set it up. Your customer list is the most valuable data you have.

Email marketing platform. Same principle. Your list, your account, your billing. The agency gets a user login.

Call tracking numbers. This one bites people. If your agency set up call tracking, the tracking numbers are provisioned under their account, and those numbers are now printed on your truck, your Google Business Profile, and your website. If the relationship ends, the numbers can be released. Either the account should be yours, or the contract should guarantee number porting.

Creative assets. Logos, photography, video, ad creative, brand guidelines. You paid for them. You should have the source files, not just the exports, and the contract should say they're yours.

Landing pages. If the agency built landing pages on its own page builder account or hosting, they disappear with the agency. Landing pages should live on your site or on an account you own.

The Test: Could You Fire Your Agency Tomorrow?

Here's the whole article in one question.

If the relationship ended tomorrow, could your business log into every major platform, remove the agency, retain all historical data, keep the website online, keep the campaigns running, and hire another provider without starting over?

If the answer is no on any platform, there's an ownership problem on that platform. It doesn't mean the agency is dishonest. It means the setup was done for convenience rather than for your protection, and it's worth fixing while the relationship is good, because fixing it during a breakup is much harder.

Run the test now, while nothing is wrong. Log in yourself, on your own credentials, to each platform above. Check your role. Check who else holds the top role. Write it down. The whole exercise takes an afternoon.

This Isn't About Restricting Your Agency

I want to be careful here, because this article could read as "trust no one," and that isn't the point.

Legitimate agencies need administrative access to do their jobs. Installing tags, creating conversion actions, linking Google Ads to Analytics, verifying Search Console, publishing site changes. Trying to run a marketing engagement with read-only access would make the work slower and worse. When we take on PPC management or SEO for a client, we ask for admin access, and we should.

The goal isn't to restrict the agency. It's to make sure the business itself retains ultimate control. Two administrators is normal and healthy. Google's own documentation for Ads and Tag Manager recommends more than one admin precisely so a single departure can't lock everyone out. The problem is when the only administrator is someone who doesn't work for you.

A good agency will welcome this conversation. When a client asks us who owns what, the honest answer is "you do, here's how to verify it," and if that's not the answer you're getting, that tells you something about the relationship. The questions to ask before hiring an agency include this one for a reason.

Ownership Checklist: Print This

Fill in the last column honestly. Every blank or "agency" is a conversation to have this month.

Frequently Asked Questions

Who should own a business's Google Ads account, the business or the agency?

The business. Google Ads is designed so that an agency links its manager account to a client account and works inside it. The business should hold administrative access on its own account, which is the level that can grant, change, or remove any user or manager. If the account was created inside the agency's manager account and the business has no admin login, the campaign history, conversion data, and audiences belong to the agency in every practical sense.

What is the difference between account ownership and account access?

Access means you can log in and see or edit things. Ownership means you control who else can. On most platforms the top role, whether it is called Administrator, Owner, Primary Owner, or Admin, is the one that can add and remove everyone else. If your agency holds that role and you hold a lower one, you have access but not ownership, and the agency can revoke your access at any time.

Can a marketing agency keep my website if I stop working with them?

It depends on what the contract says and where the site lives. If the site is built on the agency's hosting, on a proprietary platform, or under a domain registered in the agency's name, leaving can mean starting over. Before you sign, confirm the domain is registered to you, the site can be exported or the hosting account is yours, and the contract states that the design and content are your property once paid for.

What happens to my Google Analytics data if I switch agencies?

If the Google Analytics property was created under your own Google account and you hold the Administrator role, nothing changes. You remove the old agency and add the new one. If the property was created under the agency's account, you may lose the historical data entirely when access is removed. Check now, before you need to, by confirming your login shows Administrator at the account level.

Should I give my marketing agency admin access?

Often yes. Legitimate agencies need administrative access to do their jobs, such as installing tags, creating conversions, or linking accounts. The goal is not to restrict the agency. It is to make sure your business also holds the top-level role on every platform, so the agency's access exists because you granted it and can be removed by you. Two admins is normal. One admin that is not you is the problem.

How do I check who owns my Google Business Profile?

Sign in to the Google account you believe manages the profile, open the profile from Google Search or Maps, and look at the people with access. Google Business Profile has a single Primary Owner plus Owners and Managers. Only owners can add or remove users, and only the primary owner can transfer primary ownership. The primary owner should be a Google account controlled by your business, not by a vendor.

Not Sure What You Own? We'll Help You Find Out

Part of every engagement we start is an ownership audit: we find out who actually holds the keys to each platform and, where it's not you, we fix it before anything else. If you'd like that done for your business, whether or not you work with us afterward, start with a free Revenue Opportunity Analysis, see how our plans are structured, or book a strategy call. You can also call us at 321-401-7016.