Privacy policy

Who we are

Proper Marketing runs the suite: marketing apps your team signs in to under one login. For anything in this policy, write to hello@propermarketing.com.

What we collect

Account details. When you sign in we receive your email address and, if you sign in with Google, the name and profile picture on your Google account. Sign-in is handled by WorkOS, our authentication provider.

Organization data. The name of your organization, its members and their roles, the invitations you send, and the settings you choose such as time zone, locale, and the language your marketing is written in.

Product data. Whatever you and your team create inside the suite: plans, content, campaigns, notes, files, and your chats with the agent. It belongs to your organization; we store it so the apps work.

Business information. When you create a workspace from a website, we collect public information about that business and the businesses it competes with: their websites, public social profiles, reviews, search results and search rankings, and entries in public registers such as those of financial regulators. We keep what we find, together with what you add or correct, as your workspace's brand knowledge.

Connected accounts. If you connect Google Analytics or Google Search Console, we read reports from the properties you choose. See "Google user data" below.

Technical data. Server logs with IP addresses, browser type, pages requested, and timestamps, kept for security and to keep the service running. We do not run advertising trackers on the site or in the suite.

How we use it

To sign you in, keep your session, and show you your organization's data. To run the agent, which reads your workspace's data to answer you, research your business, and draft your marketing. To send the emails the suite needs, such as sign-in codes and invitations. To keep the service secure, find and fix problems, and understand how it is used in aggregate. To answer you when you write to us.

We do not sell personal data and we do not use it for advertising.

AI processing

The agent's answers, research and drafts are written by AI models. What you send the agent, and the workspace data it needs to answer, goes to those models through OpenRouter, which passes each request to a model provider. Unless a section of this policy says otherwise, a provider may keep requests under its own terms.

AI output can be wrong or incomplete. Review it before you publish it, above all where rules limit what you may claim.

Google user data

Sign-in. If you sign in with Google we use only your email address, name, and profile picture, and only to create and show your account.

Google Analytics and Google Search Console. If you connect them, we ask Google for read-only access (the analytics.readonly and webmasters.readonly scopes). We read reports from the properties you choose, such as visits, traffic sources, top pages, and the searches your site appears for, and use them only to show you how your marketing performs and to let the agent analyse it and advise you, inside your own workspace. We never change anything in your Google accounts.

No person at Proper Marketing reads this data unless you ask us to, it is needed for security, or the law requires it. It is never used to train or improve general-purpose AI models, and it is sent only to AI providers that do not keep or train on it.

You can disconnect at any time in the suite's settings, or at myaccount.google.com/permissions. When you do, we delete the access token and the data we read through it.

Proper Marketing's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We do not transfer this information to third parties except as needed to provide the service, and we never use it for advertising or sell it.

Who else sees it

We run on providers who process data on our behalf: WorkOS for sign-in, organizations, and invitations; Convex for the database and backend; Vercel for hosting; Cloudflare for file storage; OpenRouter and the AI model providers it routes to, for the agent; Langfuse, for records of the agent's runs that we use to find and fix problems; and Google when you sign in with Google or connect a Google account.

To research a business we send its web address, its name, and search terms to Firecrawl, Exa, SerpApi, ScrapeCreators, Ahrefs, Google PageSpeed Insights, and public registers such as the UK Financial Conduct Authority's. These requests are about a business, not about you.

Each provider is bound by its own terms and security commitments. We share data with no one else, unless the law requires it.

People in your organization see the data that organization holds, according to their role.

How long we keep it

For as long as your organization uses the suite. When an account or organization is deleted, its data is removed from live systems, with backups and logs following within a bounded period. Some records may be kept longer where the law requires it.

Where it is stored

Most of our providers run in the United States, so data from the European Economic Area and the United Kingdom is transferred there. Those transfers rely on the European Commission's Standard Contractual Clauses, or the provider's certification under the EU-US Data Privacy Framework, as each provider's terms set out.

Your rights

You can ask to see the personal data we hold about you, to correct it, or to delete it, and you can object to how we use it. Write to hello@propermarketing.com and we will answer within a month. If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your data protection authority.

Security

Data moves over encrypted connections and is stored with providers that encrypt it at rest. Access inside Proper Marketing is limited to the people who need it to run the service. No system is perfectly secure; if we learn of a breach that affects you, we will tell you.

Children

The suite is a business tool and is not directed at children under 16. We do not knowingly collect their data.

Changes

When this policy changes we update the date at the top and, for changes that matter, tell signed-in users in the suite.