Privacy policy

What personal data Mole Marketer collects, why, who processes it for us, how long we keep it and the rights you have over it.

On this page
  1. The short version
  2. Who we are
  3. What we collect
  4. Account and team data
  5. Billing data
  6. Your business context
  7. Your marketing work
  8. Usage and technical data
  9. Funnel Analytics and your visitors
  10. How we use your data
  11. Legal bases
  12. AI processing
  13. Connecting an AI assistant (MCP)
  14. Who we share data with
  15. International transfers
  16. How long we keep data
  17. Deleting your data
  18. Security
  19. Your rights
  20. Cookies
  21. Children
  22. Changes to this policy
  23. Contact

The short version

  • We collect what we need to run your account and do the marketing work you ask for: your sign-in details, your business context and the work your team creates
  • Your content is sent to AI providers (Anthropic, OpenAI and TypeSafe) to generate pitches, briefs, drafts and images. We do not sell personal data and we do not use it for advertising
  • Funnel Analytics is cookieless. For the visitors to your own website, you are the controller and we process their data on your behalf
  • You can ask us for a copy of your data, to correct it or to delete it at any time by emailing [email protected]

Last updated 3 November 2026.

This policy explains how Mole Marketer ("we", "us") handles personal data when you visit molemarketer.com, create an account, use the app, connect an AI assistant to it, or install our tracking snippet on your own website. The service is also reachable at our older address, tiny-funnel.com, and this policy covers both.

If you have a question about anything here, email [email protected].

Who we are

Mole Marketer is an AI marketing manager for small businesses and marketing teams, run at molemarketer.com. For the personal data of our customers and website visitors, Mole Marketer is the controller. For the data your tracking snippet collects about visitors to your own website, you are the controller and Mole Marketer is your processor (see "Funnel Analytics and your visitors" below).

What we collect

Account and team data

  • Your email address, which is also how you sign in: we email you a one-time sign-in link rather than using a password
  • Your name and job role, if you add them
  • Your organisation, the businesses in it, your team's memberships and invitations, and what each person can see
  • Who is assigned to which projects and briefs, notices and your email preferences

Billing data

Payments are handled by Polar, our merchant of record. Polar collects and stores your card and billing details; we never see or store your full card number. We receive from Polar the state of your subscription (for example trial, active or cancelled) and the details needed to match it to your account.

Your business context

To do its job, your marketing manager needs to know your business. This includes:

  • Your company name, website and the business details, ideal customer and image style you write or confirm
  • Content we read from your public website
  • Sources you choose to connect through Context Link, such as Notion, Google Drive or YouTube. For Google Drive, you pick the individual files to share
  • Images and files you upload

Your marketing work

Projects, briefs, pitches, drafts, generated images, comments, schedules and your team's answers to questions in briefs. It also includes your conversation with the marketing manager in the app, along with any files you attach to it.

Usage and technical data

When you use the site or the app, our servers record standard request information such as IP address, browser user agent, the pages requested and the time. We use this to run, secure and debug the service.

Our own marketing site is measured with our own Funnel Analytics, on the same cookieless terms described below.

Funnel Analytics and your visitors

Mole Marketer includes Funnel Analytics, a tracking snippet you can install on your own websites to see which marketing brought visitors in and what they did.

The snippet does not set cookies. It stores a random visitor id in the browser's local storage on your site. For each visitor it records:

  • Pages viewed and clicks on your site, with their times
  • The referring site and any UTM campaign tags on the link they arrived through
  • The country, worked out from the IP address. The IP address itself is not stored: we keep a salted one-way hash of it, used to match events to the same visitor
  • The browser's user agent, used among other things to filter out bots
  • If you choose to send it, your own user id for a visitor (for example after they sign in), so visits on different devices can be joined up

For this data you are the controller. You decide whether to install the snippet, on which pages, and whether to send user ids. You are responsible for telling your visitors about it in your own privacy notice and for having a lawful basis to collect it. We process it only to provide the analytics to you, and not for any purpose of our own.

Once a day we also fetch the most visited public pages of your tracked site to notice when their headings or calls to action change, so the dashboard can mark those changes.

How we use your data

  • To provide the service. Signing you in, running your businesses, projects and briefs, generating pitches and drafts, showing your analytics, and sending the emails the product depends on (sign-in links, pitch and brief notifications, assignments and reminders, weekly summaries and trial notices)
  • To bill you. Through Polar
  • To keep the service secure and working. Rate limiting, abuse prevention, debugging and backups
  • To support you. When you write to us
  • To improve the product. By looking at how features are used. We do not use your content to train AI models

We do not sell personal data, and we do not use it for advertising.

If you are in the UK or the European Economic Area, we rely on these legal bases:

  • Contract, to provide the service you signed up for and to bill for it
  • Legitimate interests, to keep the service secure, to improve it and to measure our own marketing site, in ways that do not override your rights
  • Legal obligation, where we must keep records or respond to lawful requests
  • Consent, where we ask for it, for example when you connect a third-party source

AI processing

Mole Marketer uses AI models to research, pitch, brief, draft and make images. To do that, the relevant parts of your business context and marketing work are sent to the AI provider that runs the step:

  • Anthropic, for Claude models, and for the marketing manager chat, which runs on Anthropic's managed agent service. Files you attach in the chat are uploaded to Anthropic for that conversation and deleted once it is no longer in use
  • OpenAI, for OpenAI text models and for image generation
  • TypeSafe, for a model that makes some decisions during pitching, such as scoring

Each business chooses whether its main writing work uses Claude or OpenAI. We use these providers through their business APIs. Under their API terms, API data is not used to train their models by default. AI output can be wrong, so your team reviews and decides on everything before it is used.

Connecting an AI assistant (MCP)

You can connect Mole Marketer to an AI assistant such as Claude or ChatGPT through our MCP connector. When you connect, you sign in to Mole Marketer and approve access with read or read and write permission.

  • The connector acts as you. It can only read and change what your own account can, in the businesses and areas you have access to
  • Data the connector returns to your assistant is then handled by that assistant's provider under its own terms and privacy policy
  • Connector requests are recorded in our server logs like any other request, and are rate limited
  • You can disconnect at any time from the assistant, and access ends when your account is removed

Who we share data with

We use these service providers (subprocessors) to run Mole Marketer. Each receives only what it needs for its job:

Provider What for
Hetzner Hosting of our application servers and databases
Amazon Web Services Storage of uploaded and generated files, and database backups (Stockholm region)
Cloudflare Network delivery, security and working out a visitor's country
Postmark Sending email
Polar Payments, subscriptions and invoicing, as merchant of record
Anthropic AI models and the marketing manager chat
OpenAI AI models and image generation
TypeSafe AI decision model used in pitching
Context Link Indexing and searching the sources you connect

We may also share data if the law requires it, to protect our rights or users' safety, or as part of a sale or reorganisation of the business, in which case this policy would continue to apply to your data.

International transfers

Our servers are in the European Union and our file storage is in the EU (Stockholm). Some of our providers, including the AI providers, process data in the United States and other countries. Where personal data leaves the UK or EEA, we rely on the safeguards those providers offer, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

How long we keep data

  • Account, business and marketing work data: for as long as your account is active. When you delete a business in the app, its projects, briefs, analytics and files are deleted with it
  • Funnel Analytics: page views and events from visitors who did not convert are deleted after 90 days. Click details are kept for 7 days, or up to 90 days when they are part of a visit you looked at or that converted. Visitors not seen for 18 months are deleted along with their events. Records of page changes on your site are kept for 13 months, and failed server event deliveries for 30 days
  • Backups: daily database backups are kept for 14 days, so deleted data is fully gone from backups within 14 days
  • Billing records: Polar keeps these for as long as tax and accounting law require

Deleting your data

You can delete a business at any time from its Settings page. To delete your whole account or organisation, email [email protected] from the address you sign in with and we will delete it, normally within 30 days.

Security

We use encrypted connections (HTTPS) everywhere, sign-in links that expire, access controls inside each organisation, salted hashing of visitor IP addresses, and separate credentials for each service. Generated and uploaded images are stored at long, unguessable web addresses so they can appear in your pages and emails; files attached in the marketing manager chat are kept in private storage and only reachable through the app. No system is perfectly secure, and if we learn of a breach affecting your data we will tell you as the law requires.

Your rights

Depending on where you live, you have the right to access your personal data, correct it, delete it, restrict or object to how we use it, and receive a copy in a portable form. You can also withdraw consent where we rely on it. To use any of these rights, email [email protected]. If you are a visitor to one of our customers' websites, please contact that business first, since it controls that data; we will help them respond.

If you are in the UK or EEA and are unhappy with how we handle your data, you can complain to your local data protection authority.

Cookies

The app uses a small number of cookies that it needs to work:

  • A signed session cookie that keeps you signed in
  • A preference cookie that remembers which sidebar sections you left open

The app also keeps a few conveniences in your browser's local storage, such as an unsent message or which folders you collapsed. We do not use advertising or third-party tracking cookies. The Funnel Analytics snippet, on our site and yours, sets no cookies.

Children

Mole Marketer is a business tool and is not meant for anyone under 16. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy as the product changes. We will change the date at the top, and if a change is significant we will tell account owners by email before it takes effect.

Contact

Email [email protected] with any question or request about your data.

Finally, a marketing process we can stick to

Start your seven-day trial. One project run and one brief run are guaranteed, so your team has real work on the table before you pay.

$99 per month per business after the trial. Card taken at checkout, nothing charged until it ends.