Legal

Privacy policy

Version 2.0, effective 08/09/2026

This translation is provided for information only. The French version is the authoritative text and prevails in the event of any discrepancy.

This Privacy Policy describes how MeetMagnet processes personal data in connection with its website, its SaaS platform and its AI-assisted B2B sales prospecting services.

MeetMagnet adapts its processing to its role in each situation: controller for certain processing carried out for its own purposes, and processor when it processes data on behalf of its customers.

1. Data controller

For processing carried out by MeetMagnet for its own purposes:

2. How the service works

MeetMagnet is an AI-assisted B2B sales prospecting SaaS platform. The service enables its customers to identify qualified prospects, in particular by matching intent or professional activity signals with business targets defined by the customer.

Depending on the features used, MeetMagnet may in particular enable prospect searches, the qualification of professional data and the performance of prospecting actions from the professional accounts connected by users.

3. Role of MeetMagnet: controller or processor

When MeetMagnet processes data for its own purposes, in particular for the management of its website, users, customers, contracts, invoicing, security or sales activities, MeetMagnet acts as controller.

When MeetMagnet processes data on behalf of a customer as part of the service subscribed to, the customer defines the targets, the search criteria and the prospecting purposes. In this context, MeetMagnet acts as processor, on the basis of the customer’s documented instructions and the applicable contractual framework (see Article 11 of the terms of sale).

The customer remains responsible for the purposes and settings of its campaigns and for ensuring that its prospecting operations comply with applicable regulations and with the terms of use of the platforms concerned.

4. Data processed

Depending on the features used and the customer’s instructions, the data processed may in particular include:

MeetMagnet applies a principle of data minimisation and seeks to limit the data processed to what is necessary for the purpose pursued.

5. Sources of data

Data may come from several sources, depending on how the campaign operates:

6. Account connection and user mandate

When a user connects their professional account, in particular their LinkedIn account, to MeetMagnet, this connection enables MeetMagnet to act within the limits of the permissions granted and for the purposes provided for under the service.

MeetMagnet uses in particular Unipile, a solution for operating messaging and social network accounts, to carry out certain actions directly from the customer’s authenticated account, including targeted searches and sending messages.

Connecting the account constitutes an express authorisation given to MeetMagnet to carry out the actions provided for under the service and the mandate entrusted by the customer. Actions are carried out within the limits of the features and permissions actually available.

7. Public professional data and third-party APIs

As part of the campaigns carried out on behalf of its customers, MeetMagnet may process publicly accessible professional data as well as data from third-party sources or APIs, in order to identify and qualify prospects matching the criteria defined by the customer.

The customer acts as controller. In particular, it determines the purposes of the campaign, the categories of prospects sought, the targeting criteria and the prospecting actions envisaged.

MeetMagnet acts as processor, on the customer’s instructions and within the framework of the applicable contract and mandate. MeetMagnet may therefore search for, cross-reference, qualify or enrich the professional information needed to run the campaign, in particular from sources available online or from data and API providers used as part of the service. The data is then processed in accordance with the customer’s documented instructions and the applicable data processing agreement.

MeetMagnet applies a principle of data minimisation and limits the data processed to what is necessary for the purpose defined by the customer.

The fact that information is publicly accessible does not mean that its use is free of any conditions. Processing must in particular comply with the applicable rules on informing data subjects, rights to object and commercial prospecting.

Processing that MeetMagnet carries out for its own purposes, independently of the campaigns entrusted to it by its customers, falls under MeetMagnet’s responsibility.

8. Commercial prospecting

MeetMagnet provides a commercial prospecting service intended for business customers. Campaigns are configured according to the criteria defined by the customer.

As part of the service, MeetMagnet may in particular assist with or carry out targeted searches, generate and personalise messages and perform prospecting actions from the professional accounts connected by customers, in accordance with the permissions and instructions given.

The customer remains responsible for defining its targets and prospecting purposes and for the compliance of the campaigns it runs. MeetMagnet carries out the processing entrusted to it in accordance with the documented instructions and the applicable contractual framework.

9. Legal bases

Depending on the processing concerned, the legal bases may in particular be:

For processing carried out by MeetMagnet on behalf of a customer, determining the legal basis applicable to the campaign is the responsibility of the customer, as controller. MeetMagnet processes the data in accordance with the customer’s documented instructions and the applicable contractual framework.

10. Artificial intelligence

MeetMagnet uses artificial intelligence technologies to assist with certain operations of the service, in particular signal analysis, prospect qualification and the generation or personalisation of prospecting messages.

Processing carried out by the artificial intelligence features takes place within the purposes of the service and, where MeetMagnet acts as processor, in accordance with the customer’s instructions.

11. Recipients and technical service providers

Data may be accessible to the people and service providers needed for the operation, maintenance and security of the service, for invoicing or for the performance of the features requested.

MeetMagnet may in particular rely on technical service providers and third-party services for hosting, APIs, account operation, payment, artificial intelligence or certain functions needed for the service.

Where MeetMagnet acts as processor, sub-processors are governed in accordance with the DPA and the applicable contractual documents.

12. Data transfers

Where certain service providers used by MeetMagnet involve the processing or transfer of data outside the European Union or the European Economic Area, MeetMagnet ensures that the transfer is governed in accordance with the GDPR, in particular by an adequacy decision, standard contractual clauses or any other appropriate safeguard where required.

13. Retention period

Personal data is kept for a limited period, proportionate to the purpose for which it is processed.

For prospects used by MeetMagnet for its own commercial prospecting, data is kept for a maximum of three years from its collection or from the last contact initiated by the prospect, in line with the recommendations of the CNIL (the French data protection authority).

For data processed by MeetMagnet on behalf of its customers, the processing period corresponds to the period needed to perform the service and to the customer’s instructions. At the end of the service, the data is deleted or returned to the customer in accordance with its instructions, subject to applicable legal retention obligations.

Where certain data must be kept beyond its normal period of use to comply with a legal obligation or to establish, exercise or defend legal claims, it is kept for the period needed for that purpose and, where possible, in an environment or archive database with restricted access.

14. Security

MeetMagnet implements appropriate technical and organisational measures to protect data against loss, destruction, alteration, unauthorised access and unlawful processing.

Where MeetMagnet acts as processor, the applicable security measures are defined and implemented in accordance with the contractual framework and the level of risk of the processing.

15. Rights of data subjects

Depending on the processing concerned and under the conditions laid down by the GDPR, data subjects may in particular have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw their consent where consent is the legal basis for the processing.

For processing carried out by MeetMagnet on behalf of a customer, requests relating to the campaigns concerned are in principle a matter for the customer, as controller, and may be sent to it. Where a person sends a request directly to MeetMagnet, it is handled or forwarded to the controller concerned, depending on the nature of the request and the applicable arrangements.

For processing for which MeetMagnet itself is the controller, requests may be sent to contact@meet-magnet.com.

16. Complaint to the CNIL

Anyone may contact MeetMagnet with any question or request concerning their personal data. They may also lodge a complaint with the CNIL (cnil.fr) if they consider that their rights have not been respected.

17. Changes to the architecture and processing

MeetMagnet is gradually developing its architecture to reduce its reliance on third-party APIs and scrapers and to favour, where technically possible, a model in which searches and actions are carried out directly from the professional accounts connected and authorised by users.

The aim of this development is in particular to improve cost control, the reliability of the service and control over data processing. It may lead to certain service providers or data sources being added, replaced or removed.

This policy may therefore be updated to reflect the processing actually carried out by MeetMagnet.

18. Cookies and similar technologies

The website uses cookies or similar technologies necessary for its operation. It does not set any advertising cookies.

Audience measurement cookies are set only with your consent, given in the banner: Google Analytics (where visitors come from) and Amplitude (pages viewed, clicks), kept for up to 13 months. Without your consent, nothing is loaded. Your choice is kept for 6 months and you can change it at any time with the “Cookies” link at the bottom of the page.

19. Updates to this policy

This Privacy Policy may be updated to reflect changes to the service, the technical architecture, processing practices or regulations.

Last updated: 08/09/2026.