Manglai Privacy Policy

Effective as of 01/02/2026

1.- Right to Information

In application of the provisions of Article 11 of Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (hereinafter, LOPDGDD) and Article 13 of the General Data Protection Regulation 2016/679 (hereinafter, GDPR), the guidelines and procedures related to the collection, use, and disclosure of information during the use of the Service, as well as users' rights and the applicable regulations for their protection, are described below.

Your personal data may be used for the provision and improvement of the Service. Accessing and using it implies acceptance of this Privacy Policy.

Words with their first letter capitalized have meanings defined in this text.

2.- Key Definitions

To facilitate understanding of this Policy, the following terms are defined:

• Account: A unique identification created to access the Service.
• Business: The legal entity responsible for collecting and managing Consumers' personal information and determining the purposes and means of processing such information.
• Company: Referred to in this document as "the Company," means Manglai IA. For the purpose of this Privacy Policy, the Company is the Data Controller.
• Consumer: A natural person residing, excluding transient uses.
• Cookies: Files placed on electronic devices that store preferences and browsing details.
• Data Controller: The legal entity responsible for the purposes and means of processing personal data.
• Device: Any electronic equipment that accesses the Service.
• Do Not Track (DNT): An online tracking control mechanism.
• Personal Data: Any information that directly or indirectly identifies an individual.
• Sale: Any disposition or transfer of a Consumer's personal information in exchange for monetary or other valuable consideration.
• Service: The online products and/or digital platforms of or in connection with the service provided by Manglai.
• Data Processor: Any natural or legal person who processes data on behalf of the Company.
• Third-party Social Media Service: Any external digital platform that facilitates logging into or within the Service.
• Usage Data: Information automatically generated from the use of or from the Service's own infrastructure.
• Website: https://www.manglai.io/.
• You: The user, company, or legal entity that uses or accesses the Service.

3.- Identification of the Controller

Sustainability Solutions SL (referred to in this document as "Manglai")

B-70683883

Calle de Buenos Aires, 38, SA 4, 08036 Barcelona (Spain)

hola@manglai.io

+34 930 47 88 08

4.- Collection and Use of Personal Information

• Personal Data Collected

When using the Service, personally identifiable information may be requested, which includes:

Email address,

First and last name,

Phone number,

Address (street, state, province, postal code, and city), and

Usage Data.

• Automated Usage Data

Data related to the use of the Service is automatically collected, such as IP address, browser type and version, pages visited, access date and time, browsing time, unique identifiers, and other technical data collected on both computers and mobile devices.

• Third-Party Social Media Integrations

The user may access the Service through third-party accounts such as Google, Facebook, or Twitter.

In such cases, data associated with these accounts (name, email, activity, contacts, and other voluntarily provided information) may be collected. By providing this information, the user authorizes its use, storage, and eventual sharing in accordance with this Privacy Policy.

• Tracking Technologies and Cookies

Cookies and similar tracking technologies (beacons, tags, scripts) are used to track user activity and store relevant information with the aim of optimizing and analyzing the Service.

The technologies used may include:

Cookies or browser cookies,

Flash Cookies, and

Web Beacons.

Cookies can be persistent (remain on the device) or session-based (deleted when the browser is closed) and perform functions such as authentication, personalization, performance analysis, and targeted advertising.

Detailed information can be found in the Company's Cookie Policy.

• Purposes of Processing

Personal data may be used to:

Manage and maintain the Service,

Administer accounts and associated functionalities,

Execute contracts related to products or services,

Contact the user through various channels for relevant information,

Send commercial and promotional communications, when you have opted to receive such information,

Address requests or inquiries,

Offer personalized advertising and evaluate its effectiveness,

Facilitate corporate operations where data forms part of transferred assets, and

Perform statistical analysis, identify trends, and improve the user experience.

• Data Sharing

Personal information may be shared in the following cases:

With service providers for specific activities (analytics, marketing, and payment processing),

In business transfer processes (mergers or acquisitions),

With affiliates or collaborators, subject to compliance with this Privacy Policy,

With business partners for promotions or offers, when you have given your clear and unequivocal consent,

With explicit user consent, for other purposes.

• Information Retention

Personal data is retained only for as long as necessary to fulfill the intended purposes, meet legal obligations, resolve disputes, and enforce agreements.

Usage data has shorter retention periods, unless it is used for security, functionality requirements, or in accordance with current legislation.

• International Transfers

Data may be processed and transferred outside the user's jurisdiction. Acceptance of this Privacy Policy represents your agreement to this processing.

Manglai guarantees the application of appropriate technical and organizational security measures for the protection of personal data in accordance with the LOPDGDD and the GDPR.

Furthermore, Manglai undertakes not to carry out international data transfers without adequate safeguards such as standard contractual clauses or recognized certification mechanisms.

• Information Disclosure

Information disclosure may occur in contexts of business operations, legal requirements, defense of rights, investigations, protection of user or third-party safety, and mitigation of legal risks.

• Information Security

Manglai applies commonly accepted security standards to protect personal data, although it cannot guarantee its invulnerability due to the nature of digital transmissions.

5.- Access to and Knowledge of Personal Data

To fulfill the aforementioned purposes, the individuals and entities listed below may have access to personal data. Their access will be limited to the data necessary to perform the functions of the data controller.

• Analytics. Third-party service providers to monitor and analyze Service usage:

Google Analytics. More information at, policies.google.com/privacy

Firebase. More information at, policies.google.com/privacy

Mixpanel. More information at, mixpanel.com/terms/

Amplitude. More information at, amplitude.com/amplitude-security-and-privacy

• Advertising:

Google AdSense and DoubleClick Cookie. More information at, google.com/ads/preferences/

Facebook. More information at, facebook.com/policy.php

LinkedIn. More information at, linkedin.com/legal/ads-policy

• Marketing. Use of personal data for informational, commercial, marketing or promotional material, and any other information that may be of interest to you.
• Payment Processing. Use of third-party services for payment processing:

Stripe. More information at, stripe.com/us/privacy

• Remarketing. The Company uses remarketing services to advertise to you after you have accessed or visited our Service:

Google Ads. More information at, policies.google.com/privacy

X. More information at, x.com/es/privacy

Facebook. More information at, facebook.com/privacy/explanation

The user can exercise opt-out options as provided by each provider.

6.- Rights

Data processing by Manglai is based on legal grounds such as consent, contract execution, legal obligations, vital or legitimate interests, and public interest.

The Company will inform, if necessary, about the specific applicable basis.

User rights:

Right of access. To request from the Data Controller, free of charge, all information held about one's personal data and communications that have been made or are planned to be made.

Right to rectification. To request the Data Controller to change the content of information about your person and your data, following the data subject's instructions.

Right to erasure. To request the Data Controller to delete any information about the data subject. Erasure implies blocking all data and keeping it available to public administrations for the period foreseen for the right to exercise legal actions to expire.

Right to restriction of processing. To request the Data Controller to limit the processing of your data when personal data is inaccurate, the processing is unlawful, the Data Controller no longer needs to process the data, or when the reasons for ceasing data processing alleged by the data subject prevail over those of the Data Controller.

Right to data portability. To request the Data Controller to provide the data subject's personal data in a structured, commonly used, and machine-readable format, in order to transmit it to another when processing is carried out by automated means and is based on explicit consent.

Right to object. To request the data controller to process the data following specific instructions given by the data subject.

Right to withdraw consent. A provision given by the data subject to the Data Controller by notifying them that they withdraw the consent given for processing their data.

Rights not to be subject to automated individual decisions. To request the Data Controller that all decisions with legal effects are not taken exclusively by machines.

To exercise the above rights, you must contact the Data Controller's addresses, point 3, in writing.

7.- General Considerations

• Links to other websites:

The Service may contain links to other websites for which Manglai assumes no responsibility or control over their privacy policies.

• Modifications to the Privacy Policy:

Any modification will be communicated by email and/or by prominent notice on our Service, prior to the change becoming effective.

It is recommended to periodically review the Privacy Policy for any changes.

Changes to the Privacy Policy will be effective once it is published on the website.

• Contact:

For inquiries or requests related to this Privacy Policy, you can contact Manglai via email at hola@manglai.io.