Privacy Policy

Who we are

Maleus, Inc., a Delaware corporation located at 2261 Market Street STE 86895, San Francisco, CA 94114, United States (“Maleus”, “we”, “us”), is responsible for the personal information described in this policy. Our European subsidiary, Maleus Europe, 66 Avenue des Champs-Élysées, 75008 Paris, France, is our representative in the European Union (see “European Union, European Economic Area, and United Kingdom”).

This policy covers maleus.ai and our business conversations with prospects, partners, and the contacts of our customers. Data that our customers process inside the Maleus product is governed by their agreement with us, not by this policy.

Information we collect

• Information you give us: your name, work email, company, job title, phone number, and the content of your message, when you fill in a form, book a meeting, or email us.
• Usage information: pages viewed, referring site, browser, device, and approximate location derived from your IP address, collected through our hosting provider's logs and our cookieless analytics tool.
• Tracker information, where your choices allow it: HubSpot, PostHog, and RB2B identifiers, the pages you visit, and, through RB2B for visitors located in the United States only, professional details about you such as your name, job title, company, and professional profile.
• Information from other sources: professional details from public sources, such as professional networks or your company's website, when we prepare or follow up on a business conversation.

Sensitive information

We do not ask for sensitive information, such as health data or government identifiers, and ask you not to send it to us.

How we use it

• To answer your requests, run the meetings you book, and provide the services you sign up for.
• To send business communications to professionals about our products and events. You can opt out at any time through the link in our emails or by writing to us.
• To understand how the site is used and improve it.
• To keep the site and our services secure and prevent abuse.
• To comply with the law and enforce our rights.

How we share it

We share personal information only with:

• Service providers acting on our behalf: Vercel and Cloudflare (website hosting and delivery), HubSpot (customer relationship management, forms, meeting booking, and visit tracking), PostHog (visit measurement), Calendly and Google (meeting booking), and Google Workspace (email and documents).
• Third parties that receive information through trackers on the site, if you accept them: HubSpot and RB2B (identification of business visitors located in the United States).
• Maleus Europe, our subsidiary, for the purposes described in this policy.
• Authorities or other parties when the law requires it, or to protect our rights, users, or the public.
• A buyer or successor, if we are involved in a merger, acquisition, or sale of assets.

California residents

If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), gives you the rights below. In the last 12 months, we collected the categories of personal information described under “Information we collect”: identifiers, professional information, internet or other electronic network activity, and approximate geolocation. We collected them from the sources and for the purposes described above, and disclosed them for business purposes to the service providers listed under “How we share it”.

We do not sell personal information for money. However, our use of HubSpot tracking and RB2B on this site may count as a “sale” or “sharing” of personal information under the CCPA. The categories concerned are identifiers, professional information, and internet or other electronic network activity, and the recipients are the providers of these trackers. These trackers load only if you accept them in the consent banner, and you can withdraw that choice through the “Your privacy choices” link at the bottom of every page. We treat a Global Privacy Control signal from your browser as a valid opt-out. We do not knowingly sell or share the personal information of consumers under 16.

We do not use or disclose sensitive personal information for purposes that would give you the right to limit its use.

Subject to legal exceptions, you have the right to:

• Know what personal information we collected about you, its sources, purposes, and recipients, and get a copy of it.
• Correct inaccurate personal information.
• Delete personal information we collected from you.
• Opt out of the sale or sharing of your personal information.
• Not be discriminated against for exercising these rights.

Exercising your rights in the United States

To exercise these rights, write to [email protected] or send us a request through the contact form on this site. We will verify your request by matching the information you give us with the information we hold, and answer within 45 days, or explain why we need more time. You can use an authorized agent, who must show us your signed permission. Residents of other states with privacy laws can contact us the same way to exercise the rights those laws give them.

European Union, European Economic Area, and United Kingdom

If you are in the European Union, the European Economic Area, or the United Kingdom, Maleus, Inc. is the controller of your personal data under the General Data Protection Regulation (“GDPR”) and the UK GDPR. Our representative in the European Union, under Article 27 of the GDPR, is Maleus Europe, 66 Avenue des Champs-Élysées, 75008 Paris, France, represented by Nicolas Charlier de Chily, reachable at [email protected]. We have not appointed a data protection officer. We rely on the following legal bases:

• Your consent, for HubSpot and PostHog tracking. RB2B does not identify visitors located in the EU, EEA, or UK. You can withdraw it at any time from the “Gérer les cookies” or “Your privacy choices” link, without affecting what happened before.
• Our legitimate interests, to answer your requests, prospect professionals in a way relevant to their role, measure audience without cookies, and keep the site secure.
• Steps taken at your request before entering into a contract, and the performance of a contract with you.
• Compliance with our legal obligations.

International transfers

Maleus, Inc. and some of our service providers are located in the United States. When we transfer personal data from the EU, EEA, or UK to the United States, we rely on the EU-U.S. Data Privacy Framework and its UK extension where the recipient is certified, or on the European Commission's Standard Contractual Clauses, with the UK Addendum where relevant. You can ask us for more information about these safeguards.

Your rights in the EU, EEA, and UK

Subject to the conditions set by law, you have the right to:

• Access your personal data and get a copy of it.
• Rectify inaccurate data.
• Erase your data.
• Restrict how we use your data.
• Object to our use of your data based on legitimate interests, and to direct marketing at any time.
• Receive the data you gave us in a portable format.
• Withdraw your consent at any time.
• Not be subject to a decision based solely on automated processing that has legal or similarly significant effects on you. We make no such decisions.
• If you are in France, give instructions about what happens to your data after your death.

Exercising your rights in the EU, EEA, and UK

To exercise these rights, write to [email protected]. We answer within one month, which may be extended by two months for complex requests. If you are not satisfied with our answer, you can lodge a complaint with your local supervisory authority, such as the CNIL in France (cnil.fr), or the Information Commissioner's Office in the United Kingdom (ico.org.uk).

How long we keep it

• Prospect information: up to 3 years after our last contact with you.
• Customer and partner information: for the duration of the relationship, then for the periods required by law.
• Tracker data: the cookies last for the periods described in our Cookie Policy; the data collected through them is kept in HubSpot under the same rules as prospect information, and in PostHog for up to 1 year.
• Website logs: up to 30 days.

Security

We use technical and organizational measures to protect personal information, including access controls and encryption in transit. No system is perfectly secure, so we cannot guarantee absolute security.

Children

This site is meant for professionals and is not directed at children under 16. We do not knowingly collect their personal information.

Changes to this policy

We may update this policy. The date at the top shows the current version. If a change is significant, we will make it visible on this site.

Contact

For any question about this policy or your personal information, write to [email protected], or to Maleus, Inc., 2261 Market Street STE 86895, San Francisco, CA 94114, United States.