This Privacy Policy explains how Hatamu Labs Singapore (UEN: 53519504D), operating Mallets (“Mallets”, “we”, “us” or “our”), collects, uses, discloses and protects personal data when you visit mallets.io, use the anonymous public trial, communicate with us, or use other Mallets services that link to this policy.
1. Information we collect
Information you provide
- Submitted sources and creative inputs: brand or product URLs, briefs, files, references and other material you choose to provide.
- Account and business information: where account features are available, your name, email address, company, workspace and related profile details.
- Communications: demo requests, support messages, feedback and newsletter subscriptions.
- Transaction information: plan and billing records if you purchase a paid service. Payment card information may be collected directly by a payment provider rather than Mallets.
Information processed by the public trial
When you submit a public URL, we retrieve publicly available website content and media needed to analyze the source. We may derive a Brand Kit, campaign direction and generated creative previews from that material. Public-trial state is associated with a random trial identifier; the browser is not given our private prompts, provider records, local storage paths or generation recipes.
Information collected automatically
- IP address and security signals used for abuse prevention, rate limiting and service protection.
- Browser, device, operating system, referring page and basic request or error information.
- Usage and performance data about how our website and services operate.
- Cloudflare Turnstile verification data when the public trial asks you to verify that you are human.
2. How we use information
We use information to provide and secure the services; retrieve and analyze sources you submit; generate brand analysis, campaign directions and creative outputs; maintain accounts and workspaces; respond to support and demo requests; monitor performance and prevent fraud or misuse; improve product quality; communicate service notices; send marketing where permitted; and comply with legal obligations.
3. How we disclose information
We do not sell personal data. We may disclose information to service providers that help us operate Mallets, including cloud hosting and security providers, website retrieval services, AI model and media-generation providers, analytics and monitoring providers, email and newsletter providers, scheduling providers, payment processors, and customer-support tools. Submitted content may be processed by these providers only as needed to perform the requested service and subject to their applicable terms and safeguards.
Our public website currently links to or embeds services such as Cloudflare, Beehiiv, Calendly and Google Forms. Your interaction with those services is also governed by their own privacy terms. We may also disclose information when required by law, to protect users or our rights, or as part of a merger, financing, acquisition or sale of assets.
4. Data retention
Anonymous public-trial state and managed trial media are temporary. The current production configuration is designed to expire them after approximately one hour, although limited records may be retained longer when reasonably necessary for security, abuse prevention, troubleshooting or legal compliance. Account, workspace and paid-service data is retained while needed to provide the service and for a reasonable period afterwards. Communications and transaction records may be retained for business and legal requirements. Aggregated or de-identified information may be retained for product analysis.
5. Cookies and similar technologies
We and our providers may use cookies, local storage and similar technologies for security, essential functionality, preferences, performance measurement and communications. Embedded third-party forms may set their own cookies. You can limit cookies through your browser, but some features may not work correctly.
6. Legal bases and your choices
Where applicable, we process personal data to perform a contract, pursue legitimate interests such as operating and protecting Mallets, comply with law, or based on consent. Depending on your location, you may have rights to request access, correction, deletion, restriction, objection or portability, or to withdraw consent. These rights may be subject to legal exceptions. You may unsubscribe using the link in a marketing email.
7. International transfers and security
Mallets is operated from Singapore, and our providers may process data in other countries. Where required, we use appropriate contractual or legal safeguards for international transfers. We use reasonable technical and organizational measures designed to protect information, but no internet service can guarantee absolute security.
8. Children
Mallets is intended for businesses and people aged 18 or older. We do not knowingly collect personal data from children. Contact us if you believe a child has provided personal data.
9. Third-party sources and links
You are responsible for ensuring that you are authorized to submit a URL, file or other material to Mallets. This policy does not govern third-party websites, even when Mallets retrieves publicly available material from them at your direction or links to them.
10. Changes to this policy
We may update this policy as our services or legal obligations change. We will post the revised version here with a new effective date and provide additional notice when required.
11. Contact
For privacy questions or requests, email [email protected]. Please include enough information for us to understand and verify your request. Hatamu Labs Singapore is the organization responsible for the personal data described in this policy unless another agreement states otherwise.