Effective date: 26 August 2025

MoodyMango (“we”, “us”, “our”) provides tenant deposit recovery services in Bangalore. We respect your privacy and are committed to protecting your personal data. This policy explains what we collect, why we collect it, how we use and share it, how long we keep it, and the choices you have.

1) Who we are & how to contact us

MoodyMango
Write to us at: Contact

Grievance / Privacy Contact: We have designated a person to handle privacy questions and complaints. Until a named Grievance Officer is published here, please write to Contact and in the comments area please mention “Privacy”.

2) What data we collect

We collect information that you provide directly to us, and limited technical information automatically.

Identity & contact: name, phone (incl. WhatsApp), email, preferred language.
Tenancy & property: property address, landlord/RWA details, rent, deposit, tenancy dates.
Documents & media you upload: agreements, payment proofs, bills, photos/videos (handover/occupation), repair invoices, chat/email histories or summaries, and any notes you add.
Communications: messages, emails, and call notes/recordings where applicable.
Payment & billing (if you purchase a package): transaction details from our payment provider (we don’t store full card data on our servers).
Technical: device/browser info, IP address, and basic analytics/cookies as described below.

We do not intentionally collect sensitive personal data beyond what you choose to upload to support your case. Please avoid sharing information that isn’t needed for deposit recovery.

3) Why we use your data

Service delivery: to assess your case, communicate with you, draft and send letters/notices, coordinate with RWAs/landlords and (if needed) police/legal partners.
Customer support: to answer questions and provide updates.
Payments & invoices: to process orders, receipts, and accounting.
Security & fraud prevention: to keep our systems safe.
Legal compliance: to comply with applicable laws and respond to lawful requests.

Legal bases (illustrative): your consent (e.g., when you upload files), performance of a contract (when you buy a package), legitimate interests (running and improving our service, preventing abuse), and legal obligations.

4) Who we share data with

We share personal data only as needed to provide the service or as required by law:

Service providers (processors): secure hosting/cloud storage, email/communications, analytics, payments. They act on our instructions and are bound by confidentiality.
Police & public authorities: if you engage us for Tier 2 or above or if the matter requires it, with your knowledge.
Advocates/legal partners: if you engage legal escalation (Tier 2/3), under confidentiality obligations.
Where required by law: to comply with court orders or lawful requests.

We do not sell your personal data.

5) International transfers

We primarily store data in India. Some providers may process data in other countries. Where that happens, we take steps designed to protect your information and use reputable vendors with appropriate safeguards.

6) How long we keep your data

Uploads & case files (when you submit the intake form): kept for 30 days from submission and then deleted.
If you become a paying client: we keep what’s necessary for service delivery, accounting, and legal compliance. After your matter closes, we periodically review and delete what’s no longer needed.
Emails & communications: retained as long as needed for your case and support, then pruned.
Invoices & tax records: retained per statutory requirements.

You can request early deletion where legally permitted—see “Your rights” below.

7) Security

We use reasonable technical and organisational measures, including HTTPS in transit, access controls, activity logging, and scheduled deletion. No system is 100% secure; if we become aware of a material incident affecting your data, we will take appropriate steps and notify you where required.

8) Your rights & choices

Subject to applicable law, you can:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Delete your data (including asking us to delete uploads before 30 days, where legally permitted).
Withdraw consent for processing that relies on consent.
Raise a complaint with us via the Grievance/Privacy contact.

To exercise these rights, write to us at Contact. We may ask you to verify your identity to protect your account.

9) Cookies & analytics

We use essential cookies to make the site work (e.g., security, load balancing). We may use basic analytics (e.g., privacy-respecting page stats or Google Analytics) to understand site usage. You can control non-essential cookies via your browser or device settings. If we add a cookie banner or preferences tool, your choices there will apply.

10) Children

Our services are intended for adults (18+). We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us for deletion.

11) Third-party links

Our site may link to third-party websites (e.g., payment processor, cloud drives you choose to share). Their privacy practices are their own; please review their policies.

12) Changes to this policy

We may update this policy from time to time. The “Effective date” above tells you when it last changed. If changes are material, we’ll take reasonable steps to let you know (e.g., a notice on this page).

13) Contact

Questions, requests, or complaints about privacy? Write to Us Contact.

Note: This policy is a general statement of our practices and is not legal advice. We operate under applicable Indian laws (including data-protection principles). For specific legal guidance, please consult your counsel.