Privacy Policy

1. Who we are

MangoFetch (“we”, “us”) runs mangofetch.com, a platform for international development tenders, contract awards and procurement plans. The data controller is MangoFetch. For anything about your privacy, email hello@mangofetch.com.

2. What we collect

When you create an account:

• your email address and password (stored hashed by our authentication provider)
• your profile: name, company, country, sectors, and optionally your birthday
• your email alert choice
• what you keep on MangoFetch: saved tenders, searches, contract awards, lists, notes and reminders
• lists you share: the email addresses you invite, and who is on each list. People on a shared list see each other's name and email address and the notes they write on its tenders
• your Workspace: the spaces you create or join and who is in them, and the bids, tasks, comments and documents you and your colleagues write there. Everyone in a space sees its content, and each other's name and email address
• how you use the site while signed in: pages and tenders opened, searches, time spent, clicks to notices
• how you found us: the referring site, campaign tags and the page or button that led to your sign-up
• public information about the organisation you name when signing up, such as its sectors and the countries it works in, which we use to improve your matches

If someone invites you to a shared list or a workspace before you have an account, we keep your email address with that invitation. If they choose to, we send you one email inviting you to sign up, and no other email unless you create an account. Ask us at any time to remove your address.

From every visitor, signed in or not:

• technical data needed to run and secure the site (server logs, browser and device type)
• measurement data described under Cookies, analytics and advertising below

The tenders, awards and plans on the site come from public procurement sources. They are not personal data about you.

3. Why we use it, and on what basis

• Providing the service (your account, saved items, matches, email alerts you chose): performance of our contract with you.
• Keeping the service secure, understanding how it is used and improving it: our legitimate interests.
• Analytics cookies and advertising (Google Analytics, Google AdSense): your consent where the law requires it, which you can withdraw at any time.
• Service emails (confirming your account, password resets): performance of our contract.

4. Who we share it with

We do not sell your personal data. We use these providers to run the service:

• Supabase: authentication and database hosting
• Vercel: website hosting and cookieless performance measurement
• Resend: sending account emails and the alerts you signed up for
• Anthropic: AI processing for search, for matching tenders to your profile, and for the Workspace proposal assistant (the tender, your organisation's profile and the document you ask it to work on)
• PostHog (EU-hosted): cookieless product analytics
• Google: Google Analytics, and Google AdSense for ads shown to signed-out visitors

They process data on our behalf under data processing agreements, except Google AdSense, which acts as an independent controller for ad serving. See how Google uses information from sites that use its services.

5. Cookies, analytics and advertising

We keep you signed in with essential storage that needs no consent. For measurement we mainly use cookieless tools (PostHog and Vercel): no tracking cookies, no full IP addresses.

We also use Google Analytics, and some tender pages show an ad from Google AdSense to visitors who are not signed in. Members never see ads. Google and its partners may use cookies to measure visits and to show ads, including ads based on your interests where you allow it.

If you are in the EEA, the UK or Switzerland, these cookies are only set after you agree in our consent banner. You can change or withdraw your choice at any time through Privacy settings (also in the footer of every page). You can also turn off personalised ads at Google Ad Settings or youronlinechoices.eu. Details are in our Cookie Policy.

6. International transfers

Some providers (including Google and Vercel) process data outside the EEA, mainly in the United States. These transfers rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

7. How long we keep it

Account data is kept while your account is open. When you ask us to close it, we delete or anonymise it within a reasonable period, unless the law requires us to keep it longer. Server logs are kept for a short period for security. Google Analytics data is kept for a limited period set in our Analytics settings.

8. Your rights

You can ask to access, correct, delete or export your data, to restrict or object to how we use it, and you can withdraw consent at any time. Email hello@mangofetch.com and we will reply within a month. You can unsubscribe from alerts with the link in every alert email or in your account. You may also complain to a data protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens.

9. Security

Data is encrypted in transit, and access to it is restricted per account (row-level security). No system is perfectly secure, but we take reasonable measures to protect your data.

10. Changes

We may update this policy. The current version is always on this page, with its date at the top.