Privacy
This notice explains what personal data Mahleon handles, why, and the choices you have. It covers this website and the Mahleon product. For the processor relationship with customer firms, see the Data Processing Agreement.
What we collect from you
Account details you give us (name, work email, firm), waitlist submissions (name, firm, role, adviser count, FCA status, current tooling), and the operational records the product creates as you use it. We do not run third-party advertising trackers on this site.
What the product processes
When your firm uses Mahleon, the product processes prospect identification data (name, title, company, location, LinkedIn URL) and messaging metadata on your firm's instructions, under the DPA. Your firm is the controller of that data; Mahleon is the processor.
Credentials
Mahleon runs through your own logged-in LinkedIn and Salesforce sessions in your own browser by default. We do not see or store those passwords. Where a firm chooses the exceptional credential fallback, the credential is encrypted at rest, scoped to that firm, and deleted on disconnect.
Lawful basis and first contact
Before a firm can find anyone, it signs a Legitimate Interest Assessment, and every first message discloses where the person was found, per UK GDPR Article 14. People contacted through Mahleon can have their data erased on request through the firm that contacted them, and erasures are recorded.
Retention and audit
Prospect data follows the retention policy in the DPA (default 12 months). Audit logs are retained as a compliance obligation and record actions, not marketing profiles.
Sub-processors and residency
The infrastructure providers we rely on are listed on the sub-processors page. CRM queries run against your firm's own Salesforce instance; EU editions keep that data in the EU.
Your rights and contact
You can ask what we hold about you, ask for correction or deletion, and object to processing. Contact us through your firm's Mahleon representative or the waitlist form on this site and a human will respond.