Privacy Policy
A lot of companies have hard-to-read privacy policies that go on for pages and are coded in legal-ese. Privacy is at the heart of what we do, so we've endeavoured to produce a privacy policy that's easy-to-read.
That doesn't mean we can't improve if you have a specific question on the policy, please do contact our Data Protection Officer at omar@supermarketer.co.uk or our EU representative as per Article 27, GDPR at krzysztof@supermarketer.co.uk.
We are registered with the ICO with number ZB709326.
Who we are
We are SuperMarketer Limited, we help you own your data. SuperMarketer Limited is the Data Controller for the personal data described in this policy.
The data we hold about you, and how we use it:
Setting up an account
We require specific data if you set up a SuperMarketer account. Our legitimate interest in obtaining this data is to set up an account in your name.
The specific data fields we will request are:
- First name, last name and email address: So we know who you are and can contact you
Information we process for internal verification purposes
To ensure the safety of your data and prevent fraudulent activity, we need to be able to verify your identity when necessary. Please note, this verification is internal and does not refer to the verification services we perform on behalf of your partners. To do this, we may need the following:
- Phone number or email: We may use third party services to send you a verification code through your registered email address or phone number to determine if the contact details provided are valid.
Information we collect if we communicate with you
If you contact us either via email or through our support channels, we collect the following information so we can respond:
If we contact you, it will only be to respond to a customer service query.
- Email address, contents of your email and associated attachments
- Contents of any feedback you send to us (e.g. reporting an issue or filling out a feedback form)
Information we process to understand how our products are used and make improvements
- Track usage of our products and services: We collect metrics such as launch time, IP address and hang rate to assess app performance
- Crash reporting: We monitor our products through anonymous crash reports, these may include device and hardware information.
- Improve our bot-detection and verification services: When you choose to use these features, we may analyse patterns in the data you import (for example behavioural signals or activity trends) using rule-based or statistical methods, including in aggregated or pseudonymised form. This does not involve training generalized AI or machine-learning models on your personal data.
We use cookies on our website and app
We use cookies and similar technologies to operate the SuperMarketer website and to understand how users interact with it.
Essential cookies: These are required for the site to function (for example, keeping you logged in and supporting basic security). These do not require your consent.
Analytics cookies: We use Google Analytics and Heap Analytics to understand how people use our website and to help us improve its performance. These tools collect information such as which pages are visited, how long users stay on the site, and interactions with page elements.
Analytics cookies are optional and are only set with your consent. You can withdraw your consent at any time through your browser or cookie settings.
You can block or delete cookies by changing your browser settings, although this may affect how the site works.
Information that is processed when you request your data
If you wish and ask us to, we will request your data from data controllers such as YouTube or LinkedIn. We facilitate the secure transfer of user-selected data to our platform. We will not access this data until you authorise it.
LinkedIn Data
We enable users to request and store their LinkedIn data. To do this, we ask for your authorisation to connect with LinkedIn and transfer your data into your SuperMarketer account. We cannot access this data until you authorise it.
The categories of LinkedIn data we process may include:
- Basic profile information
- Activity or interaction information
- General account information
We never request data such as passwords or bank details and we do not share any data that identifies you with third parties for their own use.
My Google Data
If you choose to verify with Google, we ask you to connect your Google account. We then use Google’s Data Portability API to copy your YouTube My Activity into SuperMarketer. We cannot access this data until you authorise it.
The Google user data we process may include:
- YouTube watch history: videos you watched, titles, URLs, channel names, and timestamps
- YouTube search history: search queries, related URLs, and timestamps
- OAuth tokens needed to complete the transfer you authorised
We use this Google user data only to provide and improve SuperMarketer’s user-facing verification features:
- A bot-likelihood score from your YouTube activity patterns
- Identity and match checks for the partner who invited you
- A trust passport and viewing-topic summaries, when that partner has enabled them
- Answers to that partner’s qualification questions about your YouTube activity, when they have enabled them
- Improving those same features (for example the accuracy of bot-detection and qualification) using rule-based or statistical methods, including aggregated or pseudonymised patterns. We do not use this data to train generalized AI or machine-learning models
We never request passwords or bank details. We do not send your raw YouTube My Activity file to partners. People at SuperMarketer do not read your YouTube activity except where you ask us to, or where it is necessary for security, abuse investigation, or the law.
Booking.com
We enable users to request and store their Booking.com data. To do this, we ask for your authorisation to connect with your account and transfer your data into your SuperMarketer account. We cannot access this data until you authorise it.
The categories of Booking.com data we process may include:
- Booking or travel information
- General trip details
- General account information
We never request data such as passwords or bank details and we do not share any data that identifies you with third parties for their own use.
How we comply with Google’s policies
The use of information received from the Data Portability API adheres to the Data Portability API user data and developer policy, including the Limited Use requirements. SuperMarketer’s use of information received from Google APIs also adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Google user data, including data derived from it, is used only to provide or improve the user-facing verification features listed under My Google Data — including to improve those features over time. In particular:
- We do not use it for advertising, retargeting, or interest-based ads
- We do not sell it or transfer it to data brokers or information resellers
- We do not use it to determine credit-worthiness or for lending
- We do not use it to develop, improve, or train generalized AI or machine-learning models
- We transfer derived verification outputs to the partner you chose to verify with, and we send relevant activity and video text to processors who help us provide those features, only as described in this policy
If we change how we use Google user data, we will update this policy and ask for your consent before using it in a new way. You can revoke SuperMarketer’s access to your Google Account at https://security.google.com/settings/security/permissions. You can also ask us to delete your data at technical@supermarketer.co.uk.
Data we share with your partners and how your privacy is protected
We generate revenue by providing verification and insight services using pseudonymised data that you choose to share with approved partners.
When you choose to request your data from other data controllers (i.e. Google), we undertake the following steps:
- We share the details you submit during the request process with the relevant data controller so they can identify your data set in their records and initiate the transfer.
- Your data is then transferred to your SuperMarketer account where it is processed and pseudonymised.
- If you have consented to verify yourself or provide your data to a partner, we provide pseudonymised data to them linked to an encrypted ID that does not reveal your identity. We do not share any data that identifies you.
The pseudonymised data we generate from your requested data may include outputs such as
- Bot score (based on LinkedIn or YouTube activity)
- Verification checks (e.g., matching your name or email to platform records)
- Data enrichment (e.g., languages or endorsements)
- Trust passport summaries and YouTube topic charts, when the partner has enabled them
- Answers to qualification questions, when the partner has enabled them
In some cases, a partner you’ve approved may provide us with limited personal data (such as your name or email address) to help verify that the data you’ve shared with us matches their records. We compare this information to the data you’ve requested from platforms, and return pseudonymised verification outputs to the partner. These outputs are always linked to a pseudonymised ID and never include your personal data. For Google / YouTube data, partners receive only these verification outputs, not your raw My Activity file.
Who we share your data with (service providers)
We share data with processors who help us operate SuperMarketer, on our instructions and not for their own purposes. This includes Google Cloud for hosting, databases, and task processing. To provide the YouTube verification features above, we send relevant watch and search activity to Google Gemini so we can classify topics, create embeddings, and answer qualification questions. If Gemini cannot complete a request, we may use a backup AI processor for the same feature. These processors are not permitted to use this data for their own unrelated purposes.
How do you keep my data secure?
We protect personal data with encryption when it is stored and when it is moved, and we limit who can access it. Sensitive data from platforms such as YouTube is kept separate from identity details such as your name and email. We review these measures regularly and update them where needed.
Where is your data stored?
SuperMarketer servers where your data is stored are based inside the UK and EU. Where we use Google Gemini or a backup AI processor to provide the YouTube features above, that processing takes place on that provider’s systems.
How long do you keep my data for?
We retain Google user data from the Data Portability API, and data derived from it, only as long as needed to complete the verification you requested, typically up to 60–90 days. We delete it when that purpose ends, if you do not complete verification, or if you ask us to delete your data.
Other personal data from data portability requests is also kept only as long as needed to complete the requested processing, typically up to 60–90 days.
You can request deletion of your personal data at any time at /delete-my-data, or by contacting us at technical@supermarketer.co.uk. Upon such a request, we will delete your personal data within a reasonable period (generally within 30 days). You can also revoke SuperMarketer’s Google access at https://security.google.com/settings/security/permissions.
We may retain pseudonymised or aggregated data derived from your personal data, including Google Data Portability data, for longer periods (up to 2 years) to test and improve our user-facing verification and bot-detection features. This data cannot directly identify you. We do not use it to train generalized AI or machine-learning models.
Your rights under GDPR
As our users, you have rights and protections under GDPR, including the right to:
- access the personal data we hold about you;
- view our policies (like this one), which govern how, and why, we use your data;
- request us to rectify inaccurate data we hold about you;
- object to the processing of your data;
- withdraw your consent to processing your data;
- request us to erase data we hold about you;
- request us to transfer your personal data to a third party;
- request us to restrict how we process your data.
How to raise a concern
If, for any reason you believe there has been a violation of your rights under the GDPR, and the Data Protection Act, you have the right to lodge a complaint with the supervisory authority, in the UK, this is the Information Commissioner's Office who can be contacted at:
- Telephone: 0303 123 1113
- Website: ico.org.uk/make-a-complaint/
If you live within the EU, you may also contact our EU privacy representative as per GDPR, Article 27 at krzysztof@supermarketer.co.uk who will raise this issue with the relevant EU supervisory authority.
