Privacy Policy
Last updated: 29/10/2025
This Privacy Policy explains how Mango App Lab SASU ("we", "us", or "our") collects, uses, and protects your personal information when you use the Vodist software-as-a-service platform ("Service"). We are committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the French Data Protection Act, and the California Consumer Privacy Act (CCPA).
1. Who We Are
Data Controller: Mango App Lab SASU
Registered office: 200 Rue De La Croix Nivert, 75015 Paris, France
Email: legal@vodist.com
We are responsible for determining how and why your personal data is processed when you use our Service.
2. Information We Collect
We collect and process the following categories of personal information:
- Account Information: name, email address, password, and profile data when you register or log in.
- Billing Information: payment details provided via Stripe for subscription and billing purposes.
- Usage Data: information on how you interact with our Service (features used, device type, operating system, and browser).
- Technical Data: IP address, device identifiers, and general location (country or region).
- Communications: messages or support requests you send to us.
We do not collect sensitive personal data (e.g., health, political, or biometric data).
3. How We Use Your Data (and Legal Basis under GDPR)
| Purpose | Legal Basis |
|---|---|
| To provide, operate, and maintain the Service | Performance of a contract |
| To process payments and manage subscriptions | Performance of a contract |
| To communicate with you about updates or support | Legitimate interest |
| To comply with legal obligations | Legal obligation |
| To protect our rights, security, and prevent abuse | Legitimate interest |
4. Sharing of Information
We may share limited personal data with trusted service providers who help us deliver the Service, under strict confidentiality and data protection terms:
- Stripe (payments and invoicing)
- Mega (secure file storage)
We do not sell or rent your personal information. We may disclose data if required by law, regulation, or judicial authority.
5. International Data Transfers
Your data is hosted within the European Union. If any transfer outside the EU occurs (for example, through service providers), we ensure it is protected by appropriate safeguards such as EU Standard Contractual Clauses (SCCs) or equivalent legal mechanisms.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
- for account and billing data: as long as your account is active, and up to 5 years afterward for legal accounting obligations;
- for communications and support requests: up to 12 months after resolution.
When data is no longer needed, it is securely deleted or anonymized.
7. Your Rights
Under the GDPR (EU and France):
You have the right to access your data, correct inaccurate data, request deletion ("right to be forgotten"), restrict or object to processing, receive a copy of your data (portability), and withdraw consent (if applicable).
You may exercise these rights by contacting legal@vodist.com.
If you believe your rights have been violated, you may file a complaint with the CNIL (www.cnil.fr).
Under the CCPA (California):
California residents have the right to know what personal data we collect and how we use it, request deletion of their personal information, opt out of any "sale" or "sharing" of data (we do not sell data), and exercise their rights without discrimination.
Requests can also be sent to legal@vodist.com.
8. Cookies
We use cookies and similar technologies only to enable essential platform functions.
We do not use cookies for advertising or tracking across third-party websites.
You can manage or disable cookies through your browser settings.
9. Data Security
We use industry-standard security measures to protect your personal information, including:
- encrypted HTTPS connections
- limited employee access on a need-to-know basis
- regular monitoring and backup
While no online service can guarantee absolute security, we continuously work to protect your data integrity and confidentiality.
10. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The updated version will always be available on this page with a new "last updated" date. We encourage you to review this Policy periodically.
11. Contact Us
If you have questions, requests, or complaints regarding this Privacy Policy, you can contact:
Mango App Lab SASU
200 Rue De La Croix Nivert
75015 Paris, France
Email: legal@vodist.com