1. Information we collect

We may collect the following categories of personal information:

• Identifiers: name, email address, account login.
• Usage information: interactions with the Service, chat usage data, and preferences.
• Technical information: IP address, browser type, operating system, device data.
• Payment information (if applicable): processed by secure third-party providers (we do not store full payment details).

2. How we use information

We use your information to:

• Provide, operate, and improve the Service.
• Personalize your experience.
• Communicate with you (support, updates, marketing with your consent).
• Prevent fraud, misuse, or security threats.
• Comply with legal obligations.

3. Legal bases for processing (GDPR users)

If you are located in the EU or UK, we process your personal data under the following legal bases:

• Contract: to provide the Service you requested.
• Consent: when you agree to optional uses (e.g., marketing emails).
• Legal obligation: to comply with applicable laws.
• Legitimate interests: such as improving the Service and ensuring security.

4. How we share information

We do not sell your personal information. We may share information with:

• Service providers: trusted third parties who help us operate (e.g., hosting, analytics, payments).
• Business transfers: if we undergo a merger, acquisition, or sale of assets.
• Legal compliance: when required by law, regulation, or legal process.

5. International data transfers

If you are located outside the United States, your information may be transferred to and processed in the U.S. or other countries where we operate. We take appropriate safeguards (such as Standard Contractual Clauses) to protect your information.

6. Data retention

We retain personal information only as long as necessary for the purposes described, or as required by law.

7. Your rights

Depending on your location, you may have rights under data protection laws, including:

• Access: request a copy of the personal data we hold.
• Correction: request that we update or correct inaccurate data.
• Deletion: request we delete your data (“right to be forgotten”).
• Restriction/Objection: request limits on how we use your data.
• Portability: request your data in a portable format.
• Opt-out of sale/sharing (California): you can direct us not to “sell” or “share” your personal information as defined under CCPA/CPRA.

You can exercise these rights by contacting us at hello@mahoganychat.com.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of changes by updating the “Effective Date” above.

9. Contact us

If you have any questions or requests about this Privacy Policy, you can reach us at hello@mahoganychat.com.