Privacy Policy

MangoApps Privacy Policy explains how we collect, use, and protect your personal information. Learn about data security, cookies, and your privacy rights.

‍

MangoApps Inc. and its affiliated companies and subsidiaries (collectively referred to as “Company,” “we,” or “us”) respect your privacy. This Privacy Policy describes how MangoApps collects, uses and discloses information, and what choices you have with respect to the information. By accessing our website or purchasing our products or services you agree to this Privacy Policy in addition to any other agreements we might have with you. This Privacy Policy does not govern the practices of entities that our Company does not own or control, or entities that do not own or control our company or people that our Company does not employ or manage.

Customer Data processed for organizations. If you use MangoApps as an employee or authorized user of an organization that subscribes to our services, the personal data you and your organization submit to the services ("Customer Data") is processed by MangoApps as a processor and service provider on that organization's behalf under the organization's written agreement with MangoApps or, for self-serve customers, the MangoApps Terms of Service and Self-Serve Data Processing Agreement. Those terms govern and control over this Privacy Policy for Customer Data. MangoApps does not use Customer Data for its own marketing or advertising or to train generalized AI models, and processes it only on the organization's documented instructions. For requests relating to that data, including access, correction, or deletion, please contact your organization, which is the controller. This Privacy Policy governs personal data for which MangoApps itself determines the purposes and means, such as visitors to our websites and prospective-customer and marketing contacts.

Information We Collect and Receive

The information we collect may include your personal information, such as your name, contact information, IP addresses, product and service selections and other things that identify you. We collect personal information from you at several different points, including but not limited to the following:

When you visit any of our websites
When we have correspondence with you as a customer or prospective customer
When you register as an end-user of our services
When you contact us for help
When you attend our webinars
When the site sends us error reports or application analytics data
App's use of information received from Gmail APIs will adhere to Google's Limited Use Requirements

How we use Information

MangoApps collects personal information when you visit one of our websites, register for a MangoApps service or otherwise voluntarily provide such information. We also automatically collect information about you when you access and use MangoApps services. Our company may combine personal information collected from you with information from other MangoApps services or third parties to:

Research and/or analyze your use of, or interest in, our products, services, or content, or products, services or content offered by others
Manage your customer relationship and provide you with customer support
Deliver the products and services that you have requested
Communicate with you by e-mail, postal mail, telephone and/or mobile devices about products or services that may be of interest to you either from us, or other third parties
Develop and display content tailored to your interests
Enforce our terms and conditions
Perform functions as otherwise described to you at the time of collection

Sharing and Disclosure of Information

We may share your personal information with third parties only in the ways that are described in this Privacy Policy:

As required by law enforcement, government officials, or other third parties pursuant to a subpoena, court order, or other legal process or requirement applicable to our Company; or when we believe, in our sole discretion, that the disclosure of personal information is necessary to prevent physical harm or financial loss, to report suspected illegal activity or to investigate violations of our agreements or Company policies; and
We may share your information with third-party vendors and other service providers who are working on our behalf and require access to your information to carry out that work, such as to process billing, provide customer support, etc.
We may share your data with any parent company, subsidiaries, joint ventures, other entities under a common control. We expect these other entities will honor this Privacy Policy
We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company
Other third parties with your consent or direction to do so.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Security

Our Company uses industry-standard technologies when transferring and receiving data exchanged between our Company and other companies to help ensure its security. This site has security measures in place to help protect information under our control from the risk of accidental or unlawful destruction or accidental loss, alteration or unauthorized disclosure or access. However, “perfect security” does not exist on the Internet. Also, if this website contains links to other sites, our Company is not responsible for the security practices or the content of such sites.

Information Collected by Cookies and Other Tracking Technologies

Our company (and service providers who are working on our behalf) use various technologies to collect information, which may include saving cookies, web beacons or other tracking technologies to your computer or mobile device.

Cookies: Cookies are small data files stored on your hard drive or in device memory that help us to improve the MangoApps Services and your experience, customize your experience and preferences, allow you to access and use the MangoApps Services without re-entering your member ID and/or password, understand which areas and features of the MangoApps service are most popular and count visits.
Web Beacons: We may also collect information using web beacons or tracking pixels. These are electronic images (also called "gifs") that may be used in the MangoApps Services or in emails that help us to deliver cookies, count visits, understand usage, research campaign effectiveness and determine whether an email has been opened and acted upon.
Web Analytics: We use Google Analytics, a service for the marketing analysis of the site provided by Google, Inc. Google Analytics uses cookies to allow us to see how you use our site so we can improve your experience. Google’s ability to use and share information collected by Google Analytics about your visits to the site is restricted by the Google Analytics Terms of Use available at https://www.google.com/analytics/terms/us.html and the Google Privacy Policy available at https://www.google.com/policies/privacy/. You can prevent Google Analytics from recognizing you on return visits to the site by disabling cookies in your browser. If you prefer to not have data reported by Google Analytics, you can install the Google Analytics Opt-out Browser Add-on available at https://tools.google.com/dlpage/gaoptout.
Links: We may create links to other websites, and many other sites that are not associated with or authorized by our Company may have links leading to our site. Since we cannot control the privacy policies of third parties, you are subject to the privacy practices of that third-party. We encourage you to ask questions before you disclose any personal information to others.
Advertisements: Our Company websites may use third parties to present or serve advertisements that you may see at its web pages and to conduct research about the advertisements and web usage. This Privacy Policy does not cover any use of information that such third parties may have collected from you or the methods used by the third parties to collect that information.

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies or to prompt you before accepting such a cookie. Please note that, if you choose to remove or reject browser cookies, this could affect the availability or functionality of MangoApps Services.

International Data Transfers

The information collected from you may be stored and processed in the United States or any other country in which our Company maintains facilities. By accessing our sites and using our services, you consent to any such transfer of information outside of your country.

Data Retention

We will retain any personal information only for as long as is necessary to fulfill the business purpose it was collected. We will also retain and use your personal information for as long as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Your Access to and Updating of your Personal Information

You may update, correct or delete information about you at any time by logging into your online account and modifying your information or by emailing us at privacy@mangoapps.com. We will retain your information for as long as your account is active or as needed to provide you services. We will retain and use your information to comply with our legal obligations, resolve disputes and enforce our agreements. We may also retain cached or archived copies of information about you for a certain period of time. We will respond to your access request within 30 days.

Age Limitations

Because of the nature of our business, our public websites and self-serve account creation are not directed to children under 13. We do not knowingly attempt to solicit or receive personal information from anyone under the age of 13. Users under 16 may access MangoApps only when invited or authorized by an organization that is responsible for obtaining any legally required consents and complying with applicable child-privacy, employment, labor, school, and workplace laws. If you are a parent or guardian and you are aware that your child has provided us with personal information without appropriate authorization, please contact us immediately.

Google User Data Access & Limited Use Policy

MangoApps accesses user-specific, read-only data from Google Drive, Google Calendar, and Google Events through Google Workspace APIs and SSO. Data is not written back except for Events, which require user consent.

1. Scope of Data Access

2. Purpose of Data Use

Data enables smooth login via Google SSO and allows users to create, edit, update, and delete Google Calendar events within MangoApps. Access improves user experience through enhanced product functionality.

3. Compliance with Limited Use Requirements

MangoApps adheres to Google's Limited Use standards: data serves only user-facing features, never trains AI models, isn't sold to third parties, and prohibits advertising use. Transfers occur only for service delivery, security, legal compliance, or M&A with consent. Human access requires explicit consent, aggregated anonymization, or security investigations.

4. Data Protection and Sharing

Google user data isn't shared with parent companies, subsidiaries, or uninvolved third parties. All practices comply with applicable data protection regulations and Google's Developer Policy.

AI Assistants and MCP Connectors (including Claude and ChatGPT)

MangoApps offers a Model Context Protocol (MCP) connector that lets approved AI assistants — including Anthropic's Claude and OpenAI's ChatGPT — act on a user's behalf inside their MangoApps tenant. This section explains what data those assistants can access, how it is handled, and your rights. It applies to the "MangoApps for Claude", "MangoApps for ChatGPT", and any other MCP connector we publish.

1. Scope of Data Access

An MCP connector accesses only the MangoApps data the consenting user is authorized to see in MangoApps itself. Authorization is granted via OAuth 2.1 with per-tool scopes (e.g., "View forms and your submissions" or "Create tasks"). A connector cannot read or write data outside the granted scopes, cannot access data the consenting user could not access through the MangoApps UI, and cannot access data from any tenant other than the one the user authorized.

2. What Data Is Sent to the AI Assistant Vendor

When a user invokes a tool through an MCP connector (for example by asking Claude to summarize their form submissions), the tool's output — and only the tool's output — is returned to the AI assistant's runtime so it can compose a response. The AI assistant's vendor (e.g., Anthropic) processes the tool output and the user's prompt under its own privacy policy. MangoApps does not send proactive data, embeddings, or telemetry to the AI assistant vendor outside of explicit user-invoked tool calls.

3. Purpose of Data Use

Data accessed via an MCP connector is used solely to compose a response to the consenting user's prompt inside the AI assistant's chat interface. MangoApps does not use MCP tool calls to train AI models, build profiles, or generate aggregate analytics beyond per-tenant usage metering (call counts, latency, and tool name — see Section 5).

4. User Control and Revocation

A user can revoke any MCP connector authorization at any time from the AI assistant's own settings (e.g., Claude.ai → Settings → Connectors → Revoke). Tenant administrators can additionally revoke any active connection for their tenant from the Admin Console at /admin/connectors. Revocation invalidates the OAuth access token immediately; subsequent tool calls fail with HTTP 401.

5. Audit Logging and Retention

Every MCP tool call is logged in the tenant's audit table with: tool name, the OAuth client that made the call (e.g., "Claude.ai"), the consenting user, the calling timestamp, the call latency, and a truncated copy of the call arguments. These audit records are retained per the tenant's configured retention policy (default: 90 days) and are visible only to administrators of the tenant. Audit records are never shared with the AI assistant vendor.

6. Tenant Administrator Controls

Tenant administrators can disable specific MangoApps apps for MCP access (the connector will no longer expose those apps' tools regardless of OAuth scope), can apply per-app visibility rules that further restrict which users can authorize a connector, and can enforce per-(application × tenant) rate limits on write operations (default: 200 writes/hour).

7. Third-Party AI Assistant Policies

Once data is sent to a connected AI assistant in response to a user prompt, that data is subject to the assistant vendor's privacy policy. For Anthropic's Claude this is anthropic.com/legal/privacy. For OpenAI's ChatGPT this is openai.com/policies/privacy-policy and the applicable enterprise/team agreement. MangoApps does not control retention or downstream use by any assistant vendor.

8. Contact

Questions about MangoApps's MCP connectors, OAuth scopes, or audit retention may be directed to privacy@mangoapps.com. Security disclosures should be sent to security@mangoapps.com.

Changes to this Privacy Policy

Our Company may amend this Privacy Policy at any time by posting a new version. You should check this page periodically to review any changes. Your continued use of this site following the posting of any changes will signify your acceptance of those changes.

Contacting Us

If you have any questions about this Privacy Policy, please contact us at privacy@mangoapps.com.