Stop paying ad tax on phantom ROAS.
Every plan includes our 1st-party Edge Click Collector, deterministic 3-way reconciliation across all 8 connectors, and Web Crypto SHA-256 CAPI/OCI signal recovery. Start with a 14-day free trial.
One recovered checkout pays for the year.
Transparent pricing with all 8 production connectors, live CAPI/OCI write-back, and predictable AI forensic limits.
Starter
For growth teams auditing paid media spend against verified Stripe cash
Growth
For performance & finance teams automating daily 3-way tie-outs and CAPI signal recovery
Enterprise
For multi-brand organizations and agencies requiring full API & custom guardrail governance
TECHNICAL SPECIFICATION MATRIX
Compare plans across every forensic layer.
Detailed breakdown of connector capacity, 3-way tie-out cadence, server-side CAPI/OCI write-back automation, and CFO governance controls.
| Architecture Capability | Starter $99/mo ($79 annual) | Growth $299/mo ($239 annual) | Enterprise Custom Agreement |
|---|---|---|---|
| Connector Fleet & Ingestion | |||
| Included Ad & Revenue Connectors | Up to 3 connectors | Up to 10 connectors | Unlimited connectors & workspaces |
| Supported Platforms (OAuth 2.0 + Direct Token) | All 8 (Stripe, HubSpot, Meta, Google, GA4, TikTok, LinkedIn, Microsoft) | All 8 (Stripe, HubSpot, Meta, Google, GA4, TikTok, LinkedIn, Microsoft) | All 8 + Custom ERP / Warehouse Webhooks |
| 1st-Party Edge Click Collector (/api/collect/script.js) | Included (gclid, fbclid, ttclid, li_fat_id, msclkid) | Included + Custom Domain Proxy | Included + Multi-Brand Edge Routing |
| Real-Time Stripe Charge, Refund & Dispute Webhooks | Standard polling + webhook sync | Real-time streaming webhook ingestion | High-throughput multi-account webhook mesh |
| 3-Way Forensic Tie-Out Engine | |||
| Forensic Tie-Out Runs | 50 forensic tie-out runs / month | Unlimited 3-way forensic tie-outs | Unlimited + Continuous Real-Time Tie-Out |
| 5 Variance Classifications (Inflation, Signal Loss, Refunds, Bleed, Drift) | Full 5-class deterministic diagnosis | Full 5-class + Automated daily scheduling | Custom materiality thresholds per brand |
| Stored Discrepancy & Transaction Lineage Rows | 300 active discrepancy rows | 5,000 active discrepancy rows | Unlimited ledger rows |
| Workers AI Root-Cause Diagnosis & Ask Skewix SQL | 1 AI diagnosis & 5 SQL queries / day | 2 AI diagnoses & 15 SQL queries / day | 10 AI diagnoses & 50 SQL queries / day |
| CAPI & OCI Signal Recovery | |||
| Server-Side Write-Back Protocols | 1-Click manual CAPI & OCI dispatch | Automated CAPI & OCI signal recovery | Automated + Custom payload schema transforms |
| Supported Write-Back Destinations | Meta CAPI v19, Google OCI v17, TikTok v1.3, LinkedIn CAPI | Meta CAPI v19, Google OCI v17, TikTok v1.3, LinkedIn CAPI | All 4 + Custom Server-Side Webhook Sinks |
| Web Crypto SHA-256 PII Hashing & fbtrace_id Receipts | Included | Included + Automated retry queue | Included + Dedicated cryptographic audit log |
| Campaign Guardrails | |||
| 1-Click Campaign Pause & Daily Budget Cap Mutations | Manual recommendations | 1-Click live execution (Meta & Google Ads) | Automated policy guardrails & multi-approver workflows |
| Materiality Alerts & Anomaly Notifications | In-app ledger alerts | Slack & email materiality alerts | Slack, PagerDuty, Email & Custom Webhooks |
| Security & Governance | |||
| Forensic Ledger Retention | 30-day forensic ledger retention | 180-day forensic ledger retention | 365-day forensic ledger retention |
| CFO & Board Audit Exports | CSV & PDF CFO audit packets | Signed CSV & PDF CFO audit packets + weekly digests | Custom ERP export schemas & REST API access |
| Encryption & REST API Access | AES-256-GCM Vault + PBKDF2-SHA256 Auth | AES-256-GCM Vault + Role-Based Access | Full REST API & webhook access + Custom SLA |
TECHNICAL FAQ
Architecture, Privacy & Governance Questions
Which ad platforms and revenue ledgers are supported out of the box? +
Skewix ships with 8 bi-directional production connectors: Meta Ads, Google Ads, Google Analytics 4 (GA4), TikTok Ads, LinkedIn Ads, and Microsoft Advertising on the media side, paired with Stripe (charges, refunds, disputes) and HubSpot CRM (Closed-Won pipeline) as your financial ground truth. Every connector supports both 1-Click OAuth 2.0 and Direct System User / Private API Token authentication.
How does the deterministic 3-Way Stripe & HubSpot tie-out work? +
Our 1.4 kB 1st-party Edge Click Collector (/api/collect/script.js) captures gclid, fbclid, _fbp, _fbc, ttclid, li_fat_id, and msclkid on landing and injects them into Stripe Checkout or HubSpot deal metadata. When a charge settles—or is subsequently refunded or disputed—Skewix joins ad platform spend and GA4 session data against net settled cash to classify every variance into 5 deterministic categories.
How does Skewix handle customer PII privacy during CAPI & OCI signal recovery? +
Customer email addresses and phone numbers are normalized and hashed using Web Crypto SHA-256 directly on Cloudflare Workers before any server-side recovery payload leaves the edge. Plaintext PII is never transmitted to Meta Conversions API v19.0, Google Ads Enhanced Conversions (OCI), TikTok Events API v1.3, or LinkedIn Conversions API.
Can I verify CAPI and OCI payloads safely before enabling automated production write-back? +
Yes. Every workspace supports dry-run payload inspection and Meta Events Manager test_event_code routing. You can inspect the exact JSON body, SHA-256 match keys, and deduplicated event_id for each uncredited Stripe order before dispatching live recovery events or enabling automated daily CAPI write-back.
How do 1-Click Campaign Guardrails protect paid media budgets? +
When Skewix detects severe Phantom ROAS—such as a campaign claiming 4.5x ROAS in Ads Manager while delivering 1.7x True Net Cash ROAS in Stripe after refunds and view-through overlap—operators can execute a 1-click guardrail mutation to pause the campaign or cap its daily budget by 25–50%, complete with an immutable operator audit log.
How are OAuth credentials and Stripe restricted keys secured? +
All OAuth 2.0 refresh tokens, system user tokens, and Stripe restricted keys are encrypted at rest using AES-256-GCM inside your tenant-isolated Cloudflare D1 vault. Authentication uses native edge PBKDF2-SHA256 with zero third-party auth trackers.
Audit your ad spend against settled cash today.
Connect Stripe or HubSpot alongside Meta, Google, GA4, TikTok, LinkedIn, and Microsoft Ads in under 60 seconds—and start recovering dropped conversion signals immediately.