Privacy policy
What we collect when you use dentesleo.com, why we collect it and what you can ask us to do with it.
Who is responsible
The controller of your personal data is Media Onus SARL, trading as Dentes Leo, Rabat, Morocco. You can reach us at atlas@dentesleo.com.
What we collect
- The contact form. Your name, email address, the topic you choose and your message, and the address of the page you sent it from. Your IP address is stored with your request, for abuse protection. We check each message automatically to separate real inquiries from spam: a check by Cloudflare that a person is sending the form, a hidden field, the time taken to fill the form and the pattern of the text. We store each message on our own server. Messages that pass the check are copied to our customer database and go to our customer relationship (CRM) tool. Our team's Slack workspace gets an alert when a message is refused or cannot be passed on.
- The market size tool. The search you type or choose (who you sell to, their industry, where they are and their team size), the price you enter for one client, and the email address you give us to receive the full list of names. With your email we keep the figures the tool showed you and the address of the page. We also record which of our emails reached you and the links you open in them. We use your IP address to limit searches to three an hour. It is held in memory for that and is not stored.
- Orders. If you buy a market list: your email address, PayPal's order and payment references, the amount, the currency and the time of payment. PayPal also sends us the payer's name and email address, which go into our CRM.
- The LinkedIn profile diagnosis. The goal you choose, what you tell us about who you want to reach and what you sell, the profile link you paste, and the email address you give us to receive the full report. We store a hash of your IP address (a one-way scrambled form), not the address itself. What we read from the profile is set out under LinkedIn profile diagnosis below.
- Server logs. When you load a page, our server and Cloudflare record technical data: your IP address, the date and time, the page requested, your browser type and the page that sent you. Our web server shortens IP addresses in its access log. We use these logs to keep the site running and secure, and to see which pages people visit and which sites send them.
We do not ask for sensitive data. Please do not send it through the form.
Why we use it
- To answer your message and point you to the right company.
- To send you the names you asked for in the market size tool, followed by a short series of emails from Atlas about reaching that market. These emails can offer you the full list for sale. Reply to any of them to stop the series. It also stops when you book a call.
- To build and deliver a list you buy.
- To send you the report you asked for in the LinkedIn profile diagnosis, followed by a few short follow-up emails. Reply to any of them to stop them.
- To test which version of our emails and pages works better. You are placed in one test group at random.
- To prepare the measurement of our advertising, as described under Meta below.
- To protect the site from spam, abuse and attacks.
Legal bases
Under Moroccan Law 09-08 we process your data with your consent, which you give when you send the form, and for the purposes above. For visitors in the European Union and the United Kingdom, the legal bases under the GDPR and the UK GDPR are your consent (the contact form, the email step of the market size tool and of the LinkedIn profile diagnosis, and the cookie card), the contract when you buy a list, steps you ask us to take before a possible contract, and our legitimate interest in running a secure website. We set the dl_attr cookie on the ground of our legitimate interest in knowing which campaign or site brought a visitor.
How long we keep it
We keep your data only as long as we need it for the purposes above. The link to a LinkedIn report stays open for 60 days. The download link for a list you buy works for 30 days. The file and the order record stay with us after the link has ended. PostHog keeps session recordings for 30 days.
Who else handles it
- Contabo GmbH, our hosting provider, which runs the server that stores form messages. The server is in France.
- Cloudflare, Inc., which carries traffic to the site, filters abuse and checks that a form is sent by a person. Cloudflare also adds one script of its own to every page, the "WebMCP bridge", which lets AI tools talk to the site. It loads before any cookie choice.
- Supabase, Inc., which hosts our customer database and runs the service behind the market size tool and the LinkedIn profile diagnosis. The data is stored in the European Union (Ireland). Orders, buyers and the list files are stored there too.
- Attio Ltd., our CRM tool, which holds the inquiries we follow up.
- Slack Technologies, which carries genuine requests, and alerts about refused or undelivered ones, to our team's workspace.
- Google LLC, which sends and receives our email, and handles your booking under Google's privacy policy if you follow a link to book a call.
- OpenAI, which reads the sentence you type in the market size tool to turn it into a search. It receives the first 400 characters of the sentence only, not your email address. We use OpenAI's setting that does not store it.
- Our LinkedIn profile data provider, reached through Treg, which reads the public profile you give the LinkedIn profile diagnosis. OpenAI grades that text.
- PayPal, which takes payment when you buy a list.
- Our people data providers, Dropleads and LeadsForge, reached through Treg, which hold the professional profiles the tool counts and lists. For a list sold with emails, BlitzAPI supplies the work email addresses and Kitt and BounceBan check them, also through Treg. AI Ark is the fallback provider for sold lists.
- PostHog Inc., only if you accept analytics cookies. It stores the analytics data in the European Union.
We do not sell the data of people who use this site. The lists we sell hold professional details from our data providers, as set out under Market size tool and market lists below. Meta receives nothing today, as set out below.
Meta
We advertise on Facebook and Instagram. To learn which ads bring real inquiries, our server prepares events for Meta ad measurement when you send a form, give your email in one of our tools, book or hold a call, or buy a list. These events are held on our server. None is sent to Meta yet, and no page on this site loads Meta's pixel. No phone number is in them. They are prepared whatever you choose on the cookie card.
International transfers
Some of these providers process data outside Morocco, including in the European Union and the United States. Where the law requires it, we rely on the safeguards those providers offer, such as standard contractual clauses.
Your rights
Under Moroccan Law 09-08 you have the right to access your data, to have it corrected and to object to its use for legitimate reasons. The Moroccan authority is the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP), www.cndp.ma.
If you are in the European Union or the United Kingdom, the GDPR and the UK GDPR also give you the right to erase your data, to restrict or object to its use, to receive it in a portable format and to withdraw your consent at any time. You may complain to your local data protection authority. In the United Kingdom this is the Information Commissioner's Office.
How to use your rights
Write to atlas@dentesleo.com and tell us what you want us to do. We may ask you to confirm your identity. We reply within one month.
Cookies
This site sets one first-party cookie, dl_attr, when you first arrive, and updates it when you arrive from another site or from a link that carries campaign tags (for example utm_source or a click id from LinkedIn, Google or Meta). It records the page you landed on, which site or link brought you here and when. The cookie lasts 90 days. A copy is kept in your browser's storage and stays there until you clear it. We set this cookie on the ground of our legitimate interest in knowing which campaign or site brought a visitor. It stays if you choose No thanks on the cookie card. If you send us a form or use one of our tools, these details go with it so we know which campaign reached you. When analytics run (see the next paragraph), we add a random visitor ID to the same cookie. If you then follow a link from this site to opstudio.click, the ID travels in the link, so we can see both visits as one person. The site you arrive on takes the ID out of the address and uses it only if analytics run there too. This site does the same when you arrive from one of our other sites. If you arrived from one of our Meta ads, the cookie holds the click id from that ad. Nothing is sent to Meta today, as described under Meta above. Cloudflare may also set a strictly necessary cookie to tell people from automated traffic.
We also use analytics cookies and browser storage from PostHog to see how the site is used: the pages you open, how long you stay and how far you scroll, the links and buttons you click, what you do in the tools (the market you search, the goal you pick, the score you get) and, for some visits, a recording of the page with everything you type hidden. Tool results are hidden in recordings. PostHog keeps recordings for 30 days. If you send the contact form, give your email in one of the tools, open a link from one of our emails or arrive from one of our other sites, these visits are linked to you, so we know which pages helped. If you visit from the EU, the EEA, the UK or Switzerland, none of this runs until you choose Sure on the cookie card. We tell this from your browser's time zone. Elsewhere it runs by default. No thanks, or a Global Privacy Control signal from your browser, turns it off anywhere. We remember your choice in a cookie, dl_consent, for 180 days.
Market size tool and market lists
The market size tool counts people from professional profiles that our data providers compile from public sources such as professional networks and company websites. It shows a few of them by name on the page, with their job title, company, location and public profile link. When you ask for the full list, we email you a link to up to 100 names with their job titles, companies, company sizes, locations and public profile links. This free list holds no email address and no phone number.
We also sell lists of the people in a market. No page on this site sells them. The offer comes in the emails we send after a free market search, with a link to buy. You pay through a PayPal order. We then email you a link to download the list as one file. The link works for 30 days. A list holds each person's name, job title, company, company size, industry, state, country and LinkedIn address, with the market it was built for. Our full list adds a work email address and whether that address passed our check. The other list has no email addresses. No list holds a phone number.
About the buyer we keep the email address, PayPal's order and payment references, the amount, the currency and the time of payment. PayPal also sends us the payer's name and email address.
The people on a list come from our data providers Dropleads and LeadsForge. The email addresses come from BlitzAPI and are checked by Kitt and BounceBan. AI Ark is the fallback provider.
We do this under our legitimate interest, and the legitimate interest of the people who use the tool or buy a list, in business to business outreach. People who receive a list use it under their own responsibility and must follow the email and privacy laws that apply to them.
If you appear on one of these lists, it holds public professional details about you that come from these data providers. We do not tell you when you are put on a list. You can ask us to remove you: write to atlas@dentesleo.com.
LinkedIn profile diagnosis
The LinkedIn profile diagnosis reads the public profile behind the link you give us, through our data provider Treg: the name, headline, About, follower count and recent posts with their reactions and comments. OpenAI grades the text. We keep the profile text, the grade, your answers and, after you ask for the report, your email, for your report and our follow-up emails, and you can ask us to remove them. The link to a report stays open for 60 days. If someone else gave the tool your profile, you can ask us to remove it too.
Changes
We will update this page when our practices change. The date below shows the latest version.
Last updated: 10 November 2026.