Privacy Policy

Human Does, a company registered in the United States, operating under the brand “Mangobeds” (“Mangobeds,” “We,” “Us,” or “Our”), is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and disclose personal information through Mangobeds’ website (https://mangobeds.com), our property management system (the “System”), and other related products and services (collectively, “Online Services”). This policy also outlines your choices regarding your personal information and how you can access and update it.

By using Mangobeds’ Online Services, you accept the terms of this Privacy Policy. If you have questions or concerns about this Privacy Policy, please contact us at info@mangobeds.com.

For purposes of data protection laws, specifically the EU General Data Protection Regulation (GDPR) and applicable data protection legislation, Mangobeds is the data controller responsible for your information when we determine the purposes and means of processing. Whenever Mangobeds acts on behalf of an accommodation provider using our System, that entity shall be the data controller, and Mangobeds shall be the data processor. In such cases, this policy applies where relevant to Mangobeds’ role as data processor, and you should contact the relevant accommodation provider for queries about their data processing practices.

What information we collect

We only collect information about you if we have a legitimate reason to do so, for example, to provide our Services, to communicate with you, or to make our Services better. We collect information in three ways: if and when you provide information to us, automatically through operating our services, and from outside sources.

Information you provide to us

We collect information that you directly provide to us. The amount and type of information depend on the context and how we use the information.

Basic account information: When you register for our Services (including free trials) or contact us, you may provide information such as your name, email address, physical address, and phone number.
Transaction and billing information: If you purchase paid Services, you will provide additional personal and payment information required to process the transaction, such as your name, credit card information, and contact details.
Property and guest information: When you use the System to manage your accommodation, you may enter information about your property, rooms, rates, and guests. Guest information may include names, contact details, identification documents, and booking details.
Communications with us: You may provide us with information when you respond to our emails, communicate with us via telephone, or engage with our customer support.

Information we collect automatically

We also collect certain information automatically when you use our Online Services.

Usage information: We collect information about your usage of our Services, including what happens when you use them. This information helps us provide our Services, understand user interaction, and improve our offerings.
Traffic data: We or our third-party service providers may collect visitor data such as IP addresses, browser settings, internet service provider (ISP) information, referring/exit pages, operating systems, date/time stamps, and clickstream data. We use this data to compile statistics about website usage and administer our site.
Location information: When you use the Online Services, we may collect general location information (such as general location inferred from an IP address).
Information from cookies and other technologies: Mangobeds uses cookies and other technologies to help us identify and track visitors, usage, and access preferences for our Services. See the “Cookies and similar technologies” section below for details.

Information we collect from other sources

We may also obtain information about you from other sources. For example, if you connect to our website, we may receive aggregated information from analytics providers. The information we receive depends on the services you authorize in your browser and any available options.

How we use information

We only process your personal data when we have a clear legal ground under the EU GDPR, specifically the bases listed in Articles 6(1)(a)-(f). We use information about you for the following purposes:

To provide our services: To set up and maintain your account, process payments, facilitate bookings (where Mangobeds acts as processor), and deliver the core functionality of the Mangobeds System.
To further develop and improve our services: By analyzing trends, monitoring user interaction, and adding new features that benefit our users.
To ensure security and prevent fraud: To monitor and protect the security of our Services, detect and prevent fraudulent transactions and other illegal activities, and protect the rights and property of Mangobeds and others.
To communicate with you: To send you updates, obtain feedback, keep you informed about Mangobeds and our products, and communicate offers and promotions that we think will be of interest to you.
To comply with legal obligations: To meet our legal and regulatory requirements or as otherwise permitted by law.
To enforce our legal terms: To ensure compliance with our Terms & Conditions and prevent abuse or misuse of our Services.

How we share information

We do not sell our users’ private personal information. We share information about you in the following limited circumstances with appropriate safeguards on your privacy:

Employees and contractors: We may disclose information to our employees and independent contractors who need to know the information to help us provide our Services or process information on our behalf. They are required to follow this Privacy Policy.
Third-party vendors and service providers: We may share information with third-party vendors who provide services to us, such as hosting, analytics, payment processing, and error monitoring. These companies require information to perform their functions and are required to agree to privacy commitments. A list of our current sub-processors is available upon request by emailing info@mangobeds.com.
As required by law: We may disclose information in response to a subpoena, court order, or other governmental request (GDPR Art. 6(1)(c)).
To protect rights and property: We may disclose information when we believe in good faith that it is reasonably necessary to protect the property or rights of Mangobeds, third parties, or the public at large.
Business transfers: In the event of a merger, sale of company assets, or acquisition of all or a portion of our business, user information would likely be one of the transferred assets. This Privacy Policy would continue to apply to your information.
With your consent: We may share and disclose information with your explicit consent or at your direction (GDPR Art. 6(1)(a)).
Aggregated and de-identified information: We may share information that has been aggregated or reasonably de-identified, so it cannot reasonably be used to identify you.

Cookies and similar technologies

Mangobeds uses cookies and other technologies for various purposes, including website functionality, security, performance analysis, and advertising. By using the Mangobeds website, you can manage your cookie preferences through our cookie consent banner, which appears on your first visit and is accessible at any time via the “Cookie Settings” link in our website footer.

Necessary cookies

Description: These cookies are essential for our website to operate correctly. They enable functions like page navigation, security, authentication, and remembering your cookie consent choices.
Purpose: Website operation, security, user authentication.
Legal basis: Legitimate Interests (strictly necessary for providing the requested service) [GDPR Art. 6(1)(f)].
Duration: Typically session-based or up to 6 months (for consent preference).

Analytics cookies

Description: These cookies allow us to understand how visitors interact with our website by collecting and reporting information. This includes product analytics (PostHog) and error tracking session replays (Sentry).
Purpose: Website analytics, performance monitoring, service improvement.
Legal basis: Explicit Consent [GDPR Art. 6(1)(a); ePrivacy Directive Art. 5(3)].
Duration: Up to 12 months.

Marketing cookies

Description: These cookies are used to track visitors across websites and display relevant advertisements. This includes Google Analytics, Google Ads conversion tracking, and Google Tag Manager.
Purpose: Conversion tracking, advertising measurement, campaign optimization.
Legal basis: Explicit Consent [GDPR Art. 6(1)(a); ePrivacy Directive Art. 5(3)].
Duration: Up to 90 days.

Managing your cookie preferences

You can manage your cookie preferences at any time by clicking on the “Cookie Settings” link in the footer of our website. This will re-open the cookie consent modal, allowing you to change your choices. You can also set your browser to remove or reject browser cookies. However, please note that if you reject cookies, certain features of Mangobeds’ website may not function properly.

Legal basis for the retention and processing of personal data

Our legal grounds for processing your information are as follows:

Contractual necessity (Article 6(1)(b) GDPR): Personal data is processed as necessary to fulfill our contractual obligations. This includes creating and maintaining your Mangobeds account, facilitating payment transactions, and providing onboarding support. When Mangobeds processes guest or booking data on behalf of an accommodation provider using our System, that provider is the data controller; Mangobeds acts exclusively as a data processor, handling personal data only in accordance with the controller’s documented instructions and the requirements of Article 28 GDPR.
Consent (Article 6(1)(a) GDPR and ePrivacy Directive): We rely on your freely given, specific, informed, and unambiguous consent for certain processing activities. This includes the use of analytics and marketing cookies, and sending promotional communications. You may withdraw your consent at any time via the “unsubscribe” link in any promotional message, by updating your cookie settings in our website footer, or by emailing info@mangobeds.com, without affecting the lawfulness of any processing carried out before withdrawal.
Legitimate interests (Article 6(1)(f) GDPR): We process personal data to further our legitimate interests, provided these interests are not overridden by your fundamental rights and freedoms. This includes operating our business and Online Services, providing security, improving our services, sending service-related communications, receiving payments, and preventing fraud.
Legal obligation (Article 6(1)(c) GDPR): Certain personal data must be processed and retained to comply with legal and regulatory obligations, such as financial record-keeping and reporting requirements.

Your rights

Residents of the European Economic Area (“EEA”), Switzerland, and the UK can exercise certain data subject rights available to them under applicable data protection laws. Where such rights apply, we will comply with requests to exercise these rights in accordance with applicable law. Please note that certain information may be exempt from such requests if we need to keep processing your information for our legitimate interests or to comply with a legal obligation.

If these rights apply to you, they may permit you to request that we:

Right to information: Request information about the collection and use of your personal data.
Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Request correction of inaccurate or incomplete personal data.
Right to erasure (Right to be forgotten): Request deletion of certain information we hold about you by emailing us at info@mangobeds.com. We will respond within 30 days. Some data may be retained where required by law or other legitimate reasons.
Right to restriction of processing: Request restriction of the way we process and disclose certain of your information.
Right to data portability: Request a copy of your data in a structured, commonly used, machine-readable format. Guest data can be exported directly from the Mangobeds System by your accommodation provider.
Right to object: Object to the processing of your personal data, particularly when processing is based on legitimate interests or for direct marketing purposes.
Right to withdraw consent: Where Mangobeds is processing your personal data based on your consent, you are entitled to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, please contact us at info@mangobeds.com. If applicable, you may make a complaint to the data protection supervisory authority in the country where you are based. Alternatively, you may seek a remedy through local courts if you believe your rights have been breached.

In instances where we process personal information on behalf of an accommodation provider (e.g., when a hotel uses our System), rights requests should be directed to the relevant accommodation provider. Any request sent directly to us that pertains to information collected on behalf of a customer will be forwarded to that customer.

Data retention periods

Mangobeds is committed to retaining personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. We adhere to the principle of data minimization, ensuring that only the necessary amount of personal data is collected and processed.

Once the retention period expires, personal data will be securely deleted or anonymized to prevent unauthorized access and ensure compliance with GDPR.

Data category	Retention period	Reason
Customer account information	Duration of active account + 2 years after last interaction	Dispute resolution, relationship management
Financial and transaction data	6 years + current year	Tax and legal obligations
Marketing data	24 months after last interaction	Consent-based, unless withdrawn sooner
Guest booking records	6 years after checkout	Tax and legal obligations
Credit card details	30 days after guest check-out	Contractual necessity
Analytics data	12 months	Consent-based
Error tracking data	90 days	Legitimate interest (service reliability)
Application logs	90 days	Legitimate interest (service reliability)
Cookie consent records	12 months (then re-asked)	Legal obligation

International data transfers

We store personal data on servers in the EU where possible. Some service providers may access or process personal data in third countries, including the United States, for purposes such as support, reliability, analytics, and, where you consent, advertising.

Where applicable, we rely on the EU-U.S. Data Privacy Framework adequacy decision, or use the European Commission’s Standard Contractual Clauses (SCCs), supported by transfer impact assessments and supplementary measures (e.g., encryption and strict access controls). Our current vendors and their locations are listed in the “How we share information” section above.

We review our transfer mechanisms regularly and only permit processing outside the EEA (and, where relevant, the UK and Switzerland) where an adequate level of protection or appropriate safeguards are in place.

Data we process on behalf of our customers

We receive information from and on behalf of our customers (accommodation providers) when they use our System. Because of the nature of the services, this information may contain personal identifiable information, including contact data, financial data, identity data, and other information necessary to manage bookings and generate legal documents.

We process such data only in accordance with our customers’ instructions. For such data, the customer is the “data controller” (for purposes of GDPR) and is responsible for most aspects of the processing of the personal information. If you have any questions or concerns about how your personal information is processed in these cases, including how to exercise your rights as a data subject, please contact the accommodation provider directly.

Mangobeds is authorized to act as the “data processor” of personal data on behalf of the customer, who will be the “data controller” of such data. The customer may request a Data Processing Agreement (DPA) from Mangobeds to supplement these terms and conditions.

Third-party websites

Our website may contain links to third-party websites. These links are provided solely as a convenience to you. Mangobeds has no control over the privacy practices of third-party websites; as such, you access any such third-party websites at your own risk. This Privacy Policy applies only to Mangobeds Online Services and not to other websites accessible from Mangobeds or that you use to access Mangobeds.

Security

Mangobeds takes data protection and your privacy seriously. We have implemented appropriate organizational and technical security measures to protect your personal information and keep it confidential, including encryption of data in transit and at rest, role-based access controls, and regular security reviews.

Policy changes

Although most changes are likely to be minor, Mangobeds may change its Privacy Policy from time to time. Mangobeds encourages visitors to frequently check this page for any changes. If we make any material changes to the ways we collect, use, or share your personal data, we will notify you in advance by email or in-app notice, and where those changes affect processing that relies on your consent, we will ask you to review and actively re-confirm your choices before those changes take effect.

Privacy contact information

If you have any questions about this Privacy Policy or the way your personal data is handled, please contact us at:

Email: info@mangobeds.com

Translations

This Privacy Policy has been originally drafted in English. Any translations into other languages are provided for convenience only. In the event of any inconsistency or ambiguity between a translated version and the English version, the English version shall prevail.