Privacy Policy

Who we are

MangoYeti is a software brand operated by Jassim Al-Ayoub, an individual based in Kuwait. We are responsible for personal information we handle for the website purposes described in this notice. Contact us at contact@mangoyeti.com.

What this notice covers

This notice covers mangoyeti.com and correspondence with us. Each app or extension has its own privacy notice describing its permissions and data practices. Follow the notice linked from the relevant product page to understand what happens when you use that product.

Information we receive

Information you send us. When you email us, we receive your email address, the contents of your message and any information or attachments you choose to send. Please avoid sending passwords, full payment-card details or unrelated sensitive information.

Information our hosting provider processes. Our website is hosted by Cloudflare. When you visit, Cloudflare processes technical information needed to deliver and protect pages, including IP addresses, traffic routing data, system configuration information and other information about traffic to and from the website. We do not run our own web servers or keep our own copies of visitor logs. Cloudflare may make some of this information available to us through its dashboard, and it describes its own processing in its privacy policy at https://www.cloudflare.com/privacypolicy/.

What the website itself collects. The website itself has no forms, accounts, analytics or mailing lists.

Purchases. We do not take payments on this website. We plan to offer paid browser extensions through Paddle; before those purchases begin, we will update this notice to describe the purchase information we receive.

Why we use this information

We use correspondence to answer questions and provide support, and technical information to operate and secure the website. We also retain records where required by law or reasonably needed for an unresolved dispute.

Where a legal basis is required, we rely on contractual necessity for requested services and steps before a contract, legal obligations for required records, and legitimate interests for necessary business correspondence and security where permitted. Uses requiring consent rely on that consent.

Information needed to answer your request may be necessary for that purpose. If you do not provide it, we may be unable to respond fully. Optional information is identified as optional.

Cookies and similar technologies

Our website’s own code does not set cookies or use similar technologies to store information on your device or read information from it. Our hosting provider, Cloudflare, may set a strictly necessary security cookie if it asks a visitor to complete a security check, for example when a connection looks suspicious; we have not switched on Cloudflare's other cookie-setting features. If we add optional storage or tracking, we will update this notice first and, where consent is required, use it only after your choice.

Service providers and other disclosures

We use Google Workspace for business email and Cloudflare (Cloudflare Pages) for website delivery. These service providers process the information needed to provide their services to us, as described in their own terms and privacy policies. We do not use other service providers to handle website information.

We may disclose information when required by law or reasonably necessary to protect rights, investigate misuse or establish or defend legal claims. Apart from our service providers and the disclosures described in this section, we do not share personal information with others. We do not sell personal information, share it for cross-context behavioral advertising or use it for targeted advertising.

Retention

We keep inquiry and support records for 24 months after the conversation ends. We do not keep our own copies of website logs; Cloudflare keeps the technical information it processes according to its own privacy policy. Longer retention may apply to a legal obligation or unresolved dispute. When we permanently delete an email from our Google Workspace account and it can no longer be restored, Google's data processing terms state that Google will then delete it from its systems as soon as reasonably practicable and within a maximum of 180 days, unless the law requires it to be kept. This does not affect copies held outside our account, such as in your own mailbox.

International processing

We operate in Kuwait. Our providers may process information in other countries, including the United States, countries in the European Economic Area and other countries where Cloudflare, Google or their subprocessors maintain facilities. Where international-transfer safeguards are required, we rely on Cloudflare's and Google's data processing terms, which provide for standard contractual clauses and other recognised transfer mechanisms such as the EU-U.S. Data Privacy Framework. Contact us for information about those safeguards or how to obtain a copy where available.

Your privacy rights, including GDPR

Where applicable law, including the EU or UK GDPR, gives you these rights, you may request access, correction, deletion or portability of your information, or restriction of processing. You may withdraw consent without affecting earlier lawful processing. Rights depend on the circumstances and may be subject to lawful exceptions.

Right to object: where applicable, you can object to processing based on legitimate interests and to direct marketing. To exercise a right, email contact@mangoyeti.com with the subject “Privacy request”. We may request proportionate identity verification and will respond within the period required by applicable law.

You may complain to the relevant data-protection authority, including an EEA authority or the UK Information Commissioner where applicable. We have not currently appointed a data protection officer or a representative in the EU or the UK.

Security and audience

We use safeguards appropriate to the information we handle. No system is completely secure. To report a suspected vulnerability or exposure, follow our Security Reporting page. This website is intended for adults and businesses and is not directed at children.

Automated decisions and updates

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you. We update this notice when our practices change and revise its effective date. We will provide additional notice or obtain consent when required.