Privacy Policy

We process personal data in line with EU GDPR. By using our service, you agree to this Privacy Policy.

Controller: MABTED GmbH, Gertigstraße 5, 22303 Hamburg, Germany – privacy@mabted.com

• Contact data; account data (settings, preferences)
• Influencer data (names, email addresses, social media handles, follower counts, niches)
• Brand data (company names, contact persons)
• Campaign and engagement data (contracts, budgets, periods, deliverables)
• Performance metrics (TKP, ROAS, engagement rates, revenue data)
• Shopify account data and revenue information
• Gmail account data and email threads
• Application and usage data (rules, schedules, logs, IP/browser/device)

We share data only when legally permitted, contractually necessary, or with your consent. Third-country transfers are made under Art. 46 GDPR safeguards (SCCs / Data Privacy Framework).

Current processors (as of 4 May 2026):

Detailed data categories and transfer bases are documented in the DPA.

No automated decision-making with legal effect (Art. 22 GDPR): No solely automated decision-making within the meaning of Art. 22 GDPR producing legal effects or similarly significant effects on data subjects takes place. AI suggestions (e.g. negotiation extraction, email drafts, screenshot analysis) are reviewed and released by a human before they take effect.

Our application uses the Google OAuth 2.0 API to connect your Gmail account. Below we disclose what Google user data is accessed and how it is used.

Google user data accessed:

• Your Google account email address (via the "openid" and "email" scopes) to identify the connected account
• Gmail message content, headers, and metadata (via the "gmail.readonly" scope) to read and display email threads within the application
• Gmail send capability (via the "gmail.send" scope) to send emails on behalf of the user directly from the application

How Google user data is used:

• Email address: Displayed in settings to identify the connected Gmail account
• Gmail read access: To fetch and display email conversations related to influencer communications within the application
• Gmail send access: To send outreach and communication emails to influencers directly from the application using the user's Gmail account
• Refresh tokens are encrypted (AES-256) and stored in our database solely for the purpose of refreshing access tokens for the above functionalities

Restrictions on use:

• Google user data is not shared with or sold to third parties
• Google user data is not used for advertising purposes
• Google user data is not used for purposes beyond the functionality described above
• Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements

Revoking access:

• Users can disconnect their Gmail integration at any time via Settings > Email > "Disconnect" in the application
• Upon disconnection, stored tokens are immediately deleted from our database
• Users can also revoke access directly via their Google Account security settings under "Third-party apps with account access"

Data retention only as long as necessary; deletion/anonymization within 30 days after account deletion.

We use strictly necessary cookies, and — only with your consent — analytics and session-replay cookies. You can withdraw your consent at any time via the "Cookie settings" link in the footer.

Microsoft Clarity records anonymised session activity (clicks, scroll, mouse). Keystrokes are masked by default and are not recorded. You may consent to or refuse this tool independently.

This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator's legitimate interests (Section 6 paragraph 1 lit. f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.

In order to do this, a javascript-based code is used to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally.

The data stored by SalesViewer® will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.

The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on this link in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.

• Access, rectification, erasure (Art. 15-17 GDPR)
• Restriction (Art. 18 GDPR)
• Portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
• Complaint to a supervisory authority (Art. 77 GDPR)

Logged-in users will find pre-filled templates under Settings → Privacy & Account (path: /settings/privacy). Otherwise, write to support@mabted.com. We confirm receipt within 72 hours and complete processing within the statutory one-month deadline (Art. 12(3) GDPR). Processing is free of charge.

TLS encryption in transit and AES-256 at rest, role-based access system, encrypted API tokens and access keys, logging of all access, regular security updates; EU hosting (Frankfurt/Amsterdam).

We may update this policy; the latest version can be found on our website.

Contact: privacy@mabted.com or the Hamburg Commissioner for Data Protection and Freedom of Information.