Privacy Policy
Last updated: 19 June 2026
Muloo Signals (“Muloo Signals”, “we”, “us”) is a product of Muloo. This policy explains what data we process when you use the Muloo Signals website and application, why, and your rights. It is written to reflect how the product actually works.
1. Who we are
Muloo Signals is operated by Muloo. For privacy questions, contact legal@muloo.co. Where required, Muloo acts as a data controller for account and website data, and as a data processor for the CRM and prospect data you bring into the product (see our DPA).
2. Data we process
Account data: name, work email, company, and authentication details for users of the app.
Website data: demo requests you submit (name, email, company, team size, message) and standard analytics/log data.
HubSpot data: with your authorisation via OAuth, we read contacts, companies and deals for context and dedup, and write qualified contacts/companies, notes and tasks back to your portal.
Prospect data: the prospect records you import via CSV, paste, or pull from HubSpot, plus research and outreach drafts generated for them.
3. Where prospect data comes from
Prospect data is sourced only from HubSpot, your CSV uploads, details you paste, or licensed data providers. We do not scrape LinkedIn, use unofficial LinkedIn APIs, or hijack browser sessions or cookies. We never automatically connect with or message anyone on your behalf — a human reviews and sends every outreach message manually.
4. How we use data
To provide the service: research and score prospects, generate editable outreach drafts, run the human-approved task queue, and sync qualified leads and activity to your HubSpot portal. We also use data to operate, secure, and improve the product, and to respond to support and demo requests.
5. AI processing
To generate research summaries and outreach drafts, relevant prospect context is sent to our AI model provider under contractual terms that prohibit using your data to train their models. Output is always editable and is never sent anywhere without a human approving it.
6. Sharing & sub-processors
We share data only with sub-processors needed to run the service (e.g. hosting, database, AI model provider, payment processor) under data-protection agreements. We do not sell personal data. A current sub-processor list is available on request.
7. Retention & security
We retain data for as long as your account is active or as needed to provide the service, then delete or anonymise it. HubSpot writes are logged and reversible. We use encryption in transit and at rest for credentials and apply least-privilege access.
8. Your rights
Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these, email legal@muloo.co.
9. Changes
We may update this policy; material changes will be notified in-app or by email. Continued use after an update constitutes acceptance.