Privacy Policy

Last updated: September 2026

1. Information we collect

Account information

When you sign up for MNGO, we collect your name, email address, and a hashed version of your password. Your password is never stored in readable form — it is secured by Supabase Auth, which uses industry-standard bcrypt hashing.

Workspace and property data

We store the information you enter to describe and manage your property: property names, room details, pricing rules, currencies, allocation percentages, and facilities. This is operational data you create and fully control.

Booking and guest data

When you record a guest booking, we store the guest's name, phone number, optional email address, check-in and check-out dates, booking amounts, payment status, and any optional identification number you choose to enter. You are the data controller for your guests' personal information. MNGO processes it on your behalf as a data processor.

Financial data

We store expense records (amounts, categories, dates, notes) and manual income entries that you or your team create. This data belongs to your workspace and is not shared with any other party.

Team and staff data

If you invite Co-Managers or Property Owners to your workspace, we store their names and email addresses to create their login accounts. Staff names may appear on schedule and shift records.

Order and menu data

For workspaces that use the Menu, Orders, or Shop features, we store order items, quantities, guest names, and phone numbers provided at checkout. No payment card numbers are stored — MNGO does not process card payments.

2. How we store your data

All MNGO data is stored in a PostgreSQL database hosted by Supabase, a trusted cloud infrastructure provider. Supabase infrastructure is hosted on Amazon Web Services (AWS) and is located outside Ghana. By using MNGO, you consent to your data being stored on international cloud servers operated by Supabase.

Every connection to our database and API is encrypted in transit using HTTPS/TLS. Row-level security is enabled on all database tables. Your workspace's data is logically separated from other workspaces at the application layer.

3. Data security

We implement the following security measures to protect your data:

• HTTPS/TLS encryption on all data in transit
• Bcrypt password hashing via Supabase Auth
• Rate limiting on login, signup, and public endpoints (IP-based, Postgres-backed)
• Account PIN lockout after repeated failed attempts
• HMAC-signed session tokens for guest-facing features
• Row-level security enabled on all database tables
• Security response headers on every HTTP response (X-Frame-Options, HSTS, CSP, and more)

No system is completely secure. If you believe there has been a security incident, please contact us immediately at kwame@dotdwgstudio.com.

4. How we use your data

We use the data we collect exclusively to provide and improve the MNGO service:

• Authenticating your account and maintaining your session
• Displaying your workspace's properties, bookings, financials, and team information
• Generating reports and financial summaries from your own entered data
• Communicating with you about your account (currently by email when you contact us directly)

We do not use your data for advertising, profiling, or sale to third parties.

5. Data sharing and third parties

We do not sell your data. We do not share your data with advertising networks or marketing platforms. The only third party that has access to your data is Supabase, which acts as our infrastructure provider and data processor under a data processing agreement.

We do not use Google Analytics, Meta Pixel, Mixpanel, or any other behavioural tracking or analytics service that profiles individual users.

6. Cookies and local storage

MNGO uses browser cookies for authentication sessions — these are set by Supabase Auth and are necessary for you to stay logged in. We also use browser localStorage to remember your light/dark mode preference. We do not use tracking cookies.

7. Your rights

You have the right to access, correct, or delete the personal data we hold about you. To exercise any of these rights, email us at kwame@dotdwgstudio.com with your account email address. We will respond within 14 days.

If you close your MNGO workspace and request data deletion, we will permanently delete your workspace data from our database within 30 days.

8. Guest data and your responsibilities

When you record personal information about your guests (names, phone numbers, identification numbers) in MNGO, you are the data controller for that information under applicable data protection law, including the Ghana Data Protection Act, 2012 (Act 843). MNGO acts as your data processor. You are responsible for ensuring you have the right to collect and store your guests' personal information and that your guests are aware of how their information is used.

9. Data retention

We retain your data for as long as your workspace is active. If you request account deletion, we will delete your data within 30 days. We may retain anonymised, aggregated usage statistics that cannot identify you or your guests.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last updated" date at the top of this page. Continued use of MNGO after an update constitutes acceptance of the revised policy.

11. Contact

For any privacy-related questions, requests, or concerns, contact us at: