Privacy policy
Mango Yazılım Teknolojileri Ltd. Şti. ("mangolab", "we") builds AI agents that talk to people. This page says what we collect, why, who else touches it, and how to make us delete it.
Two different relationships
Almost every question about our data handling turns on which of these two you are, because our obligations are not the same in each.
We decide what happens to the data
You browse mangolab.ai, send us the contact form, or hold an account in the mangolab console. Here we are the data controller and this policy governs directly.
Our client decides; we carry it out
You messaged a business whose agent runs on mangolab. That business is the controller and we are its processor — we handle your messages on their instruction and under a contract with them. Their privacy policy governs; ours describes the mechanics.
What we collect
When you visit mangolab.ai
- Analytics — only if you accept. Google Analytics 4 records pages viewed, approximate location, device and browser, and sets cookies to do it. It is not loaded until you accept the cookie banner; decline and nothing is requested from Google at all. We use it to see which pages are read, not to identify you.
- The contact form. Whatever you type — typically name, email, company and your message. It is delivered to us by Web3Forms and lands in our inbox.
When you talk to an agent built on mangolab
This is data we hold for the business you are talking to. Depending on the channel, it includes:
Contact details are masked in the console's list and preview screens — an operator sees "+90 532 ••• 41" rather than the full number unless they open the conversation itself and hold the role that permits it.
When you hold a console account
- Your name, email address, role, and a one-way hash of your password — never the password itself.
- Sign-in times, and the actions you take that change a conversation or an agent, so a team can see who did what.
Why we are allowed to hold it
- To perform a contract — running the agent you or our client asked us to run (GDPR Art. 6(1)(b); KVKK Art. 5/2-c).
- Legitimate interest — keeping the service secure, debugging failures, understanding which pages of our site are useful (GDPR Art. 6(1)(f); KVKK Art. 5/2-f).
- Legal obligation — commercial and tax records we are required to keep (GDPR Art. 6(1)(c); KVKK Art. 5/2-ç).
Who else processes it
We do not sell data and we do not share it for advertising. We do use service providers, and each of them sees only what their job requires:
Some of these providers operate outside Türkiye and the EEA, so data may be transferred abroad. We keep the list of providers current; ask us at any time for the version in force on a given date.
How long we keep it
- Conversations and console accounts — for as long as the client's account is active. When the relationship ends, we delete or return them at the client's instruction.
- Files sent in a conversation — with the conversation they belong to; a file is never served from a public address, only through an authorised request.
- Contact-form messages — while we are in touch, and for as long as we may need to show how a business relationship began.
- Records we must keep by law — for the period the law sets, regardless of a deletion request.
Your rights
Under KVKK Art. 11 and, where it applies, the GDPR, you can ask us whether we hold data about you, ask for a copy, have it corrected or deleted, object to a particular use, and withdraw consent where consent is what we relied on.
Write to info@mangolab.ai. We answer within 30 days. If you messaged a business whose agent we run, tell us which business — the request is theirs to decide, and we will pass it on and act on their instruction.
Deleting your data
To have your data removed, email info@mangolab.ai with the phone number or email address you used. We confirm the request, delete what we are not legally required to keep, and tell you when it is done.
Cookies
The only cookies mangolab.ai sets are Google Analytics', and they are set only after you accept them. Until you choose, no analytics script is loaded — the choice itself is remembered in your browser's local storage, which is not a cookie and is never sent to us.
Changed your mind? Cookies in the footer brings the banner back on any page. You can also block cookies in your browser or install Google's opt-out add-on. Nothing on this site depends on them.
The console itself sets one cookie: the session cookie that keeps you signed in. It is strictly necessary and carries no tracking.
Security
Traffic is encrypted in transit. Passwords are stored as one-way hashes. API keys are stored hashed and shown once, at creation. Access to a client's conversations is limited to that client's own team and to the mangolab staff who need it to operate the service.
Children
Our services are sold to businesses and are not directed at children. We do not knowingly collect data from anyone under 18.
Changes
When this policy changes we update the date at the top of the page. If a change materially affects how we handle data we already hold, we tell affected clients directly rather than relying on you to re-read this page.
Who to contact
Mango Yazılım Teknolojileri Ltd. Şti.
Istanbul, Türkiye
info@mangolab.ai
Questions about your data?
Write to us and a person — not an agent — will answer.
Email info@mangolab.ai