Privacy Policy
Last updated: March 7, 2023
The privacy of your data — and it is your data, not ours! — is a big deal to us. In this policy, we lay out: what data we collect and why; how your data is handled; and your rights to your data. We promise we never share or sell your data: never have, never will.
This policy applies to all products built and maintained by Mango Display, a division of Chakra Group Inc.
What we collect and why
Our guiding principle is to collect only what we need. Here’s what that means in practice:
Identity & access
When you sign up for Mango Display, we only ask for this personal identifying information: ‘name‘ and ‘email address‘. Thats it!
This is just so you can login, personalize your new account, and we can send you invoices, updates, or other essential information. We’ll never sell your personal info to third parties, and we won’t use your name or company in marketing statements without your permission either.
Billing information
When you pay for a Mango Display product or subscription, we ask for your credit card and billing address. That’s so we can charge you for service, calculate taxes due, and send you invoices. Your credit card is passed directly to our payment processor (Stripe) and doesn’t ever go through our servers. We store a record of the payment transaction, including the last 4 digits of the credit card number and as-of billing address, for account history, invoicing, and billing support. We store your billing address to calculate any sales tax due in the United States or VAT in the EU, to detect fraudulent credit card transactions, and to print on your invoices.
Geolocation data
We don’t track your geolocation data. However the city and country you enter for the purpose of displaying information like weather forecasts, is stored in our database to enable us to serve that data to you.
Website interactions
When you browse our marketing pages or applications, your browser automatically shares certain information such as which operating system and browser version you are using. We track that information, along with the pages you are visiting, page load timing, and which website referred you for statistical purposes like conversion rates and to test new designs using third party web analytics software. We sometimes track specific link clicks to help inform some design decisions. These web analytics data are tied to your user account if applicable and you are signed into our Services.
Cookies and Do Not Track
We do use persistent first-party cookies to store certain preferences, make it easier for you to use our applications, and support some in-house analytics. A cookie is a piece of text stored by your browser to help it remember your login information, site preferences, and more. You can adjust cookie retention settings in your own browser. To learn more about cookies, including how to view which cookies have been set and how to manage and delete them, please visit: www.allaboutcookies.org.
Voluntary correspondence
When you write to Mango Display with a question or to ask for help, we keep that correspondence, including the email address, so that we have a history of past correspondences to reference if you reach out in the future.
We also store any information you volunteer like surveys. Sometimes when we do customer interviews, we may ask for your permission to record the conversation for future reference or use. We only do so if you give your express consent.
Information we do not collect
We don’t collect any characteristics of protected classifications including age, race, gender, religion, sexual orientation, gender identity, gender expression, or physical and mental abilities or disabilities. You may provide these data voluntarily, such as if you include a pronoun preference in your email signature when writing into our Support team.
How we approach mobile app permissions
We offer optional mobile apps for Mango Display. Our philosophy is to ask for the bare minimum of permissions from you to give you a great app experience with maximum privacy. By default, we have access to the network to ensure the app can connect to and communicate with the Internet.
It’s impossible for our apps to try to use a sensitive OS feature without requesting access explicitly from you, so you’ll always know exactly when and what we’re requesting. If you choose to display certain data on Mango Display from your mobile device like calendar, reminders or health data. We will ask for specific permission just-in-time so that you can decide if you want to grant access. You have full control and can revoke access at anytime. You will never be required to grant any permission (although a given feature may not work or work well without it).
When we access or share your information
Our default practice is to not access your information. The only times we’ll ever access or share your info are:
To provide products or services you’ve requested. We do use some third-party services to run our applications and only to the extent necessary process some or all of your personal information via these third parties. Having subprocessors means we are using technology to access your data. No Mango Display human looks at your data for these purposes unless an error occurs that stops an automated process from working and requires manual intervention to fix. These are rare cases and when they happen, we look for root cause solutions as much as possible to avoid them from reoccurring. We also use some other processors for other business functions.
To help you troubleshoot or squash a software bug, with your permission.If at any point we need to access your account to help you with a Support case, we will ask for your consent before proceeding.
To investigate, prevent, or take action regarding restricted uses. Accessing a customer’s account when investigating potential abuse is a measure of last resort. We have an obligation to protect the privacy and safety of both our customers and the people reporting issues to us. We do our best to balance those responsibilities throughout the process. If we do discover you are using our products for a restricted purpose, we will report the incident to the appropriate authorities.
When required under applicable law.
Chakra Group Inc. is a company based in Ontario, Canada and we will share data with the appropriate authorities when required, under applicable law.
Your rights with respect to your information
At Mango Display, we apply the same data rights to all customers, regardless of their location. These rights include:
- Right to Know. You have the right to know what personal information is collected, used, shared or sold. We outline both the categories and specific bits of data we collect, as well as how they are used, in this privacy policy.
- Right of Access. This includes your right to access the personal information we gather about you, and your right to obtain information about the sharing, storage, security and processing of that information.
- Right to Correction. You have the right to request correction of your personal information.
- Right to Erasure / “To be Forgotten”. This is your right to request, subject to certain limitations under applicable law, that your personal information be erased from our possession and, by extension, all of our service providers. Fulfillment of some data deletion requests may prevent you from using Mango Display services because our applications may then no longer work. In such cases, a data deletion request may result in closing your account.
Many of these rights can be exercised by signing in and directly updating your account information.
How we secure your data
All data is encrypted via SSL/TLS when transmitted from our servers to your browser. The database backups are also encrypted.
With Mango Display, we’ve gone even further by encrypting the database at-work. The ‘name‘ and ‘email address‘ fields containing personally identifiable data is encrypted with its own key using AWS Key Management Service. This means no human can directly view your name or e-mail address, even if they have access to the database for development or support purposes. The disks storing the data keys are encrypted as well. Our servers decrypt the data to send it to you when you need it. Other data you have chosen to share and display on Mango Display – like tasks, weather location, health, calendar events or others, are not encrypted while they live in our database (since it needs to be ready to send to you when you need it), but we go to great lengths to secure your data at rest.
What happens when you delete data in your product accounts
We give you the option to delete your account data when an account or subscription is cancelled or no longer active. You can do this directly within your logged in account. When this action is performed, your data is immediately erased from our servers permanently and can never be recovered.
Location of site and data
Our products and other web properties are operated in the United States. All our product technology runs on Amazon Web Services, and our marketing website runs on wordpress.com. If you are located in the European Union or elsewhere outside of the United States, please be aware that any information you provide to us will be transferred to and stored in the United States. By using our site, participating in any of our services and/or providing us with your information, you consent to this transfer.
Changes & questions
We may update this policy as needed to comply with relevant regulations and reflect any new practices.
Have any questions, comments, or concerns about this privacy policy, your data, or your rights with respect to your information? Please get in touch by emailing us at hello@mangodisplay.com and we’ll be happy to answer them!