Security for an AI marketing platform
UltraMarketer connects read only, encrypts access tokens at rest, asks for write access only when you execute, and records every change in an execution log with one-click rollback. Roles decide who approves, SSO is included on Company plans, and you can revoke access at any time.
Encryption
All traffic uses TLS. Access tokens for connected accounts are encrypted at rest with application-level encryption and are never shown in the interface or in exports.
Read-only by default
Every connection starts with read access. Write access to an ad account, email platform or site builder is requested only when you first execute an action there.
Roles
Owner, Admin, Marketer, Approver and Viewer. Only roles you choose can approve and execute; Viewers see plans and results only.
SSO
SAML single sign-on on the Company plans, so access follows your identity provider and leaves with the employee.
Audit and execution log
Every approval and every change pushed to an external account is recorded: who, when, which account and what was sent. Any change can be rolled back from the log.
Approval mode and spend caps
Approve each action, auto-execute only low risk ones, or full autopilot on Company. Monthly spend caps and a maximum weekly budget change are enforced before any push.
Data minimisation
We read the metrics needed for planning (sessions, conversions, spend, results, pipeline value). We do not need and do not import your customers' card data.
Revoke and delete
Disconnect any integration at any time. The owner can ask for the workspace and its data to be deleted; deletion covers synced metrics, plans, assets and tokens.
Who can do what
Execution rights are explicit. A change reaches your accounts only through a role that is allowed to approve it, and only inside your caps.
| Role | View plans | Edit assets | Approve and execute | Billing and guardrails |
|---|---|---|---|---|
| Owner | ||||
| Admin | ||||
| Approver | No | |||
| Marketer | No | No | ||
| Viewer | No | No | No |
Roles are available on Growth and higher. On Starter both seats have full rights.
What data we handle and why
Categories, not a long legal list. The full detail is in the privacy policy.
| Category | Examples | Purpose |
|---|---|---|
| Account data | Name, work email, team and role | To sign you in and manage seats |
| Connected account data | Metrics, campaigns, search terms, pages, pipeline stages and values | To find opportunities and measure results |
| Prepared assets | Ads, keywords, landing pages, emails, budgets you edit and approve | To execute actions you approve |
| Execution records | What was sent to which account, by whom and when | Audit, rollback and support |
| Billing data | Plan, invoices, payment status. Card details are held by the payment operator, not by us | Billing |
Security questions
Security reviews and questionnaires go to support@ultramarketer.com.
Does UltraMarketer sell or share our data?
No. We do not sell customer data and we do not use it to advertise to anyone. Data is used to build your plans, prepare your assets and run the actions you approve.
Is our data used to train AI models?
No. We do not train AI models on your data. Requests to the AI model provider carry only what the task at hand needs.
Can the agent change our ad accounts without permission?
Connections start read only. Write access is requested only when you execute an action in that channel, and in the default approval mode nothing runs without a click from someone with the Approver role or higher.
How do we remove access?
Disconnect any integration in the panel, or revoke the app in your Google, Meta, CRM or email account settings at any time. To delete the workspace and its data, the account owner writes to support@ultramarketer.com from the owner address.
Do you support SSO?
Yes, SAML single sign-on is included in the Company and Company + Expert plans, together with the audit log.
See the 10 things to do on your site this week
Enter your website and get real growth opportunities in about a minute. No account needed for the scan.