Security and data handling at SuperMarketer

An AI marketer needs to read your website, write in your name and connect to the channels you publish on. This page explains what it does with that access, what it never does and which controls you have.

Build my plan See pricing

Open door of a small office at dusk seen from a dark corridor, desk lamp on inside, a woman packing her bag beside a closed laptop

How your data is used

Your website content, brand brief, answers, drafts, results and connected channel data are used for one purpose only, which is doing the marketing work for your account.

Your data is never used to train public models.
Your data is never shared with other accounts or used to write content for anyone else.
Content produced for you belongs to you.
Data from read only connections is used to measure results and shape your next plan, nothing else.

Export and delete anytime

You can export plans, drafts, published items and reports from your workspace whenever you want. Deleting your account removes your brand profiles, briefs, drafts and stored channel data from the service. Revoking a channel connection stops all access to that tool immediately.

Encryption in transit and at rest

All traffic between your browser, SuperMarketer and the connected tools is encrypted in transit. Stored data, including access tokens for your channels, is encrypted at rest. Tokens are never shown in the interface after a connection is made.

Head of marketing at a standing desk in a warehouse office marking a printed weekly report with a highlighter, a calendar grid on the monitor behind

Role-based access for your team

Every seat signs in with its own account, so actions in the queue are tied to a person. Enterprise adds roles and approval chains.

Role	Can do
Owner	Manage billing, seats, channels, autonomy settings and all content
Approver	Approve, edit, reject and regenerate items, and accept proposals
Editor	Edit and regenerate drafts and send them for approval
Viewer	Read plans, the queue, the calendar and reports

Approval chains let a draft pass through more than one person before it publishes. Seats per plan are listed on the pricing page.

Controls on the Enterprise plan

Single sign-on through SAML, Google or Microsoft.
Audit log of sign-ins, approvals, edits, publishing actions and setting changes.
Brand vocabulary lock for required and banned terms.
Data processing agreement for your legal and procurement teams.
99.9 percent uptime SLA.
Invoice billing on annual plans.

Minimal permissions on connected channels

Each connection asks only for what it needs. Publishing connections can create posts, articles or campaigns. Ad connections can place copy, but SuperMarketer never sets budgets, bids or starts spending. Search Console and GA4 are read only. You sign in with each tool on its own page, so SuperMarketer never sees your passwords. The full list is on the integrations page.

Nothing publishes beyond the rules you set

The autonomy dial is set per channel, and every new channel starts on Review everything. Items stay in the approval queue until you or your approvers act, or until the time window you chose has passed. How the queue works is explained on how it works.

Infrastructure and availability

SuperMarketer runs on infrastructure in data centers with industry-standard physical security. Access to production systems is limited to the people who operate the service, and backups are kept so your workspace can be restored after a failure.

Report a vulnerability

If you believe you have found a security issue, email support@supermarketer.com with a description, the steps to reproduce it and the address affected. We look into every report, keep you updated and ask that you give us reasonable time to fix the issue before sharing details publicly.