I book the meetings.
You take the calls.
Mesa Leads
Who's this for?
MSPs, commercial cleaning and facility contractors, and other B2B service businesses that work with recurring contracts.
Infrastructure
The part that decides whether anyone ever sees your emails. Invisible when done right. Nothing else works if it isn't.
Lists
Who you reach matters more than what you send. Qualified contacts only. Not scraped, not bought.
Copy
Written by hand. Your buyers should recognize their own problem in the first line.
How does it work?
1. Setup
Separate domains and mailboxes for your campaigns, authenticated and warmed for three weeks before anything sends. Your main domain never touches cold outreach, so your day-to-day email stays safe.
2. List building
Built to your ICP, then verified independently before sending. Bounces stay under 2 percent, which is what keeps you out of spam folders.
3. Copywriting
A sequence of four emails over sixteen days, written from how your buyers actually talk about their problems. No templates.
4. Launch
Campaigns run daily at a volume each mailbox can carry. I watch deliverability, handle the replies, and pass you the ones worth a conversation.
No bad surprises.
No setup fee.
90-day minimum. Warmup takes 3 weeks and results aren't measurable before week 6.After that, cancel any time with 30 days' notice.
Who this isn't for
Businesses selling to consumers. This only works B2B.
Anyone who needs meetings this month. Warmup alone takes three weeks before the first email sends.
Markets with fewer than about 2,000 reachable companies. I check before you sign, and I'll tell you if yours is one of them.
FAQ
Do you spam?
No. Every email sends from authenticated domains under CAN-SPAM, with a real business address and a working opt-out mechanism.
What do I need to do?
Answer two questions about who you want to reach, then take the calls.
How many meetings
will I get?
I don't know yet, and neither does anyone quoting you a number before they've seen your market. After I build your list I'll tell you what it can realistically support, before you commit to anything.
Why not hire an SDR?
Having to pay a salary, and six months of ramp before the first meeting. This method costs less and tells you whether the channel works at all before you commit to a person.
Contact
Max Plankensteiner
Mesa Leads
ImpressumLegal disclosure under §5 ECG (Austrian E-Commerce Act) and §25 MedienG (Austrian Media Act).Mesa Leads
Maximilian Georg Plankensteiner
Grünentorgasse 26/9
1090 Vienna
AustriaPhone: +43 670 1877375
Email: [email protected]Unternehmensgegenstand (business purpose): Werbeagentur (advertising agency)
Berufsbezeichnung (professional title): Werbeagentur
Verleihungsstaat (country of award): AustriaGISA number (Gewerbeinformationssystem Austria): 40124247
GLN (Global Location Number): 9110036644749Member of the Wirtschaftskammer Wien (Vienna Economic Chamber), Fachgruppe Werbung und Marktkommunikation.Berufsrecht (applicable professional rules): Gewerbeordnung 1994, available at http://www.ris.bka.gv.atAufsichtsbehörde (supervisory authority):
Magistrat der Stadt Wien, Magistratisches Bezirksamt für den 9. und 17. Bezirk (MBA 9/17)
Elterleinplatz 14, 1170 Vienna, AustriaAlternative dispute resolution: Mesa Leads does not participate in dispute resolution proceedings before a consumer arbitration board.Responsible for data protection:
Maximilian Georg Plankensteiner, Grünentorgasse 26/9, 1090 Vienna, Austria
[email protected]All texts on this website are protected by copyright.
Privacy PolicyLast updated: October 3rd 2026Who is responsibleMaximilian Georg Plankensteiner, trading as Mesa Leads
Grünentorgasse 26/9, 1090 Vienna, Austria
[email protected]Mesa Leads is established in Austria. The General Data Protection Regulation (GDPR) therefore applies to everything described here, regardless of where you are located. If you received an email from us in the United States, this notice still applies to you and the rights described below are still yours.We have not appointed a Data Protection Officer. We are a one-person business and our processing does not meet the thresholds in Art 37 GDPR.This policy covers two different things: people who visit this website, and people we contact by email. They are separate, and only one of them is likely to be why you are reading this.---Part A — If you visited this websiteWhat we collect: nothing, directly. This site has no contact form, no cookies, no analytics, no tracking pixels and no social plugins. Fonts are served from the site itself, so your visit is not reported to any font provider.What our providers log. The site is hosted by Carrd and served through Cloudflare. Like any web server, they record technical data when a page is requested: IP address, time of request, the page requested, referring page and browser user agent. We do not use this data to build any profile of you.Why, and on what basis. Art 6(1)(f) GDPR. Our legitimate interest is making the site available and keeping it secure.How long. For as long as our providers retain their server logs, a short period measured in days to weeks and set by them, not by us.If you email us. We process your message and your address in order to answer you, on the basis of Art 6(1)(f) GDPR, or Art 6(1)(b) if your message is about entering into a contract. Messages are kept for as long as the exchange is live and for as long as any legal retention obligation requires.---Part B — If we emailed youThis part is the information required by Art 14 GDPR, which applies because we did not get your details from you.What we hold. Your name, your business email address, your job title, the name of your employer, and publicly available information about that employer such as its industry, location and approximate size. Nothing else. We do not hold private addresses, private phone numbers, payment data, or any of the special categories of data listed in Art 9 GDPR, and we do not want them.Where it came from. Apollo, a business contact database operated by ZenLeads, Inc., which compiles business contact information from publicly accessible and third-party sources. Before contacting you we check that the address is deliverable using MillionVerifier, an email verification service based in Hungary. We did not obtain your details from you, and we have not bought a list from anyone else.What we use it for. One purpose only: contacting you in your professional capacity about a lead generation service that may be relevant to the organisation you work for, and following up a small number of times if you do not reply. That is the whole of it. We do not sell, rent, share or publish your data, and we do not use it for anything other than this outreach.Our legal basis, and the interest behind it. Art 6(1)(f) GDPR, legitimate interests. Recital 47 GDPR states that processing personal data for direct marketing purposes may be regarded as carried out for a legitimate interest. Ours is specific: acquiring business customers for a small Austrian business. We have weighed that against your interests and rights and concluded that a small number of plain-text emails, sent to a work address, about a service related to your professional role, with an immediate and effective way to stop them, does not override your rights. We have written that assessment down. Ask for it at [email protected] and we will send it to you.Who else sees it. Three service providers, each acting on our instructions under a data processing agreement:- Instantly (Instantly.ai), the platform that stores the campaign and sends the emails. United States. Transfers are covered by the EU Standard Contractual Clauses in its data processing addendum.
- Google (Google Workspace), which operates our mailboxes. United States. Google LLC is certified under the EU-U.S. Data Privacy Framework.
- MillionVerifier, which checks that addresses are deliverable. Hungary, with servers in Hungary and Sweden, so no transfer outside the EU takes place for this step.Apollo, as the source of the data, is a separate controller for its own database. ZenLeads, Inc. is certified under the EU-U.S. Data Privacy Framework and also offers the EU Standard Contractual Clauses.Beyond these, nobody. We do not pass your data to clients, partners or advertisers.Transfers outside the EU. Some of the providers above are in the United States. Those transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards.How long we keep it. We delete your details no later than 24 months after the last email we sent you, unless you have asked us not to contact you again. If you object, we keep your email address, and nothing else, on a suppression list for as long as we operate, for the single purpose of making sure we never contact you again. Keeping that minimum record is itself necessary in order to honour your objection.No automated decision-making. We do not make decisions about you by automated means and we do not profile you within the meaning of Art 22 GDPR. A person chose to write to you.---Your right to objectYou can tell us to stop at any time, and we will. You do not have to give a reason and we will not ask for one.Under Art 21(2) GDPR you have the right to object at any time to the processing of your personal data for direct marketing. If you object, we will stop immediately and permanently. This right is absolute: there is no balancing test and no exception.To exercise it, reply to any email we have sent you with the word "no", or write to [email protected]. One line is enough.---Your other rightsUnder the GDPR you also have the right to:- access the personal data we hold about you, and receive a copy (Art 15)
- correct anything inaccurate (Art 16)
- have it deleted (Art 17)
- restricthow we use it (Art 18)
- object to processing based on legitimate interests generally (Art 21(1)), in addition to the direct-marketing right aboveData portability under Art 20 does not apply here, because our processing is based on legitimate interests rather than on your consent or on a contract. We mention it so that the omission is not a mystery.Write to [email protected] to exercise any of these. We will answer within one month. There is no charge.ComplaintsIf you think we have handled your data wrongly, you can complain to the Austrian supervisory authority:Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Vienna, Austria
[email protected]
dsb.gv.atYou can complain to them whether or not you have raised it with us first.ChangesIf this policy changes we will update the date at the top. We do not make changes retroactively.