Privacy policy
What personal data Mole Marketer collects, why, who processes it for us, how long we keep it and the rights you have over it.
On this page
- The short version
- Who we are
- What we collect
- Account and team data
- Billing data
- Your business context
- Your marketing work
- Usage and technical data
- Funnel Analytics and your visitors
- How we use your data
- Legal bases
- AI processing
- Connecting an AI assistant (MCP)
- Who we share data with
- International transfers
- How long we keep data
- Deleting your data
- Security
- Your rights
- Cookies
- Children
- Changes to this policy
- Contact
The short version
- We collect what we need to run your account and do the marketing work you ask for: your sign-in details, your business context and the work your team creates
- Your content is sent to AI providers (Anthropic, OpenAI and TypeSafe) to generate pitches, briefs, drafts and images. We do not sell personal data and we do not use it for advertising
- Funnel Analytics is cookieless. For the visitors to your own website, you are the controller and we process their data on your behalf
- You can ask us for a copy of your data, to correct it or to delete it at any time by emailing [email protected]
Last updated 3 November 2026.
This policy explains how Mole Marketer ("we", "us") handles personal data when you visit molemarketer.com, create an account, use the app, connect an AI assistant to it, or install our tracking snippet on your own website. The service is also reachable at our older address, tiny-funnel.com, and this policy covers both.
If you have a question about anything here, email [email protected].
Who we are
Mole Marketer is an AI marketing manager for small businesses and marketing teams, run at molemarketer.com. For the personal data of our customers and website visitors, Mole Marketer is the controller. For the data your tracking snippet collects about visitors to your own website, you are the controller and Mole Marketer is your processor (see "Funnel Analytics and your visitors" below).
What we collect
Account and team data
- Your email address, which is also how you sign in: we email you a one-time sign-in link rather than using a password
- Your name and job role, if you add them
- Your organisation, the businesses in it, your team's memberships and invitations, and what each person can see
- Who is assigned to which projects and briefs, notices and your email preferences
Billing data
Payments are handled by Polar, our merchant of record. Polar collects and stores your card and billing details; we never see or store your full card number. We receive from Polar the state of your subscription (for example trial, active or cancelled) and the details needed to match it to your account.
Your business context
To do its job, your marketing manager needs to know your business. This includes:
- Your company name, website and the business details, ideal customer and image style you write or confirm
- Content we read from your public website
- Sources you choose to connect through Context Link, such as Notion, Google Drive or YouTube. For Google Drive, you pick the individual files to share
- Images and files you upload
Your marketing work
Projects, briefs, pitches, drafts, generated images, comments, schedules and your team's answers to questions in briefs. It also includes your conversation with the marketing manager in the app, along with any files you attach to it.
Usage and technical data
When you use the site or the app, our servers record standard request information such as IP address, browser user agent, the pages requested and the time. We use this to run, secure and debug the service.
Our own marketing site is measured with our own Funnel Analytics, on the same cookieless terms described below.
Funnel Analytics and your visitors
Mole Marketer includes Funnel Analytics, a tracking snippet you can install on your own websites to see which marketing brought visitors in and what they did.
The snippet does not set cookies. It stores a random visitor id in the browser's local storage on your site. For each visitor it records:
- Pages viewed and clicks on your site, with their times
- The referring site and any UTM campaign tags on the link they arrived through
- The country, worked out from the IP address. The IP address itself is not stored: we keep a salted one-way hash of it, used to match events to the same visitor
- The browser's user agent, used among other things to filter out bots
- If you choose to send it, your own user id for a visitor (for example after they sign in), so visits on different devices can be joined up
For this data you are the controller. You decide whether to install the snippet, on which pages, and whether to send user ids. You are responsible for telling your visitors about it in your own privacy notice and for having a lawful basis to collect it. We process it only to provide the analytics to you, and not for any purpose of our own.
Once a day we also fetch the most visited public pages of your tracked site to notice when their headings or calls to action change, so the dashboard can mark those changes.
How we use your data
- To provide the service. Signing you in, running your businesses, projects and briefs, generating pitches and drafts, showing your analytics, and sending the emails the product depends on (sign-in links, pitch and brief notifications, assignments and reminders, weekly summaries and trial notices)
- To bill you. Through Polar
- To keep the service secure and working. Rate limiting, abuse prevention, debugging and backups
- To support you. When you write to us
- To improve the product. By looking at how features are used. We do not use your content to train AI models
We do not sell personal data, and we do not use it for advertising.
Legal bases
If you are in the UK or the European Economic Area, we rely on these legal bases:
- Contract, to provide the service you signed up for and to bill for it
- Legitimate interests, to keep the service secure, to improve it and to measure our own marketing site, in ways that do not override your rights
- Legal obligation, where we must keep records or respond to lawful requests
- Consent, where we ask for it, for example when you connect a third-party source
AI processing
Mole Marketer uses AI models to research, pitch, brief, draft and make images. To do that, the relevant parts of your business context and marketing work are sent to the AI provider that runs the step:
- Anthropic, for Claude models, and for the marketing manager chat, which runs on Anthropic's managed agent service. Files you attach in the chat are uploaded to Anthropic for that conversation and deleted once it is no longer in use
- OpenAI, for OpenAI text models and for image generation
- TypeSafe, for a model that makes some decisions during pitching, such as scoring
Each business chooses whether its main writing work uses Claude or OpenAI. We use these providers through their business APIs. Under their API terms, API data is not used to train their models by default. AI output can be wrong, so your team reviews and decides on everything before it is used.
Connecting an AI assistant (MCP)
You can connect Mole Marketer to an AI assistant such as Claude or ChatGPT through our MCP connector. When you connect, you sign in to Mole Marketer and approve access with read or read and write permission.
- The connector acts as you. It can only read and change what your own account can, in the businesses and areas you have access to
- Data the connector returns to your assistant is then handled by that assistant's provider under its own terms and privacy policy
- Connector requests are recorded in our server logs like any other request, and are rate limited
- You can disconnect at any time from the assistant, and access ends when your account is removed
Who we share data with
We use these service providers (subprocessors) to run Mole Marketer. Each receives only what it needs for its job:
| Provider | What for |
|---|---|
| Hetzner | Hosting of our application servers and databases |
| Amazon Web Services | Storage of uploaded and generated files, and database backups (Stockholm region) |
| Cloudflare | Network delivery, security and working out a visitor's country |
| Postmark | Sending email |
| Polar | Payments, subscriptions and invoicing, as merchant of record |
| Anthropic | AI models and the marketing manager chat |
| OpenAI | AI models and image generation |
| TypeSafe | AI decision model used in pitching |
| Context Link | Indexing and searching the sources you connect |
We may also share data if the law requires it, to protect our rights or users' safety, or as part of a sale or reorganisation of the business, in which case this policy would continue to apply to your data.
International transfers
Our servers are in the European Union and our file storage is in the EU (Stockholm). Some of our providers, including the AI providers, process data in the United States and other countries. Where personal data leaves the UK or EEA, we rely on the safeguards those providers offer, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
How long we keep data
- Account, business and marketing work data: for as long as your account is active. When you delete a business in the app, its projects, briefs, analytics and files are deleted with it
- Funnel Analytics: page views and events from visitors who did not convert are deleted after 90 days. Click details are kept for 7 days, or up to 90 days when they are part of a visit you looked at or that converted. Visitors not seen for 18 months are deleted along with their events. Records of page changes on your site are kept for 13 months, and failed server event deliveries for 30 days
- Backups: daily database backups are kept for 14 days, so deleted data is fully gone from backups within 14 days
- Billing records: Polar keeps these for as long as tax and accounting law require
Deleting your data
You can delete a business at any time from its Settings page. To delete your whole account or organisation, email [email protected] from the address you sign in with and we will delete it, normally within 30 days.
Security
We use encrypted connections (HTTPS) everywhere, sign-in links that expire, access controls inside each organisation, salted hashing of visitor IP addresses, and separate credentials for each service. Generated and uploaded images are stored at long, unguessable web addresses so they can appear in your pages and emails; files attached in the marketing manager chat are kept in private storage and only reachable through the app. No system is perfectly secure, and if we learn of a breach affecting your data we will tell you as the law requires.
Your rights
Depending on where you live, you have the right to access your personal data, correct it, delete it, restrict or object to how we use it, and receive a copy in a portable form. You can also withdraw consent where we rely on it. To use any of these rights, email [email protected]. If you are a visitor to one of our customers' websites, please contact that business first, since it controls that data; we will help them respond.
If you are in the UK or EEA and are unhappy with how we handle your data, you can complain to your local data protection authority.
Cookies
The app uses a small number of cookies that it needs to work:
- A signed session cookie that keeps you signed in
- A preference cookie that remembers which sidebar sections you left open
The app also keeps a few conveniences in your browser's local storage, such as an unsent message or which folders you collapsed. We do not use advertising or third-party tracking cookies. The Funnel Analytics snippet, on our site and yours, sets no cookies.
Children
Mole Marketer is a business tool and is not meant for anyone under 16. We do not knowingly collect personal data from children.
Changes to this policy
We may update this policy as the product changes. We will change the date at the top, and if a change is significant we will tell account owners by email before it takes effect.
Contact
Email [email protected] with any question or request about your data.
Finally, a marketing process we can stick to
Start your seven-day trial. One project run and one brief run are guaranteed, so your team has real work on the table before you pay.
$99 per month per business after the trial. Card taken at checkout, nothing charged until it ends.