Privacy Policy

Mandaro is an AI marketing platform operated by Candela Labs Systems S.L., registered at Calle San Pablo, Córdoba, Spain ("Mandaro", "we", "us"). This policy explains what personal data we collect when you use mandaro.io, why we collect it, who we share it with, and how you can get it deleted.

Candela Labs Systems S.L. is the data controller for the personal data described in this policy. For any privacy question, or to exercise any right described here, contact us at contact@candelalabs.tech.

We collect only what the product needs to work:

• Account details. Your name, email address and authentication identifiers, handled by our authentication provider Clerk. We never see or store your password.
• Billing details. Your subscription plan and status. Payments run through Stripe, which stores your card details — we do not receive or store them.
• Company details. The website address you add, plus the company profile and guideline documents Mandaro generates by reading that public website.
• Content you create. Drafts, articles, images, scheduled posts and the feedback you give on them.
• Connected account data. Data from the third-party accounts you choose to connect, described below.
• Operational records. A log of the work our agents perform for you, and error records used to keep the service running.

If you connect Google Analytics or Google Search Console, Mandaro requests these scopes and no others:

• analytics.readonly — read-only access to your Google Analytics properties and their reports. Used to show your website traffic inside Mandaro.
• webmasters.readonly — read-only access to your Search Console sites and their search performance. Used to show your search traffic, and to choose article topics from the keywords you already rank for.

Both are read-only. Mandaro cannot modify, create or delete anything in your Google Analytics or Search Console accounts.

What we store

We store the OAuth access and refresh tokens for the connection, the identifier of the Analytics property or Search Console site you selected, and that account's display name so we can show you what is connected. Tokens are stored per company workspace and are used only to make the read-only requests described above.

We do not store your Analytics or Search Console reports. Metrics such as sessions, clicks, impressions and rankings are fetched live from Google each time you open the relevant page and are sent to your browser to be displayed. The one exception is described next.

Automated processing by AI models

When Mandaro proposes article topics for you, it reads your Search Console search-query rows for your own site — the query text, position, clicks and impressions — and includes them in a prompt sent to Anthropic's Claude model, which we access through Cloudflare Workers AI. This is what lets Mandaro suggest articles for keywords you already rank for instead of guessing.

This data is processed solely to generate that output for you. It is not retained by the model provider for training, and we do not use Google user data to develop, improve or train generalized AI or machine-learning models.

Limited Use

Mandaro's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell Google user data, do not use it for advertising, and do not transfer it to third parties except as necessary to provide the features described in this policy, to comply with the law, or as part of a merger or acquisition where it remains subject to this policy.

Disconnecting

You can disconnect Google Analytics or Search Console at any time from the Connections page in your workspace, which deletes the stored tokens. You can also revoke Mandaro's access directly from your Google Account permissions page.

You may connect social accounts (LinkedIn, Facebook, Instagram, X, TikTok) so Mandaro can publish or schedule posts you approve. These connections are handled by our publishing provider, Zernio, which holds the credentials; Mandaro stores only the reference to your account. You can disconnect them at any time from the Connections page.

We do not sell your personal data. We share it only with the providers that run the service on our behalf:

• Cloudflare — hosting, database, file storage and AI model access.
• Clerk — account creation and sign-in.
• Stripe — subscription payments.
• Anthropic — the Claude model that generates content, accessed through Cloudflare Workers AI.
• Exa — web search and retrieval used to research your company and its market.
• Zernio — publishing to the social accounts you connect.
• Unsplash — stock imagery used in generated content.

These providers process data on our instructions and are bound by their own contractual confidentiality and security obligations.

International transfers

Several of these providers are established in the United States or operate global infrastructure, so your personal data may be transferred outside Spain and the European Economic Area. Where that happens, the transfer is covered by the European Commission's Standard Contractual Clauses, by the provider's certification under the EU–US Data Privacy Framework, or by another transfer mechanism permitted under Chapter V of the GDPR. You can request details of the safeguards applying to a specific transfer at the contact address above.

Under the GDPR we rely on the following bases, depending on the data:

• Performance of a contract — running your account, generating and publishing your content, and taking payment. Without this data we cannot provide the service.
• Your consent — connecting Google Analytics, Search Console or a social account. You give it during the connection flow and can withdraw it at any time by disconnecting, with no effect on processing carried out beforehand.
• Our legitimate interests — keeping the service secure and working, diagnosing errors, preventing abuse and understanding cost. We balance these against your rights and keep the data minimal and short-lived.
• Legal obligation — retaining billing and tax records for the period Spanish law requires.

• Connection tokens — until you disconnect the account or delete your Mandaro account.
• Your content and company profile — until you delete it or close your account.
• Activity log and agent run records — 180 days.
• Error records — 30 days.

You can delete an individual company workspace from the app, which removes its content and disconnects its accounts. To erase your entire account, contact us at contact@candelalabs.tech.

A full erasure disconnects every connected account, deletes your stored files, your company profiles, your generated content, your connection tokens and your activity history. Records of the processing cost we incurred are kept in an anonymized form that is no longer linked to you.

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to receive it in a portable format, to object to or restrict how we process it, and to withdraw any consent you have given. Contact us at contact@candelalabs.tech and we will respond within one month, as the GDPR requires.

If you believe we have handled your data improperly, you may lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), or with the supervisory authority where you live.

Data is transmitted over encrypted connections and stored on Cloudflare's infrastructure. Connection tokens are restricted to the company workspace they belong to, and every request to our API is authenticated. No system is perfectly secure, but we work to protect your data and will notify you of a breach affecting it as required by law.

Mandaro is a business tool and is not directed at anyone under 16. We do not knowingly collect data from children.

We will update this policy when our practices change and will revise the date at the top. Material changes will be communicated to you by email or in the app.

Candela Labs Systems S.L.
Calle San Pablo, Córdoba, Spain
contact@candelalabs.tech