MandaleenBack to home

Privacy Policy

Effective date: July 8, 2026

This Privacy Policy explains how Mandaleen ("Mandaleen", "we", "us") collects, uses, shares, and protects personal data when you use our website and services (the "Service"). By using the Service you agree to this Policy.

1. Data we collect

Information you provide

  • Account data: your name, email address, and password (stored in hashed form by our authentication provider).
  • Profile & preferences: display name, work role, language, theme, and model preferences.
  • Content you create: ideas and prompts, uploaded reference images and Style DNA, brand logos, reusable assets, source materials, and the social media designs you generate.
  • Billing data: your plan and billing status. Card payments are collected and processed by our payment processor, Whop, Inc. ("Whop"); we do not store full card numbers.
  • Communications: messages you send us for support.

Information collected automatically

  • Usage data: the billable actions you take and credits consumed, kept in an events ledger to enforce quotas and power your usage dashboard.
  • Technical data: IP address, device/browser information, and basic analytics about how the Service is used.
  • Cookies: essential cookies for authentication/session management and, where used, privacy-friendly product analytics. See the Cookies section below.

2. How we use your data

  • To provide, operate, and secure the Service and generate the content you request.
  • To authenticate you and maintain your account and sessions.
  • To meter usage, enforce credit allowances and rate limits, and prevent abuse and fraud.
  • To process payments and manage subscriptions.
  • To provide support and respond to your requests.
  • To improve reliability and features, and to comply with legal obligations.

We do not sell your personal data. We do not use your private content to train our own foundation models.

3. AI processing of your inputs

To generate output, your prompts and attached materials are transmitted to third-party AI model providers (for example, advanced design AI models accessed via an AI gateway) that process them to return images and copy. These providers process the data under their own terms and privacy commitments. Do not upload confidential information you are not authorized to share with such providers.

4. How we share data

We share personal data only with service providers who help us run the Service, including:

  • Cloud & database hosting — to store your account, content, and files.
  • Authentication — to sign you in and manage sessions.
  • AI model providers / gateway — to generate your requested output.
  • Payment processing — Whop, Inc. ("Whop"), our payment processor, to handle checkout, subscriptions, and billing.
  • Analytics — to understand aggregate product usage.

We may also disclose data to comply with law, enforce our Terms, or protect the rights, safety, and security of our users and the Service. If we are involved in a merger or acquisition, data may be transferred as part of that transaction.

5. Data retention

We keep your account and content for as long as your account is active. You can delete your work data from within the app, and you can request full account deletion (see your rights below). We may retain limited records where required for legal, tax, security, or fraud-prevention purposes.

6. Security

We protect data with measures including encryption in transit, row-level access controls that scope your data to your account, server-side handling of provider API keys, and least-privilege access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.

8. Your rights

Depending on your location (for example, under the GDPR or similar laws), you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email privacy@mandaleen.com. You may also have the right to lodge a complaint with your local data-protection authority.

9. Cookies

We use strictly necessary cookies for authentication and session management, which are required for the Service to function. Where we use analytics, it is to understand aggregate usage and improve the product. You can control cookies through your browser settings; disabling essential cookies will prevent you from signing in.

10. Children

The Service is not directed to children under 18 (or the age of majority in your jurisdiction), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. We will revise the effective date above and, for material changes, provide additional notice where appropriate.

12. Contact

For privacy questions or requests, email privacy@mandaleen.com or visit our contact page. Mailing address: Building No. 14, Mecca Street, Al Hussein Suburb, Amman, Jordan.