Data and security

Marsell keeps what it needs to market your business: what it learned about the business, the files you add, the work it makes and access to the accounts you connect. Your uploads stay private to your account, the keys to your connected accounts are encrypted, and Marsell doesn’t use your content to train AI models. This page is a plain summary. The Privacy Policy and the Security Policy are the full texts.

​

What Marsell stores

• Your account: your name and email address. Sign-in is handled by Clerk, whose screen you see when you sign in.
• Your projects: what Marsell read on your site and public profiles, your answers, the facts you confirmed and your brand.
• Your files: the logos, pictures, fonts, documents and show material you upload.
• The work: plans, drafts, pictures, films and pages, with your approvals and edits.
• Connected accounts: the access Marsell needs to post, send or read results on the accounts you connect.
• Usage: what ran and how many tokens it used.

​

Where it’s kept and how it’s protected

• Marsell hosts the service in the European Union (Frankfurt, Germany), with files stored on Cloudflare. Its providers process information in the United States and other countries.
• Everything between your browser and Marsell travels over HTTPS.
• Every request to your account is checked against your sign-in and, in an organisation, against your current membership and role.
• Files you upload are private: they open only for people signed in to your account.
• Pictures and films Marsell makes are shown and published through long, random links that work without signing in, so the platforms you publish to can fetch them. Anyone who has one of these links can open that file.
• The tokens and keys for your connected accounts are encrypted (AES-256-GCM) and tied to your account, so they can’t be read under another one.

​

Who at Marsell can see it

Marsell’s team runs the service and has an operations view of every account: the business name, the Marsell plan, tokens used, when it was last active and how far the work has got, such as how many pieces were made or published. The team uses it to keep Marsell running and to fix problems. People Marsell authorises to handle customer data are bound by confidentiality.

​

AI providers

To do the work, Marsell sends the content each task needs to AI model providers: text models for research, planning and writing, and image, video, voice and music models for media. They process it and send back the result. Marsell doesn’t use your content to train AI models. Section 6.1 of the Privacy Policy lists the providers.

​

Delete your data

To close your account and have your data deleted, or to delete a project, email privacy@getmarsell.com from the address on your account. After an account is closed, Marsell deletes or de-identifies your personal information, normally within 90 days, and copies in backups expire, normally within 30 days. Billing and tax records are kept for as long as the law requires.

​

Export your data

You can download your work where it’s shown: open a picture or film in Made for you in Create, or download a file under Your files on Brand. For a copy of everything, email privacy@getmarsell.com.

​

Revoke a connected account

• To stop Marsell posting to a social account, press Stop posting here on its card under Where you post in Market. Resume posting turns it back on. See Connect your accounts.
• To withdraw Marsell’s access completely, remove it in the platform’s own settings. For a Google account, that’s Google’s third-party access page.
• Posts already published stay up. Delete them on the platform if you need to.

​

Labels on AI-made content

Marsell uses a platform’s own AI label in some cases, not all:

• Films with AI-made pictures or clips go to YouTube with YouTube’s altered or synthetic content label switched on.
• Posts from Marsell’s own accounts always say your business is a Marsell client.

Other posts aren’t labelled automatically. Under the Terms, you’re responsible for any AI disclosure that the law or a platform’s rules require, whether or not Marsell adds a label.

​

Report a security issue

Email security@getmarsell.com and don’t post the problem publicly. Say what you found, how to reproduce it, and how you’d like to be credited. Marsell acknowledges a report within 3 business days and tells you what it found within 10 business days. There’s no paid bug bounty yet. The Security Policy covers scope, testing rules and safe harbour, and security.txt gives the same contact. If you think someone else got into your Marsell account, email security@getmarsell.com straight away.

​

Related