Legal

Privacy Policy

Last updated: March 4, 2026

Who We Are

Maango ("we," "us," or "our") operates the website maango.io and the Maango API. Maango is an AI policy registry that aggregates publicly available machine-readable policy signals from websites across the internet.

What We Collect

Information You Provide

When you join our waitlist or create an API account, we collect:

  • Email address
  • Company name (optional)
  • User type (agent builder or website owner)

Information Collected Automatically

When you visit our website, we may collect:

  • IP address
  • Browser type and version
  • Pages visited and time spent
  • Referring URL

We use Vercel Analytics and/or similar services for basic website analytics. We do not use invasive tracking or sell advertising.

API Usage Data

If you use the Maango API, we collect:

  • API queries (domains looked up)
  • Request timestamps
  • Usage volume

This data is used to enforce rate limits, improve service quality, and generate aggregate (non-identifying) statistics.

What We Do NOT Collect

  • We do not collect payment information (any future billing will be handled by a third-party payment processor)
  • We do not collect passwords (authentication is handled via API keys)
  • We do not collect personal data from the websites we crawl — we only read publicly available policy files (robots.txt, llms.txt, ai.txt, HTTP headers, etc.)

How We Use Your Information

We use the information we collect to:

  • Provide and maintain our services
  • Send you product updates and early access invitations (only if you opted in)
  • Respond to your inquiries
  • Monitor and improve our website and API
  • Generate aggregate, anonymized usage statistics

How We Share Your Information

We do not sell, rent, or trade your personal information to third parties.

We may share information with:

  • Service providers who help us operate our business (e.g., hosting on Vercel, database on Supabase), under contractual obligations to protect your data
  • Legal authorities if required by law, regulation, or legal process

Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. Waitlist data is retained until you request removal or we complete the onboarding process. You can request deletion at any time by emailing us.

Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing of your data
  • Withdraw consent at any time

To exercise any of these rights, contact us at the email below.

For EU/EEA Residents (GDPR)

We process your data based on consent (waitlist signup) and legitimate interest (service improvement). You have the right to lodge a complaint with your local data protection authority.

For California Residents (CCPA)

We do not sell personal information. You have the right to know what data we collect, request deletion, and opt out of any future sale of data (which we do not engage in).

Data Security

We implement reasonable technical and organizational measures to protect your data, including encryption in transit (HTTPS) and secure storage practices. However, no method of transmission or storage is 100% secure.

Cookies

Our website uses essential cookies required for the site to function. We do not use advertising or third-party tracking cookies.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

About Our Crawling

Maango crawls publicly accessible policy files (robots.txt, llms.txt, ai.txt, HTTP headers, and similar machine-readable signals) across the web. We do not crawl, store, or index the actual content of websites. We only read files that are specifically designed to communicate policies to automated systems. If you are a website owner and want your domain removed from our registry, contact us and we will process your request promptly.

Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:

Email: contact@maango.io