Privacy Policy

We collect personal data that you voluntarily provide when you:

• Register for an account or free trial — name, email address, phone number, business name, country, and password;
• Subscribe to a paid plan — billing name, billing address, and payment information (processed by our payment processors — we do not store full card details);
• Apply to the Partner Program — name, email, phone, organization details, and promotional channel information;
• Contact our support team — name, email, and the content of your communications;
• Use the support chat widget — name, email (if provided), and conversation content;
• Complete surveys, feedback forms, or marketing sign-ups.

When you use the Mandu platform, we automatically collect:

• Account and profile information — your user role, preferences, and account settings;
• Usage data — features accessed, pages viewed, actions taken, and time spent;
• Technical data — IP address, browser type, device type, operating system, and browser language;
• Log data — access logs, error logs, and security logs;
• Communication data — support tickets, chat conversations, and email communications with Mandu.

In the course of using the platform for your business, you may upload or process personal data relating to your own customers, employees, or suppliers (“Customer Data”). This data is processed by Mandu on your behalf as a data processor, in accordance with your instructions and our Customer Terms of Service. You remain the data controller for such data and are responsible for your own compliance obligations.

We may receive personal data about you from: (a) Partners who refer you through our Partner Program; (b) payment processors providing transaction confirmation; and (c) publicly available sources used to verify business information.

Mandu does not intentionally collect sensitive personal data (such as health data, biometric data, or data on racial or ethnic origin) through the platform. Please do not submit such data unless specifically requested for a compliance feature.

• Create and manage your account and Tenant Environment;
• Deliver the features of your Subscription Plan;
• Process payments and manage your subscription;
• Provide customer support and respond to your enquiries;
• Send transactional communications (account activation, password resets, payment confirmations).

• Process and evaluate your partner application;
• Track referrals and calculate Commissions;
• Process Commission payments;
• Communicate Partner Program updates.

• Analyse usage patterns to improve features and user experience;
• Conduct research and analytics (using aggregated or anonymized data where possible);
• Diagnose and fix technical issues.

We may send marketing emails about Mandu features and offers only where you have opted in or where permitted by applicable law. You may opt out at any time by clicking “Unsubscribe” in any marketing email or by contacting support@mandu360.com.

• Comply with applicable laws, regulations, and legal obligations;
• Respond to lawful requests from government authorities;
• Enforce our Terms of Service and other agreements;
• Prevent fraud, abuse, and unauthorized access.

Where the GDPR or KDPA applies, we process your personal data on the following legal bases: Performance of a contract (providing the Service); Legitimate interests (analytics, fraud prevention, security); Legal obligation (where required by law); and Consent (for marketing and non-essential cookies).

We share personal data with carefully selected third-party service providers who assist us in operating the Service, bound by data processing agreements. Categories include:

• Payment processors — to process subscription and commission payments;
• Customer support platforms — to facilitate support chat and ticketing;
• Cloud infrastructure and hosting providers — to host the Mandu platform;
• Email delivery services — to send transactional and marketing emails;
• Analytics providers — to understand platform usage;
• Compliance service providers — to facilitate regulatory compliance features.

Specific providers may change over time. Current sub-processors are available upon written request.

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you prior to such a transfer as required by applicable law.

We may disclose personal data where required by applicable law, court order, or governmental request. We will notify you where legally permitted.

Depending on your location and applicable law, you may have the following rights:

If you are a California resident, you have additional rights including: (a) the right to know what personal information is collected, used, shared, or sold; (b) the right to delete personal information; (c) the right to opt-out of the sale or sharing of personal information (Mandu does not sell personal information); (d) the right to non-discrimination for exercising privacy rights; and (e) the right to correct inaccurate personal information.

Contact us at support@mandu360.com with the subject line “Privacy Rights Request”, providing sufficient information to identify yourself and the right you wish to exercise. We will respond within thirty (30) days. We may request proof of identity before processing your request.

If you believe we have not handled your personal data in accordance with applicable law, you may lodge a complaint with the relevant supervisory authority. In Kenya: the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke. In the EU: your local Data Protection Authority. In the UK: the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies are small text files placed on your device when you visit a website. We also use similar technologies including pixel tags and local storage. We refer to all such technologies collectively as “cookies”.

• Strictly necessary: Essential for the website and platform to function (e.g., session management, authentication). These cannot be disabled;
• Functional: Remember your preferences and settings to improve your experience;
• Analytics: Help us understand how users interact with our website and platform. Used only with your consent where required;
• Support chat: Used by our support chat widget to maintain chat session state.

You can manage cookies through your browser settings. Disabling certain cookies may affect the functionality of the Mandu website and platform. Where consent is required for cookies, we will request it via a cookie consent mechanism.