Scope of this policy
This policy covers the Mablens web application, marketing website, and connected services. It applies to visitors to the site, people who sign up for a workspace, and users invited to an existing workspace.
Information we collect
Information you give us directly
- Name, work email, company, role, and role-related details you enter when signing up or contacting us.
- Store URL and platform choice you enter when creating a workspace.
- Free-text messages you submit through the contact and signup forms.
Information we receive through platform connections
- Product listings from the stores you connect - photos, descriptions, prices, variants, inventory levels, and collection membership.
- Ad account metadata from ad platforms you connect - accounts, pixels, campaign structures, and performance metrics.
- Aggregate order metrics from your store, used to compute true ROAS. We do not import or store individual customer identities.
Information collected automatically
- Device, browser, IP, and page-level activity when you use the application, for security and product improvement.
- Standard server logs including timestamp and endpoint accessed.
Why we collect it
- To run the ad factory - reading catalog and ad account data is required to generate creative, launch campaigns, and optimize performance.
- To send workspace credentials, product notifications, and responses to inquiries.
- To keep the platform safe - detecting abuse, preventing fraud, and diagnosing incidents.
- To improve the product - measuring which features work and how customers use them, in aggregate.
Legal bases
Where applicable, we rely on the following bases: performance of a contract (delivering the product to workspace users), legitimate interests (running a secure, improving service), consent (for optional marketing communications, if any), and legal obligations (tax, accounting, and other regulatory requirements).
Sharing
We share information with a limited set of service providers we use to run the platform - cloud hosting, transactional email, generative model providers used only for creative generation from your product data, and error monitoring. Each is bound by contract to use the data only to provide the service to Mablens.
We do not sell personal data. We do not share your store or ad-account data with other Mablens customers, advertisers, or third parties outside the service providers described above.
Retention
- Signup and contact submissions - retained for as long as they are needed to respond and, where relevant, provision your workspace.
- Store catalog and connected ad account data - retained for the duration of the connection, then purged within 30 days of workspace deletion.
- Performance metrics - retained rolling 24 months, then aggregated for reporting continuity.
- Server and audit logs - retained rolling 12 months.
Your rights
- Access - request a copy of the personal data associated with your account.
- Correction - correct inaccurate personal data.
- Deletion - request deletion of your personal data, subject to any legal retention obligations.
- Restriction and objection - restrict or object to specific processing activities where the law provides that right.
- Portability - receive your data in a portable format, where applicable.
Requests can be submitted through the Contact page. We respond within 30 days for standard requests.
Cookies and similar technologies
Mablens uses strictly-necessary cookies for authentication and session state, plus a small number of first-party analytics cookies to understand aggregate product usage. We do not use cross-site advertising cookies on the marketing site or in the product.
International transfers
Data may be processed in cloud infrastructure regions outside your country. Where required, we rely on standard contractual clauses and equivalent safeguards for cross-border transfers. Region-specific data residency is available on the Scale tier.
Security
We use TLS 1.2 or higher for all network traffic and AES-256 encryption for data at rest. Access to production data is scoped, logged, and requires MFA. A full security overview is available on the Security page and, on request, as a detailed document.
Children
Mablens is a business product. It is not directed to children, and we do not knowingly collect information from anyone under the age of 16.
Changes to this policy
If we update this policy, the changes will appear on this page. Where changes materially affect how your data is used, we will notify workspace administrators through the product before the changes take effect.
Contact
Questions about this policy, data requests, or security concerns can be raised through the Contact page. We treat privacy inquiries as priority and route them to the right person.