Privacy and cookies
Last updated: 5 October 2026
Who is responsible?
The publisher (see the legal notice) is responsible for your account data. For the data your company manages in MCI (prospects, messages, campaigns), your company is the data controller and the publisher acts on its behalf as a processor.
What data?
- Your account: email address, password (stored only as an irreversible hash), role and a security log of sign-ins.
- Your company: campaigns, email templates, signatures and settings.
- Prospects: business information published in public sources (company name, email, phone, website, source page), and your team’s decisions.
- The connected mailbox: messages from the last 90 days and their attachments on request. The mailbox password is encrypted; the originals stay with your provider.
Why?
To provide the service: find companies matching your campaigns, prepare your emails, show your conversations and secure access. MCI never sends an email without a user’s action and never sells any data.
Legal bases: performance of the contract for your account; your company’s legitimate interest in business-to-business prospecting.
How long?
- Sign-in session: 8 hours at most.
- Messages in MCI: 90 days; the originals stay with your email provider.
- Account, prospects and campaigns: for the duration of the contract, then [To complete: retention period after the contract ends].
Who has access?
- Your company’s users, and no one from another company.
- Hosting: [To complete: host’s name and country]
- Your email provider (for example Google or Gandi), chosen by your company.
- The artificial intelligence and web search services used to find companies and draft suggestions: [To complete: list of providers and their countries]
- Transfers outside the European Union: [To complete: countries concerned and safeguards]
Your rights
You can ask for access to, correction, deletion or portability of your data, and object to or restrict its processing, by writing to: [To complete: contact email address]
A prospect can ask not to be contacted again by replying STOP to an email: they are then blocked for the whole company.
You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).