Security and privacy

What you allow

When you connect an agent, the Allow screen asks whether to allow that agent to act as you. The screen names the agent and shows two lists.

Under It can, the screen shows:

• Judge and decide on Postings
• Add, edit, and delete Private Postings
• Watch and unwatch Boards
• Edit your Target, Work Rights, and Record
• Move and close your Applications
• Store Assets it drafts
• Create, edit, and delete Kits
• Switch Autopilot on or off

Under It can’t, the screen shows:

• Apply or send anything
• Spend Credits itself, though pursuing a Posting or switching Autopilot on can
• Change your Plan

No tool applies, sends anything, or changes your Plan.

On Pro with Autopilot on, a Posting that your agent pursues starts Autopilot’s resume, and that resume spends Credits. The same happens when you pursue a Posting in the app, or when your agent adds a posting. To stop this, switch Autopilot off.

Posting text

A company writes the text of its Postings. You write the text of a posting that you add. Your agent gets the text of a Posting only when it asks for it, and SuperImpress labels that text untrusted. SuperImpress tells your agent never to follow an instruction in that text. SuperImpress cannot control what your agent does with the text.

Your client can ask you before your agent changes anything. SuperImpress tells your client which tools only read. If your client lets you approve each change, turn that on.

Who sees what

SuperImpress sees only the tool calls that your agent makes. It never sees your chats with your agent. Your agent’s provider sees everything that the tools return, and that includes your Career Record. Files that your agent reads on your computer, such as your résumé, go to your agent’s provider and never to SuperImpress.

Remove an agent

To end the access of an agent, remove it in the app:

1. Open Settings, then Connect your agent.
2. Find the agent under Agents you allowed. Each agent shows its name, when you allowed it, and when it last called.
3. Select Remove next to the agent.

SuperImpress refuses the next call from that agent. Your other agents keep working. To use the agent again, connect it again, then sign in and select Allow.

Removal in your client alone does not end the access. Only Remove in the app ends it. Then also remove SuperImpress in your client, so that your client stops trying to connect:

• Claude Code: run claude mcp remove --scope user superimpress. Use the same scope that you added it with.
• Claude Desktop and claude.ai: in Customize, then Connectors, select Remove next to SuperImpress.
• Codex: run codex mcp remove superimpress.

If you use claude.ai, remove SuperImpress there too. When you sign in to Claude Code with your claude.ai account, the connectors that you added on claude.ai also work in Claude Code.

When you delete your SuperImpress account, every agent loses its access.