Legal

Privacy Policy

Effective: · Last updated:

Information we collect

We collect account information you provide (name, email, company), product usage telemetry, and content you submit to MangoX prompts and projects.

How we use it

We use your data to operate the MangoX service, communicate with you, prevent abuse, and improve the product. We do not sell personal data.

Sharing

We share data with sub-processors needed to run the service (cloud infrastructure, email delivery, payments). A current list is available on request.

Cookies

We use first-party cookies for authentication and product analytics. You can control non-essential cookies through your browser.

Your rights

You have the right to access, correct, export, restrict and delete your personal data. Contact privacy@mangox.dev to exercise these rights.

Data retention

Account data is retained for the lifetime of your account plus 30 days after deletion. Audit logs are retained for 90 days (Pro) or as configured (Enterprise).

Security

We follow OWASP ASVS Level 2: parameterized SQL, signed cookies, strict CORS, encrypted storage and SOC 2 Type II controls.

International transfers

Where data is transferred outside your region, we use Standard Contractual Clauses or equivalent safeguards.

Children's privacy

MangoX is not directed to children under 13 (or the equivalent minimum age in your jurisdiction).

Changes

We will notify you by email of material changes to this policy at least 30 days before they take effect.

Contact

Email privacy@mangox.dev for any privacy-related question.