Privacy Policy

Version: 2026-09-25

Mail Vidi Vici is a B2B business contact discovery, inference, verification, and lookup automation service operated by Mantle Works LLC ("MVV"), a Delaware limited liability company. This notice covers visitors, account holders, extension users, people who contact MVV, and individuals whose professional information is submitted, generated, verified, or returned in a lookup ("lookup subjects").

Business email addresses and inferred contact details can be personal information even when used for B2B purposes. An inferred address is not necessarily public, accurate, or supplied with the individual's consent.

Your privacy choices: To stop your information being supplied in future lookup results, request access, correction or deletion, or object to processing, email privacy@mailvidivici.com. No account or subscription is required. Unsubscribing from MVV newsletters is separate from stopping disclosure of your information in lookup results.

1. Responsible organization and contact

Mantle Works LLC
8 The Green, Ste A
Dover, DE 19901
United States

Privacy requests and questions: privacy@mailvidivici.com. Postal requests may be addressed to Mantle Works LLC, Attention: Privacy, at the address above.

MVV is responsible as a controller, or the corresponding business under applicable law, for processing whose purposes and essential means it determines, including account administration, billing, security, contact discovery, and privacy-request handling. Customers independently determine their own outreach and downstream uses of results. Their responsibilities do not replace MVV's responsibilities.

If MVV separately agrees to process information solely on a customer's documented instructions, the applicable processing agreement governs that activity. A person's rights depend on the actual processing and applicable law, rather than a label chosen in a contract. This notice does not designate an external provider as a processor when it acts independently for its own purposes.

2. Information collected and its sources

The information processed depends on your interaction with the Services and the features used. Collection can occur through forms, account activity, customer submissions, supported browser-extension functions, technical logs, communications, and verification or contact-information services.

Payment-card information is handled by payment providers. MVV does not store full payment-card numbers. Authentication information is processed for account security and is not included in contact results.

A customer may provide information about a lookup subject without that person having visited MVV. A professional name or company domain may be publicly visible while an inferred email address is not. Public availability does not remove all privacy obligations. You may request information about the sources and recipients of your information, including their identities where applicable law requires disclosure.

MVV does not request health information, political or religious beliefs, biometric identifiers, private correspondence, or other sensitive profile information for contact discovery. Do not include such information in lookup inputs or diagnostic attachments. Account login credentials may qualify as sensitive personal information under some laws even though they are used only for account functions and protection.

3. Purposes and legal grounds

MVV uses personal information to provide and secure accounts; perform requested B2B contact lookups and verification; return results and available lookup history; administer credits, billing and subscriptions; provide support; maintain service reliability; prevent misuse; handle privacy choices; and meet applicable legal obligations.

Where EU or UK data-protection law applies, the following grounds apply only where their legal conditions are satisfied:

A contract between MVV and a customer is not a contractual basis for processing an unrelated lookup subject's information. Before relying on legitimate interests, MVV must assess the purpose, necessity, and balance of interests, including the person's reasonable expectations and likely effects. A successful lookup is not a finding that a customer's intended outreach is lawful.

You may object to processing based on legitimate interests. Where information is processed for direct marketing, including related profiling, you may object at any time and that processing must stop. For other legitimate-interest processing, MVV considers the objection under the applicable legal test, including any compelling grounds or legal-claims exception.

Providing an account email and required authentication details is necessary to create and secure an account. Required billing information is necessary to administer a paid purchase or meet applicable invoicing duties. Without necessary information, the corresponding feature may be unavailable. Optional profile information, marketing choices, and diagnostic attachments are not required to exercise privacy rights.

4. Contact results, paid access, and downstream use

A requesting customer receives the professional contact result associated with its B2B lookup. Depending on the request, this can include a name, business email address, company or domain, role, professional-source context, and verification information. Providing access to personal information through paid subscriptions may constitute a sale under applicable US state privacy laws, even when payment is described as a subscription or service fee.

Do Not Sell or Share My Personal Information: You can ask MVV to stop supplying your information in future results by contacting privacy@mailvidivici.com. Include enough information to identify the relevant records, such as the business email address or professional profile concerned. Using that email subject is optional. No paid or free account is required.

Customers must establish their own lawful basis and any necessary permissions for outreach, protect exported results, and comply with objections, removal notices, and retention limits. The Terms of Service prohibit spam, unlawful outreach, resale of results as a data product, and regulated eligibility decisions. Those restrictions do not transfer MVV's legal duties to customers.

Customers may place results in their own CRM or with service providers solely for their permitted internal B2B use, subject to appropriate security and binding use and removal restrictions. Their providers are not authorized to reuse or resell the information independently. Customers' security, retention, no-resale, correction, objection, and removal obligations continue for as long as they retain results, including after a subscription or account ends. Cancellation does not cancel an outstanding removal request or prevent a required notice concerning previously exported results.

MVV does not operate customers' outreach campaigns. You may contact a sender directly to stop its messages, while also exercising your rights against MVV. Where required, MVV communicates correction, deletion, restriction, or opt-out instructions to affected recipients and requires their cooperation. Customers must apply required action to their exports, CRM, campaigns, and providers under their control, confirm completion when reasonably requested, and document any legally permitted restricted retention. They must not reintroduce information through another lookup or an older export to evade a required removal or restriction. MVV cannot directly erase a file from a customer's independent system merely by changing its own database.

5. Browser extension and diagnostic reports

The extension's purpose is to help users perform requested B2B business email lookups from supported professional pages. It may read visible professional details such as name, title, company, domain, and profile URL, and transmit relevant lookup inputs and authentication information to MVV. Extension permissions do not authorize unrestricted collection of browsing activity or access to unrelated private content.

Diagnostic exports include page HTML. If you generate a debugging report, it may contain sanitized HTML from the active supported page, the page URL, extracted professional fields, popup state, account identifiers, and technical diagnostics. Sanitization is intended to remove active content and credential-like values; it does not make the report anonymous or necessarily remove visible personal information. Review the report and remove unrelated material before choosing to share it with support.

When you send a report, MVV uses it to investigate the reported fault, understand relevant page-structure changes, improve the extension's extraction reliability, and address related security or abuse issues. A report may expose information about the professional whose page was open, so it receives the same applicable personal-information protections as other service records.

MVV will comply with the Chrome Web Store User Data Policy, including its Limited Use requirements, in its use and transfer of data obtained through the extension. The following restrictions apply to raw extension data and information derived from it, including aggregated or deidentified derivatives:

• Use is limited to the disclosed B2B lookup purpose and necessary related operation, support, security, performance, and reliability activities.
• Transfers are limited to those necessary for that purpose, legal compliance, protection against fraud or abuse, or a permitted business transfer. Where the extension rules require explicit prior user consent for a business transfer, that consent is required.
• Human access is limited to authorized review with the user's specific permission, necessary security or legal activity, or permitted review of aggregated and anonymized information for internal operations.
• Extension data is not used or sold for personalized advertising, supplied to unrelated data brokers or information resellers, or used for creditworthiness, lending, or other prohibited eligibility purposes.
• Submitted information and extension content are not licensed for unrelated general-purpose model training. Describing information as platform data or a derived result does not remove the extension restrictions that apply to its origin.

These restrictions do not replace applicable privacy law or authorize violation of a third-party website's terms. The extension is not intended to collect passwords, private messages, unrelated browsing history, or content outside its disclosed workflow.

6. Recipients and service providers

MVV uses the following recipient categories. The information disclosed depends on the function performed and the relevant request; each recipient does not receive every category.

Where a provider processes information on MVV's behalf, applicable contractual restrictions must limit its processing to authorized purposes and require appropriate protection. Some recipients may have independent legal responsibilities for specific activities, such as payment-fraud prevention. MVV does not claim that every recipient is merely a processor.

You may request further information about the sources and recipients of your information. MVV provides recipient identities and other details where required by applicable law.

Business transfers do not automatically authorize incompatible new uses. Required notices, safeguards, and any required consent must be provided before such processing. The additional restrictions in section 5 continue to apply to extension-derived information.

7. Cookies, website measurement, and marketing

Necessary cookies or equivalent storage support sessions, authentication, form security, and privacy preferences. Website measurement and tag-management tools can process visitor and interaction information to understand use of the website, diagnose errors, and measure the effectiveness of MVV's marketing.

Depending on the enabled configuration, measurement can include page views, referrals, scrolls, downloads, video or form interactions, browser identifiers, and approximate location. If a measurement feature processes contact details supplied in a form, including hashed identifiers, its specific use must be disclosed with the required choices. Hashing a contact detail does not necessarily make it anonymous.

Where consent is required for nonessential cookies, storage, tracking, or personal-information use, the relevant activity must wait until the required choice has been made. You can withdraw consent through the applicable website preference controls or by contacting MVV; browser settings can also restrict cookies. Blocking necessary storage may prevent account features from functioning. Withdrawing consent does not affect processing lawfully completed before withdrawal.

Disclosure for cross-context behavioral advertising can be "sharing" under California law or targeted advertising under other laws, even if no payment changes hands. Any such enabled activity is subject to the required opt-out and consent controls. It is different from supplying a B2B lookup result to a customer. The restrictions on extension information in section 5 apply regardless of a website tracking preference.

Where applicable law requires recognition of an opt-out preference signal such as Global Privacy Control, MVV must apply it to the relevant browser or device information and to an associated account or individual when identifiable as required by law. A signal does not itself reveal every business email address you use. You may supply additional identifiers to apply a request to otherwise unassociated lookup information; this does not replace the obligation to honor a recognizable signal. Legacy Do Not Track signals are not a substitute for the specific signals required by applicable law.

Optional newsletters require a separate choice. Use the unsubscribe link or email MVV to stop its marketing messages. Necessary account, billing, security, and privacy-request messages remain separate. Newsletter unsubscribe does not automatically remove your professional information from lookup results; request suppression or deletion for that purpose.

8. Retention, deletion, and suppression

MVV keeps personal information only for as long as reasonably necessary for the stated purpose and applicable legal obligations. Retention depends on the category, the account or request relationship, security needs, unresolved disputes, required records, and the impact of continued storage. There is no blanket entitlement to keep all lookup data indefinitely.

A minimal suppression record may retain the email address, professional identifier, or other information needed to recognize the subject of an objection, together with necessary request metadata. That record supports the privacy choice; it is not used for marketing or supplied as a contact result. Removing a suppression record while continuing contact discovery could allow the same information to be returned again.

Deletion and suppression are distinct. MVV removes or restricts information when required and can retain limited information for a valid legal exception. Such retained information remains protected and cannot be used for a purpose the exception does not permit. MVV explains applicable exceptions when responding to the request and communicates required actions to relevant providers and recipients.

9. International processing and transfer safeguards

MVV is incorporated in the United States. Information may be processed in the United States and in other countries where the relevant hosting, verification, payment, communications, support, or authorized personnel operate. Remote access from another country can also constitute an international transfer. US incorporation does not establish that all processing or management occurs in the United States.

Some destinations have different privacy protections. Where the applicable law restricts a transfer, the transfer requires an applicable adequacy decision, legally effective safeguards, or a permitted exception before it proceeds. Depending on the transfer, safeguards can include the relevant EU Standard Contractual Clauses, an applicable UK transfer instrument, or a transfer arrangement permitted under Turkish law, together with any required assessment and supplementary measures. These mechanisms are not interchangeable.

This notice does not itself execute a transfer agreement, certify a recipient, or establish an exemption. Browsing, accepting service terms, or acknowledging this policy is not blanket consent to international transfers. You can request the destinations and the mechanism applicable to your information, and a copy or description of the relevant safeguards, by emailing privacy@mailvidivici.com, subject to legally permitted redactions.

10. Security and incidents

MVV uses organizational and technical measures designed to protect personal information in proportion to the processing and risks. These include access restrictions, protection of account credentials, secure connections, and measures for detecting and responding to misuse or security incidents. Access to support reports and privacy-request information is restricted to the relevant purpose.

No system is completely secure. This does not waive MVV's security duties. Where required, MVV will notify the appropriate authority and affected individuals of a personal-information breach within the applicable deadlines. Report a suspected incident to privacy@mailvidivici.com; do not send passwords or full payment-card details.

11. Your rights and how to request them

Depending on the applicable law and processing, you may have rights to confirm processing; access information and obtain a copy; know relevant sources, purposes, and recipients; correct inaccuracies; request deletion or restriction; receive portable information; object; withdraw consent; and opt out of sale, sharing, targeted advertising, or qualifying automated decisions.

Email privacy@mailvidivici.com or send a written request to the address in section 1. Describe the request and provide enough information to locate the relevant records. A lookup subject does not need an account, a subscription, or proof of being an MVV customer. MVV does not charge for ordinary rights requests, except where a particular law expressly permits a charge.

For access, account deletion, or other requests that could expose or change information about someone else, MVV may require proportionate verification. MVV uses that information only to handle the request, prevent misuse, and maintain necessary compliance evidence. An ordinary sale opt-out or suppression request does not require government identification or a verified customer account; necessary information may still be requested to identify the records concerned.

An authorized agent may act with appropriate authority. Where allowed, MVV may verify that authority or seek confirmation from the person concerned, with the verification requirements adapted to the type of request.

MVV responds within the applicable legal deadline, explains any permitted extension or refusal, and does not unlawfully discriminate because you exercise a right. A response or confirmation will identify the action taken. If a request cannot be fully honored, MVV explains the applicable exception and available review route.

Appeals: Where a law provides an appeal, reply to the decision or email privacy@mailvidivici.com and ask for review. No particular subject line is required. MVV will respond within the applicable appeal period and provide the relevant regulator contact where required. You may also raise a privacy concern even where a statutory appeal right does not apply.

12. EU, EEA, and UK information

Where the GDPR or UK GDPR applies, the rights above include the relevant access, rectification, erasure, restriction, objection, and portability rights. Portability and other rights have specific legal conditions and are not available identically for every processing activity. Requests are generally addressed within one month, with a further two months only where legally permitted and with the required explanation.

When MVV obtains personal information indirectly, MVV must provide the required privacy information within the applicable Article 14 period, generally no later than one month and, where applicable, by the earlier first communication or disclosure, unless a valid exception applies. A website notice alone is not a general exemption from informing people. Any reliance on an exception must be assessed for the actual processing.

You may complain to the data-protection authority for your habitual residence, workplace, or the place of the alleged infringement, as applicable. EU/EEA authority details are available through the European Data Protection Board. In the UK, contact the Information Commissioner's Office. A customer contract does not remove a lookup subject's statutory rights or regulatory remedies.

13. Türkiye information

Where Law No. 6698 (KVKK) applies, MVV processes the information described in this notice through the electronic and communication methods in section 2. The applicable processing condition is assessed for each activity: contractual necessity for information about a contracting individual, a specific legal obligation, establishment or protection of rights, or necessary legitimate interests that do not harm the individual's fundamental rights and freedoms. Explicit consent is used where required. An inferred email is not treated as having been made public simply because a name or professional profile is visible online.

Your rights can include learning whether information is processed, obtaining information about the processing and its purpose, knowing recipients in Türkiye or abroad, correcting inaccurate or incomplete information, requesting erasure or destruction where the legal conditions are met, requesting notification of relevant recipient corrections or removals, objecting to a result against you produced solely through automated analysis, and seeking compensation for unlawful processing.

Submit a request through section 11. Where a formal KVKK application requires additional information or a particular submission method, MVV will explain what is necessary without requesting excessive information. Requests are concluded as soon as possible and no later than 30 days, subject to applicable law. Ordinary applications are free; only charges expressly allowed under the applicable tariff may apply.

If the response is refused, insufficient, or not provided in time, you may complain to the Turkish Personal Data Protection Authority under the applicable procedure. This generally requires first applying to the controller; the complaint periods are 30 days from learning of its response and, in any event, 60 days from the application. International transfers require a valid basis under the current transfer provisions; this policy is not an express-consent form for that purpose.

14. California and other US state privacy information

State-law rights apply where the relevant law covers MVV and the information or activity concerned. A B2B description is not a universal exemption. This section supplements the categories, purposes, sources, recipient, and retention disclosures above.

The categories relevant to the service include identifiers; account and customer-record information; commercial and transaction information; internet or electronic-network activity; approximate geolocation; professional or employment-related information; and inferences. Account credentials may qualify as sensitive personal information. MVV does not use those credentials to infer personal characteristics or include them in lookup results.

Disclosure for business purposes: The recipient categories in section 6 receive the categories necessary for their stated functions, including hosting and security, verification, payments, communications, support, and website measurement. These operational disclosures are separate from the supply of contact results to requesting customers.

Sale of contact results: The planned paid lookup service makes professional identifiers, professional or employment context, and inferred or verified contact information available to requesting B2B customers. Those are the result categories relevant to a sale assessment. At initial customer launch, this is a description of the service being offered, not a statement that customer-result sales have already occurred throughout the preceding 12 months.

Sharing or targeted advertising: Browser identifiers, approximate location, and website interaction or campaign events may fall within these concepts if an enabled advertising or measurement arrangement meets the applicable definition. Website activity is separate from customer-result sales. An absence of paying customers does not by itself establish that no website information has been collected or disclosed. Section 7 explains the relevant choices.

Where applicable, California residents can request information about categories and specific pieces of information, sources, purposes, recipients, and sales or sharing; correct or delete information; obtain required portable information; opt out of sale or sharing; and limit qualifying sensitive-information uses. MVV uses account authentication information only for account access, security, and related permitted operational purposes. MVV does not knowingly sell or share personal information of individuals under 16.

For covered California requests to know, correct, or delete, the general response period is 45 days, extendable by a further 45 days only where permitted and with notice. Covered sale or sharing opt-outs must be implemented as soon as feasibly possible and no later than 15 business days; a shorter applicable deadline controls. MVV will provide required request acknowledgments and confirmations, communicate required recipient instructions, and honor the applicable restrictions on asking a person to opt back in.

Other applicable state laws may provide similar rights, rights to information about particular recipients, opt-outs, and appeals with different conditions or deadlines. Use the same contact methods and appeal route in section 11. MVV does not require a waiver of statutory rights to make a privacy request. Complaints may be submitted to the relevant state regulator; California residents can contact the California Privacy Protection Agency or the California Attorney General.

15. Automated processing and prohibited decisions

Email inference and verification use automated processing to generate candidate addresses and assess technical validity. They do not establish that an address belongs to a particular person or that outreach is permitted. The Services are not offered to make credit, lending, insurance, housing, employment eligibility, or other regulated eligibility decisions.

MVV also uses technical controls to manage authentication, credits, security, and misuse. If you believe a result, account restriction, or automated action is incorrect, contact MVV for review. Any additional rights concerning automated decisions apply where the relevant legal criteria are met; this notice does not treat every technical calculation as a legally significant automated decision.

16. Children

The Services are intended for adults conducting B2B activities and are not directed to children. MVV does not knowingly provide accounts to people under 18 or knowingly seek children's information for contact discovery. If you believe a child's information has been supplied, contact privacy@mailvidivici.com so MVV can investigate and take appropriate removal or restriction action.

17. Changes and relationship to the service terms

MVV publishes a dated version of this notice and provides notice of material changes as appropriate to the change and applicable law. If a new use requires additional notice, consent, or another legal condition, publishing an updated notice does not substitute for satisfying that requirement. Continued browsing is not blanket consent to new processing.

The Terms of Service govern the customer contract, including permitted data use, exports, downstream removal obligations, billing, and disputes. This policy does not bind lookup subjects to arbitration merely because their information is processed, waive a statutory privacy remedy, or treat acknowledgment of the policy as marketing consent. Account deletion and subscription cancellation are coordinated as described in the Terms, while limited legally required records may be retained.

For privacy questions, requests, objections, or appeals, contact privacy@mailvidivici.com or write to Mantle Works LLC at the address in section 1. For account or billing help, contact support@mailvidivici.com.