Privacy Policy

Last updated: 29/10/2025

This Privacy Policy explains how Mango App Lab SASU ("we", "us", or "our") collects, uses, and protects your personal information when you use the Vodist software-as-a-service platform ("Service"). We are committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the French Data Protection Act, and the California Consumer Privacy Act (CCPA).

1. Who We Are

Data Controller: Mango App Lab SASU

Registered office: 200 Rue De La Croix Nivert, 75015 Paris, France

Email: legal@vodist.com

We are responsible for determining how and why your personal data is processed when you use our Service.

2. Information We Collect

We collect and process the following categories of personal information:

Account Information: name, email address, password, and profile data when you register or log in.
Billing Information: payment details provided via Stripe for subscription and billing purposes.
Usage Data: information on how you interact with our Service (features used, device type, operating system, and browser).
Technical Data: IP address, device identifiers, and general location (country or region).
Communications: messages or support requests you send to us.

We do not collect sensitive personal data (e.g., health, political, or biometric data).

3. How We Use Your Data (and Legal Basis under GDPR)

Purpose	Legal Basis
To provide, operate, and maintain the Service	Performance of a contract
To process payments and manage subscriptions	Performance of a contract
To communicate with you about updates or support	Legitimate interest
To comply with legal obligations	Legal obligation
To protect our rights, security, and prevent abuse	Legitimate interest

4. Sharing of Information

We may share limited personal data with trusted service providers who help us deliver the Service, under strict confidentiality and data protection terms:

Stripe (payments and invoicing)
Mega (secure file storage)

We do not sell or rent your personal information. We may disclose data if required by law, regulation, or judicial authority.

5. International Data Transfers

Your data is hosted within the European Union. If any transfer outside the EU occurs (for example, through service providers), we ensure it is protected by appropriate safeguards such as EU Standard Contractual Clauses (SCCs) or equivalent legal mechanisms.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

for account and billing data: as long as your account is active, and up to 5 years afterward for legal accounting obligations;
for communications and support requests: up to 12 months after resolution.

When data is no longer needed, it is securely deleted or anonymized.

7. Your Rights

Under the GDPR (EU and France):

You have the right to access your data, correct inaccurate data, request deletion ("right to be forgotten"), restrict or object to processing, receive a copy of your data (portability), and withdraw consent (if applicable).

You may exercise these rights by contacting legal@vodist.com.

If you believe your rights have been violated, you may file a complaint with the CNIL (www.cnil.fr).

Under the CCPA (California):

California residents have the right to know what personal data we collect and how we use it, request deletion of their personal information, opt out of any "sale" or "sharing" of data (we do not sell data), and exercise their rights without discrimination.

Requests can also be sent to legal@vodist.com.

8. Cookies

We use cookies and similar technologies only to enable essential platform functions.

We do not use cookies for advertising or tracking across third-party websites.

You can manage or disable cookies through your browser settings.

9. Data Security

We use industry-standard security measures to protect your personal information, including:

encrypted HTTPS connections
limited employee access on a need-to-know basis
regular monitoring and backup

While no online service can guarantee absolute security, we continuously work to protect your data integrity and confidentiality.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The updated version will always be available on this page with a new "last updated" date. We encourage you to review this Policy periodically.

11. Contact Us

If you have questions, requests, or complaints regarding this Privacy Policy, you can contact:

Mango App Lab SASU

200 Rue De La Croix Nivert

75015 Paris, France

Email: legal@vodist.com