Privacy Policy

This Privacy Policy explains how Mango Labs LTDA (“Mango Labs”, “we”, “us”, or “our”), which operates the Xchanger website, API, and dashboard (collectively, the “Service”), collects, uses, and shares information when you use the Service. By using the Service, you agree to the practices described here.

Information we collect

• Account information. When you create an account we receive your name, email address, and authentication details through our identity provider (Clerk).
• API keys and usage. We store a hashed version of each API key you create, along with logs of the requests made with it — including the endpoint, request parameters, response status, and timing — so we can provide usage analytics and enforce rate and quota limits.
• Billing information. Subscription and plan status are managed through our payment provider. We do not store your full payment card details.
• Technical data. We may collect IP addresses and standard request metadata for security, abuse prevention, and rate limiting.

How we use information

• To provide, operate, and maintain the Service.
• To authenticate requests, enforce usage limits, and display your usage analytics.
• To process subscriptions and manage your plan.
• To detect, prevent, and address security issues, fraud, and abuse.
• To communicate with you about your account, changes to the Service, and support requests.

How we share information

We do not sell your personal information. We share information only with service providers that help us operate the Service — such as our identity provider, payment processor, hosting, and error monitoring — and only as needed for them to perform those services. We may also disclose information when required by law or to protect our rights and the safety of our users.

Data retention

We retain account and usage data for as long as your account is active and as needed to provide the Service. Request logs are kept to power usage analytics and billing. You may request deletion of your account and associated data at any time.

Security

We take reasonable technical and organizational measures to protect your information, including hashing API keys before storing them. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information. To exercise these rights, contact us using the details below.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Contact us

The data controller responsible for your personal information is Mango Labs LTDA, enrolled under CNPJ 39.718.566/0001-99, with its registered office at R. São João Evangelista, 656, Belo Horizonte – MG, 30330-140, Brazil.

If you have questions about this Privacy Policy, contact us at [email protected].