Privacy Policy

Mangoban Private Limited ("Mangoban", "we", "us", or "our"), a company incorporated in Sri Lanka, operates the website mangoban.cloud and related services. This Privacy Policy explains how we collect, use, disclose, and protect information when you interact with our website and the services we provide to business clients.

By accessing our website or engaging our services, you agree to the practices described in this policy. If you do not agree, please discontinue use immediately.

1 Information We Collect

We may collect the following categories of information:

• →Contact Information: Name, email address, phone number, and company name provided through contact forms or email correspondence.
• →Business & Project Data: Information you share with us as part of a software development or integration engagement, including technical specifications and platform credentials needed to deliver the requested services.
• →Usage Data: IP addresses, browser type, pages visited, and timestamps collected automatically via server logs to maintain security and improve site performance.
• →Platform Integration Data: Where clients engage us to integrate third-party platforms (such as Meta's WhatsApp Business API or Facebook Platform APIs), we process only the data necessary to configure, test, and operate those integrations on behalf of the client.

2 How We Use Your Information

We use collected information strictly to provide the services you or your organisation have requested, including:

• →Responding to inquiries and delivering project-related communications.
• →Developing, configuring, and maintaining custom software integrations on behalf of business clients.
• →Connecting client systems to third-party platforms (CRMs, messaging APIs, cloud infrastructure) as instructed by the client.
• →Ensuring the security, performance, and reliability of our website and services.
• →Complying with applicable legal obligations.

We do not use your data for advertising, profiling, or any purpose beyond the scope of the services requested.

3 Data Is Never Sold or Shared Commercially

Mangoban Private Limited does not sell, rent, trade, or otherwise transfer your personal data or platform data to third parties for commercial or marketing purposes — under any circumstances. Data shared with us is treated as strictly confidential and used solely to fulfil our contractual obligations to you.

We may share information only in the following limited situations:

• →With sub-processors (e.g., cloud hosting providers) strictly necessary to deliver your services, under confidentiality agreements.
• →When required by Sri Lankan law, court order, or other binding legal obligation.
• →With your explicit written consent.

4 Meta Platform Data

Where Mangoban Private Limited acts as a technology provider integrating Meta platforms (including WhatsApp Business API, Facebook Pages API, and related services) on behalf of business clients, we handle Meta platform data in strict accordance with:

• →Meta's Platform Terms and Developer Policies.
• →The principle of data minimisation — we access only the permissions necessary for the specific integration requested.
• →Restrictions against use of platform data for targeting, profiling, or any purpose beyond the stated integration.

Platform data processed under a client engagement is retained only for the duration of the engagement and securely deleted thereafter, unless a longer period is required by law or mutually agreed in writing.

5 Security

We implement enterprise-grade technical and organisational security measures to protect your data against unauthorised access, disclosure, alteration, or destruction. These include:

• →Encryption of data in transit (TLS/HTTPS) and at rest.
• →Access controls limiting data access to authorised personnel only.
• →Regular security reviews and infrastructure hardening.
• →Incident response procedures for timely detection and notification of data breaches.

While we take all reasonable precautions, no method of electronic transmission or storage is 100% secure. We will notify affected parties promptly in the event of a confirmed breach.

6 Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Project-related data is typically retained for a minimum of 3 years following project completion for audit and warranty purposes, after which it is securely purged.

7 Your Rights

You have the right to:

• →Access the personal data we hold about you.
• →Correct inaccurate or incomplete data.
• →Request deletion of your data, subject to legal retention requirements.
• →Object to processing in certain circumstances.
• →Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at mangobandigital@gmail.com. We will respond within 30 days.

8 Cookies

Our website uses only essential session cookies required for basic functionality (such as admin authentication). We do not use tracking, analytics, or advertising cookies. You may disable cookies in your browser settings, though this may affect certain features of the site.

9 Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will reflect any changes. Continued use of our website or services after a change constitutes acceptance of the revised policy. For material changes affecting client engagements, we will notify you directly.