Privacy
This notice explains what personal data Mahleon handles, why, and the choices you have. It covers this website and the Mahleon product. For the processor relationship with customer firms, see the Data Processing Agreement.
What we collect from you
Account details you give us (name, work email, firm), waitlist submissions (name, firm, role, adviser count, FCA status, current tooling), and the operational records the product creates as you use it. We do not run third-party advertising trackers on this site.
What the product processes
When your firm uses Mahleon, the product processes prospect identification data (name, title, company, location, LinkedIn URL) and the record of what was sent to whom and when, on your firm's instructions, under the DPA. Your firm is the controller of that data; Mahleon is the processor.
Message content and reply detection
Mahleon stops contacting someone the moment they reply, which means it has to know when a reply has arrived. To do that, the browser extension reads the response your own LinkedIn inbox already returns and sends it to Mahleon, where it is interpreted to decide which conversations have been answered. That response can contain the text of messages in those conversations, including messages written by the other person. We use it only to determine whether a conversation has been answered, to stop the sequence, and to show the firm the reply it needs to answer. It is not used for any other purpose, not used to build profiles, and not sold or shared with anyone.
The extract of a reply that we keep
When a reply is detected, Mahleon keeps the short preview of that conversation that LinkedIn shows in an inbox list — a few hundred characters at most, which can include words the other person wrote. It is kept so the firm can see and answer the reply it has received, and so that a reply can be evidenced if it is ever questioned. It is encrypted before it leaves the machine that read it, with a key held in Mahleon's own secret store and not in the database, so a copy of the database on its own does not reveal it. Only people signed in to the firm that sent the message can see it. It is kept with the rest of that person's record, deleted on the same retention schedule, and removed immediately if that person asks to be erased.
Credentials
Mahleon runs through your own logged-in LinkedIn and Salesforce sessions in your own browser by default. We do not see or store those passwords. Where a firm chooses the exceptional credential fallback, the credential is encrypted at rest, scoped to that firm, and deleted on disconnect.
Lawful basis and first contact
Before a firm can find anyone, it signs a Legitimate Interest Assessment, and every first message discloses where the person was found, per UK GDPR Article 14. People contacted through Mahleon can have their data erased on request through the firm that contacted them, and erasures are recorded.
Retention and audit
Prospect data follows the retention policy in the DPA (default 12 months). Audit logs are retained as a compliance obligation and record actions, not marketing profiles. When a person is erased on request, every copy of them is removed: the records a scan created, their enrolment in any sequence, and any replies recorded against them. What remains is a dated entry confirming the erasure happened, which identifies no one.
Sub-processors and residency
The infrastructure providers we rely on are listed on the sub-processors page. CRM queries run against your firm's own Salesforce instance; EU editions keep that data in the EU.
Your rights and contact
You can ask what we hold about you, ask for correction or deletion, and object to processing. Contact us through your firm's Mahleon representative or the waitlist form on this site and a human will respond.