Mabbly Privacy Policy

Introduction

Mabbly LLC (“we,” “us,” “our”) respects your privacy. This Policy explains what information we collect, how we use it, and your choices when using the Mabbly platform, applications, and related services made available through www.mabbly.ai (the “Service,” as further defined in our Terms of Service).

Information We Collect

Information You Provide: When you sign up or connect a CRM, we collect your name, email, organization, login credentials, and any files or content you upload or link.

Automatically Collected Data: We log activity data (e.g., pages viewed, API calls, integration events), device/browser details, IP address, and timestamps.

Third-Party Sources: We pull signal data (LinkedIn updates, news, blogs) and CRM data you authorize; we do not share your credentials.

Cookies & Similar Technologies: We use cookies as described in our Cookie Policy.

How We Use Your Information

• To provide, maintain, and improve the Service.
• To analyze usage, troubleshoot issues, and enhance performance.
• To send you updates, announcements, and legal notices (with opt-out where required).
• To enforce our Terms of Service and protect against abuse.

Payment Processing

Mabbly uses Stripe, Inc. as our third-party payment processor to handle all subscription fees and other payments made through the Service.

When you submit payment information, your payment data, including credit or debit card details, is transmitted directly and securely to Stripe. Mabbly does not store, access, or retain sensitive card data (such as full card numbers, CVV codes, or expiration dates) on our own servers. All such data is collected and stored exclusively by Stripe, which maintains PCI-DSS Level 1 certification.

In connection with processing your payment, Stripe may collect personal information such as your name, billing address, email address, and payment method details. Mabbly receives only a payment confirmation and a tokenized reference to your payment method.

For full details on how Stripe collects, uses, and protects your information, please review the Stripe Privacy Policy. By making a payment through the Service, you acknowledge that your payment information will be processed by Stripe pursuant to their privacy policy and terms.

How We Share Your Information

With Your Consent or at Your Direction: When you connect third-party CRMs or integrations.

Service Providers: We engage trusted vendors (hosting, analytics, payment processing, and support) under confidentiality obligations.

Legal Requirements: To comply with laws, respond to subpoenas, or protect rights and safety.

Business Transfers: If we merge, sell assets, or reorganize, your data may transfer under similar protections.

No Sale of Personal Information: We do not sell your personal information, and we have not done so in the preceding twelve (12) months. We also do not “share” personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act.

Third-Party Contact Data

The Mabbly Service is designed to help our customers manage and reactivate professional relationships, which means we process personal information about individuals who are contacts in our customers’ CRMs (“CRM Contacts”). CRM Contacts are typically not direct users of the Service.

Our Role: With respect to CRM Contact data, Mabbly generally acts as a processor (or “service provider” under the CCPA) on behalf of the Mabbly customer, who is the controller (or “business”). We process CRM Contact data only on documented instructions from our customers and in accordance with our agreements with them.

What We Process: CRM Contact data may include name, professional email address, employer, job title, public professional profile information (e.g., from LinkedIn), and publicly available signal data such as job changes, news mentions, blog posts, or company announcements.

Legal Basis: We process CRM Contact data on the legal bases of (i) the legitimate interests of our customers in maintaining and developing professional relationships and (ii) the contracts our customers have entered into with us. Where required, our customers are responsible for obtaining any necessary consents and providing required notices to their CRM Contacts.

Rights of CRM Contacts: If you are a CRM Contact and wish to exercise rights with respect to your personal data (access, correction, deletion, objection, restriction), please contact the Mabbly customer in whose CRM your data appears. You may also contact us directly at privacy@mabbly.com, and we will route your request to the appropriate customer and assist them in responding.

Data Sources: We obtain CRM Contact signal data from publicly available sources, including LinkedIn, news outlets, blogs, and company websites. We collect such data in compliance with applicable terms and applicable law.

Google API Data Usage and Limited Use Disclosure

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Data Retention

We retain your account and activity data for as long as you remain a user of the Service. After termination, we generally retain personal data for up to ninety (90) days to allow for account reactivation, plus additional periods only as required to meet legal, tax, accounting, or dispute-resolution obligations (typically up to seven (7) years for financial records). CRM Contact data is retained for as long as the relevant customer’s account remains active and is deleted or returned following termination in accordance with our agreement with the customer (including any post-termination export period provided for in that agreement), subject to the same legal-obligation exceptions.

Security

We implement industry-standard technical and organizational measures (encryption, access controls, audits) to protect your data. However, no system is 100% secure. Please notify us of any concerns.

International Transfers

Your data may be processed or stored outside your country. We use standard safeguards (e.g., EU Standard Contractual Clauses) where required.

Your Rights

Depending on your jurisdiction, you may have rights to:

• Access, correct, or delete your personal data.
• Restrict or object to certain processing.
• Request data portability.
• Withdraw consent where processing is based on consent.
• Opt out of the sale or sharing of your personal information (see the How We Share Your Information section).
• Not be discriminated against for exercising your rights.

To exercise these rights, contact us at privacy@mabbly.com.

Children’s Privacy

The Service is for users 18+. We do not knowingly collect data from minors under 18.

Changes to This Policy

We may update this Policy with 30 days’ notice (via email or dashboard). Continued use after changes means you accept the new version.

Contact Us

For questions or to exercise your rights, contact us at privacy@mabbly.com.