Silver Owl Studio
Mahon CRM privacy notice
This notice describes how Mahon CRM processes information through the product behavior and providers present in this repository.
1. Information processed
Mahon processes account and profile information; organization membership; contacts, companies, deals, activities, tasks, pipelines, notes, email content, and other records you submit; billing identifiers and subscription state; API-key metadata; provider responses; and technical request or error information.
2. How information is used
Information is used to authenticate users, operate organization-scoped CRM features, provide requested imports and integrations, generate user-requested drafts or analysis, process subscriptions, secure and troubleshoot the application, and respond to support or legal requests.
3. Providers in the application
Supabase provides authentication and database services. Stripe handles checkout, subscriptions, and its hosted billing portal. Vercel hosts the application. Microsoft Azure Communication Services delivers configured email workflows; Microsoft processes the personal information needed to deliver email, including recipient address, sender and recipient metadata, message content, delivery status, and bounce and suppression data, as our processor and may process it in the United States. Notion receives or returns selected CRM data only when its integration is configured and used. Configured xAI or Anthropic services can process inputs submitted to AI-backed workflows.
4. Browser storage and outreach consent
Supabase session storage supports login. Local storage can retain recent assistant messages, tour state, and Notion sync history in the browser. The outreach workflow creates a consent link and records the recipient’s affirmative consent, timestamp, method, and available request IP before an enabled call workflow proceeds.
5. Disclosure and user direction
Information is sent to the providers needed for the feature a user or administrator invokes, or disclosed when required by applicable law. Users are responsible for having authority to upload CRM records and connect third-party systems. The application code does not implement a sale of personal information.
6. Retention and requests
Information is retained while needed to operate accounts, provide requested features, maintain security and billing records, or satisfy applicable legal obligations. No fixed deletion deadline is promised here. Requests to access, correct, export, or delete information can be sent to legal@silverowl.dev and will be handled according to applicable law and verified authority.
7. Security and changes
Implemented controls include authenticated routes, organization scoping, Supabase row-level security, selected rate limits, hashed API keys, and Stripe webhook verification. No online service can promise absolute security. This notice may change when product behavior or providers change.