DeadAccount.ai Privacy Policy

Account data: When you sign up, we collect your name, work email address, company name, and role.

Territory and CRM data: We process the account lists, company names, domains, and associated fields you upload or sync from your CRM. This data is used solely to provide the scanning and tiering service. See Section 7 (B2B Data) for important information about your responsibilities as a data controller for this data.

Usage data: We collect information about how you interact with the product — pages visited, features used, scan activity, and session metadata — to improve the service and diagnose issues.

Billing data: Payment information is collected and processed by Stripe. We do not store full card numbers or payment credentials on our systems. We retain records of transaction history and subscription status.

Communications: If you contact us by email or through our waitlist or onboarding forms, we retain those communications.

Cookies and tracking: We use essential cookies required to operate the service (authentication, session management) and analytics cookies to understand usage patterns. You may disable non-essential cookies in your browser settings; this may affect some product functionality.

We use your data to:

• Provide, maintain, and improve DeadAccount.ai — including running AI-powered account scans, generating territory reports, and syncing results to your CRM
• Process payments and manage your subscription via Stripe
• Send product updates, onboarding guidance, and service-related communications
• Diagnose errors, investigate abuse, and ensure the security and integrity of the service
• Comply with legal obligations

We may use your email to send product updates or service-related communications. You can opt out of non-essential emails at any time via the unsubscribe link in any email or by contacting help@mangosteen.studio.

We do not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes.

If you are located in the European Economic Area or United Kingdom, we process your personal data under the following legal bases:

• Contract performance: Processing necessary to provide the service you have subscribed to (e.g. running scans, managing your account)
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, security, product improvement, and communications about the service, where those interests are not overridden by your rights
• Legal obligation: Processing required to comply with applicable law (e.g. retaining financial records)
• Consent: Where we rely on consent (e.g. optional marketing emails), you may withdraw it at any time without affecting prior processing

We work with third-party service providers to operate the service. These providers process data only on our behalf, under confidentiality obligations, and are not permitted to use your data for their own purposes. Key providers include:

• Stripe — payment processing and subscription management
• Cloud infrastructure provider — hosting and data storage
• Analytics and error monitoring tools — product usage and reliability monitoring

We will update this section as our provider list changes materially.

We retain your account data for as long as your subscription is active and for up to 90 days following account cancellation or termination. This window allows you to reactivate your account and recover scan history if needed.

After the 90-day period, your data will be permanently deleted from our systems, except where we are required to retain certain records by law — for example, payment and transaction records, which may be retained for up to 7 years in accordance with applicable financial regulations.

You may request early deletion at any time. See Section 6 (Your Rights) for how to submit a deletion request.

You may exercise any of the following rights by contacting help@mangosteen.studio. We will respond within 30 days.

All users:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data (subject to legal retention obligations)
• Opt-out — unsubscribe from non-essential communications at any time

European Economic Area and United Kingdom users (GDPR):

In addition to the rights above, you have the right to:

• Portability — receive your personal data in a structured, machine-readable format
• Restriction — request that we limit processing of your data in certain circumstances
• Object — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing
• Lodge a complaint — with your national data protection authority if you believe your rights have been violated

California residents (CCPA):

You have the right to:

• Know — request disclosure of the categories and specific pieces of personal information we have collected about you, and how it is used and shared
• Delete — request deletion of personal information we have collected (subject to certain exceptions)
• Opt out of sale — we do not sell personal information. No opt-out is required, but you may contact us to confirm this at any time
• Non-discrimination — we will not discriminate against you for exercising any of your CCPA rights

When you upload CRM data, account lists, or contact-level information to DeadAccount.ai, you are acting as the data controller for that information. Mangosteen Studio LLC acts as a data processor on your behalf.

You are responsible for:

• Ensuring you have a lawful basis to upload and process the data you submit
• Ensuring the data subjects whose information you upload have been informed of its use, where required by applicable law
• Complying with any data subject requests relating to data you have uploaded

We process this data solely to deliver the service and do not use it for any other purpose.

DeadAccount.ai is operated from the United States. If you are accessing the service from outside the United States, your data may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

For users in the EEA or UK, we ensure that any international transfers of personal data are conducted with appropriate safeguards in accordance with applicable data protection law.

We use industry-standard measures to protect your data, including encrypted connections (TLS), access controls, and regular security reviews. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. In the event of a data breach that affects your rights or interests, we will notify you as required by applicable law.

This Privacy Policy is governed by the laws of the State of Delaware, consistent with our Terms of Service.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the site at least 14 days before they take effect. Continued use of the service after changes constitutes your acceptance of the updated policy.