Super Suite · RVRS
Privacy policy
Last updated 28 October 2026. This policy covers every Super Suite module (SMM, Ads, Analytics, Admin), including the apps formerly called Super SMM and Meta Agent.
Super Suite is a marketing operations service run by RVRS (rvrs.ai). It helps businesses we operate, and clients who ask us to, plan and publish content, answer their customers, run ads and administer their own accounts through each platform's official APIs.
What we receive
- Account identifiers and access tokens for the accounts a business connects (for example an Instagram professional account or a Facebook Page), limited to the permissions the business approved.
- Messages and comments people send to a connected account, with the sender's public name, handle and platform-scoped id.
- Posts, captions, media and their performance numbers (reach, impressions, likes, comments, saves, views).
- Ad account data: campaign, ad set and ad names, status, budgets and delivery metrics.
- For businesses that connect Google: Workspace users and sign-in alerts, email security records for their domains, and Google Ads accounts and spend, read-only.
We never receive passwords, and we never use browser automation or unofficial APIs to act on an account.
How we use it
- To show a business its own content, inbox, comments, ads and numbers in one place.
- To draft posts and replies for a person at the business to review. Anything published, sent or changed goes only through the business's own connected accounts and within the approval rules it sets; anything that spends money always needs a person's approval.
- To sort incoming messages by topic and urgency so nothing is missed.
We do not sell data, build advertising profiles, or share it with anyone other than the business it belongs to, and we do not use it to train AI models. Text may be processed by language models on our own hardware or by our AI provider solely to produce drafts and summaries for that business.
Where it is stored and for how long
Data is stored on our own workstation and in private Cloudflare databases behind passcode sign-in. Tokens and account data are kept while an account is connected. Copies of conversations and comments are deleted within 30 days after a business disconnects or asks us to. Drafts, images and recordings a business creates are its own and are kept until it deletes them or asks us to. Security logs are kept for up to 7 days.
Your choices
A business can disconnect at any time, in Super Suite or in the platform's own settings (for Instagram: Settings → Website permissions → Apps and websites; for Facebook: Business Settings). If you messaged or commented on a business that uses Super Suite, see the data deletion page.