How sign-in works

Marmel.AI uses a secure one-time passcode (OTP) system for all sign-ups and logins. Instead of a password, you'll receive a six-character code sent directly to your verified email address. Each OTP is valid for a short period and can only be used once.

This passwordless approach eliminates common security risks like weak passwords, password reuse, and credential stuffing attacks. Your email becomes your primary authentication method, so keeping your email account secure is essential.

Two-factor authentication (2FA)

Before publishing any live project or campaign, all creators must enable two-factor authentication (2FA). This adds an essential layer of security - even if someone gains access to your email, they cannot publish, modify campaigns, or access funds without your second authentication factor.

We recommend using an authenticator app such as Google Authenticator, Authy, or 1Password to manage your 2FA codes. Authenticator apps are more secure than SMS-based 2FA, which can be vulnerable to SIM-swapping attacks.

Once enabled, you'll need to enter a code from your authenticator app whenever you perform sensitive actions like publishing a campaign or modifying payout settings.

Protecting your account

Your account security is a shared responsibility. Marmel.AI provides secure infrastructure, but you must take steps to protect your own access.

Stripe account security

Your Stripe Connect account holds your funds and payout information. Stripe has its own security measures, but you should also take steps to protect this account.

Use a strong, unique password for your Stripe dashboard. Enable 2FA on your Stripe account separately from Marmel.AI. Review your Stripe account activity regularly for any unauthorized access or unexpected transactions.

If you suspect unauthorized access to either your Marmel.AI or Stripe account, contact our support team immediately and change your credentials.

Contact support

What data we collect

Marmel.AI collects only the data necessary to operate the platform, process transactions, and meet legal requirements. We believe in data minimization. If we don't need it, we don't collect it.

How we protect your data

All data is encrypted both in transit and at rest. When data moves between your device and our servers, it's protected by industry-standard TLS encryption. When stored on our servers, it's encrypted using strong algorithms to prevent unauthorized access.

Access to user data within our organization is restricted to employees and contractors who need it to perform their duties. All access is logged and monitored. We regularly review and update our security practices to defend against evolving threats.

We do not sell your personal data to third parties. Data sharing is limited to trusted partners who provide critical services, such as Stripe for payment processing, cloud providers for hosting, and security services for fraud prevention. These partners are contractually bound to protect your data.

Compliance and regulations

Marmel.AI adheres to strict data protection standards, including GDPR compliance for users in the European Union and equivalent regulations in other jurisdictions.

For users in the EU, you have rights under GDPR including the right to access your data, correct inaccuracies, request deletion, and data portability. We honor these rights for all users regardless of location.

Financial data is handled in compliance with PCI-DSS standards through our payment partner, Stripe. Marmel.AI does not store your full credit card numbers or sensitive payment details. This information is handled entirely by Stripe's secure infrastructure.

Your data rights

You have the right to access, export, or delete your personal data at any time. If you'd like a copy of the data we hold about you, or if you want to request deletion of your account and associated information, contact our support team.

We'll process your request in accordance with applicable data protection laws. Some data may need to be retained for legal, compliance, or dispute-resolution purposes even after account deletion. For example, transaction records required for tax reporting. Where retention is necessary, we'll anonymize or minimize the data wherever possible.

If you're a creator with an active campaign or unsettled funds, account deletion may be delayed until those obligations are fulfilled.

Contact supportPrivacy Policy

Third-party services

Marmel.AI integrates with third-party services to provide essential functionality. Each service has its own privacy policy and data handling practices.