Back

Privacy Policy

Supermanager

Last updated: 16 October 2026

At Supermanager, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and secure your information when you interact with our services. By using Supermanager's platform, you consent to the data practices described below.

1. Data Controller

Supermanager acts as the data controller for the personal data you provide.

For any data-related questions or requests, you can contact us at hello@super-manager.com

2. Information We Collect

We collect personal data that is necessary to provide and improve our services, including:

  • Account Information: Name, email address, phone number, billing details, and communication preferences.
  • Task Information: Details of the tasks you submit, including any context, instructions, or files shared which, depending on the task, may include financial, payroll, tax, or vendor-related information needed to complete finance, HR, or operational tasks (such as vendor invoices, business registration details, or payroll-related data).
  • Usage Data: Information about how you use our platform, such as log data, device information, and interaction data.
  • Payment Information: Payment methods used for subscriptions, pay-as-you-go services and payments made on your behalf. Saved cards are stored by our payment service provider (Stripe); Supermanager does not store your card number, expiry date, security code or billing address, and only keeps an identifier provided by Stripe. Card details displayed in the platform are retrieved from Stripe when needed. Payments to third parties on your behalf are made with single-use virtual cards issued for each specific purchase.
  • Payments Data: If you use our payments feature, we also process details of your payment requests (amount, purpose, merchant, status and approvals, including whether an approval was manual or automatic), virtual card identifiers and limits, card authorisations and settlements, wallet balances and movements, withdrawal requests, and identity verification (KYC) information required by our payment service providers.
  • Connected Google Services: If you connect Google Drive, Google Calendar or Gmail, the data described in Section 5 (Google User Data).

3. How We Use Your Data

Supermanager processes personal data for legitimate business purposes and to deliver top-quality service, including to:

  • Provide access to your Supermanager account and services.
  • Assign and monitor personal managers for your projects.
  • Facilitate finance, HR, and operational support tasks, including bookkeeping, vendor payments, payroll-related administration, and business compliance filings.
  • Communicate updates, account information, and notifications.
  • Process billing, payments, and subscription management.
  • Improve functionality, performance, and personalization of the platform.
  • Detect and prevent fraud, unauthorized access, or abuse of our systems.
  • Comply with legal and regulatory obligations.

We process your data based on contractual necessity, legitimate interests, or your consent, depending on the context.

4. Sharing Your Information

Supermanager does not sell or rent your personal information. However, we may share data under strict conditions with:

  • Authorized Team Members: To fulfill your requests or manage your account. Access to particularly sensitive data (such as financial, payroll, or board materials) is limited to the specific PA and specialists assigned to your task.
  • Third-Party Service Providers: For payment processing, secure cloud storage, email communication, analytics, or other technical support services. This includes our payment service providers, currently Stripe (card processing and storage of saved cards) and Wallester (issuing of virtual cards and wallet accounts). Where required by law, these providers may also act as independent data controllers for their own regulatory obligations, such as identity verification, anti-money laundering, sanctions screening and fraud prevention, in accordance with their own privacy policies. It also includes cloud hosting and storage providers (such as Amazon Web Services, Vercel and Supabase), analytics providers (PostHog and Vercel Analytics), and artificial intelligence services that power product features (such as models from Google, Anthropic, xAI and Amazon).
  • Legal Authorities: When required by law, court order, or to protect Supermanager's rights and interests.

All third-party partners are bound by confidentiality agreements and strict data protection standards consistent with GDPR requirements.

5. Google User Data (Google Drive, Google Calendar and Gmail)

You can connect your Google account to Supermanager so that your personal assistant can work with your Google Drive, Google Calendar or Gmail. You choose which services to connect and, for Calendar and Gmail, how much access to give, and you can change or withdraw that access at any time. This section explains what we access through Google APIs and what we do with it. It applies in addition to the rest of this Privacy Policy.

What we access

  • Google Drive: When you connect Google Drive, we create a folder named “Supermanager” in your Drive, with a folder for each of your tasks, and your assistant creates, opens and edits files in it. If you share one of your own folders with a task, your assistant can open, create, edit, move and delete files in that folder for that task. We request access to your Drive because the folders you share already contain files that our app did not create; our system only opens the Supermanager folder and the folders you share, never anything else in your Drive.
  • Google Calendar: Depending on the level you choose: the times you are busy; a calendar named “Supermanager” that we create in your Google Calendar for the events your assistant books; your calendars and their events (titles, times, locations, descriptions and attendees); creating, changing or cancelling events and replying to invitations on your behalf; and, at the highest level, creating, renaming or deleting secondary calendars. To find a time for a meeting, your assistant can also see the times colleagues in your organisation are busy, where your Google Workspace shares them with you. When others on a task need to meet you, the assistant sees only when you are busy, never the details of your events.
  • Gmail: Depending on the level you choose: sending email from your address for the tasks you request; reading your messages and threads, including attachments; and managing your inbox (labels, archiving, read status, drafts and moving messages to the trash).
  • Your Google account details: The email address of the Google account you connect, so that we can show which account is connected.

How we use it

We use Google user data only to provide the features you use in Supermanager: your assistant carrying out the tasks you ask for, such as organising documents, booking meetings or replying to emails. We do not use it for advertising, we do not sell it, and we do not use it to determine creditworthiness or for lending purposes.

Human access

Supermanager is a service in which human personal assistants carry out your tasks. By connecting a Google service and asking your assistant to work on a task, you expressly agree that the assistants assigned to your tasks, and their supervisors, may view and act on your connected Google data to carry out the tasks you ask for. The actions they take on your Google data are recorded with the person and the task. No one else at Supermanager reads your Google data, except where it is necessary for security purposes (for example, to investigate abuse), to comply with applicable law, or with your further consent.

Artificial intelligence

Some features use artificial intelligence services to process content that you or your assistant bring into a task, for example to summarise a file shared from your Drive into a task's chat or to extract its details. We never use Google user data to develop, improve or train generalised or non-personalised artificial intelligence or machine learning models.

Storage and retention

Your files, events and emails stay in your Google account, and Supermanager reads them from Google when they are needed. We do not store the content of your emails or calendar events. We store only: the access credentials for your connection, encrypted, and the permissions you granted; for Google Calendar, the identifier of the Supermanager calendar and your calendar’s time zone; the identifiers and names of the Supermanager folder, your task folders and the folders you share; links between email threads and tasks; a record of the actions taken on your Google data (who, what, when, for which task, and the name of the file, the title of the event or the subject of the email); and copies of files your assistant shares into a task's chat, which are kept like any other file in a task.

When you disconnect a Google service, we revoke our access with Google and delete the stored credentials; your files stay in your Google Drive. The record of actions and the task files are kept for as long as your account is active, and you can ask us to delete them at any time (see Your Rights), unless we must keep them to comply with the law or to protect the security of our service.

Sharing

We do not transfer Google user data to anyone except: the service providers that host and process it on our behalf (cloud hosting and storage, and artificial intelligence services), under contract and only to provide our service; when required by law; as part of a merger, acquisition or sale of assets, with notice to you; or with your consent.

Withdrawing access

You can remove a folder you shared, or disconnect a Google service, at any time in Settings → Connectors. You can also remove Supermanager's access from your Google Account at https://myaccount.google.com/connections.

Limited Use

Supermanager’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data Retention

We retain your personal data only as long as necessary to:

  • Fulfill the purposes described in this policy.
  • Comply with legal, tax, or accounting obligations.
  • Resolve disputes or enforce our agreements.

When data is no longer needed, it will be securely deleted or anonymized.

Payment and transaction records (including payment requests, approvals and wallet movements) are retained for the periods required by applicable tax, accounting and anti-money laundering laws, which may be up to ten (10) years, including after your account has been closed.

7. Data Security

Supermanager employs industry-standard technical and organizational measures to protect your personal data, including encryption, secure servers, access controls, and periodic security audits.

Despite these safeguards, no online transmission or storage system can be guaranteed 100% secure. We continuously monitor and improve our defenses to minimize any potential risk.

In relation to payments, Supermanager does not store card numbers, expiry dates or security codes. Each purchase made on your behalf uses its own single-use virtual card with a limit set for that purchase. Authentication codes (such as 3-D Secure codes) are forwarded only to the assigned personal assistant to complete the relevant purchase and are not stored or logged. Every charge decision is recorded, including the payment method used and the reason it was selected, so that any charge can be traced and explained.

8. Your Rights

Under applicable data protection laws, you have the right to:

  • Access your personal data held by us.
  • Correct inaccurate or incomplete information.
  • Delete your personal data under certain conditions.
  • Restrict or object to particular data processing activities.
  • Portability: Receive a copy of your data in a structured, commonly used format.
  • Withdraw consent at any time, where processing is based on consent.

To exercise your rights, email us at hello@super-manager.com. We will respond within applicable legal timeframes.

9. Cookies and Tracking Technologies

Supermanager uses cookies, analytics, and other tracking technologies to optimize your user experience, remember preferences, and analyze performance. You can manage or disable cookies in your browser settings, although certain features may not function properly without them.

10. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure adequate safeguards such as EU Standard Contractual Clauses (SCCs) or equivalent legal mechanisms to protect your privacy.

11. Updates to This Policy

We may revise this Privacy Policy periodically to reflect changes in laws, technology, or our operations. The latest version will always be posted on our website, with the effective date prominently displayed.

Your continued use of Supermanager's services after updates constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns, or complaints about how Supermanager handles your personal data, contact us at:

Email: hello@super-manager.com

Address: Av. de Berna nº30 2ºB, 1050-042 Lisboa, Portugal

By using Supermanager, you agree to this Privacy Policy and the processing of your data as described herein.