Privacy Policy and Cookies

The data controller responsible for processing data related to the operation of this connector ('the Connector') for the compatible AI assistants (currently, ChatGPT, Codex and Claude) is MANGO MNG, SA ('MANGO'), with Spanish tax identification number (N.I.F.) A-59.088.948 and registered address at Via Augusta, 10 (Polígono Industrial Riera Caldes), 08184 Palau-solità i Plegamans (Barcelona), Spain.

• Privacy contact: dpo@mango.com

• Connector support contact: eqp.winx@mango.com

The Connector is a query-only feature (without authentication). It exposes a public MCP endpoint that allows searching the MANGO product catalog and, in compatible AI assistants, displays product cards.

The Connector does not:

• create Mango customer accounts;
• process payments or initiate the purchase process within the AI ​​assistant;
• access loyalty profiles or account data.

Purchases are completed in mango.com, outside of the Connector. The user does not need to log in to use it.

• Free text of the query (e.g., “dress for a daytime wedding”).
• ISO country code and ISO language code (technical parameters sent by the host/model).
• Optional gender/brand filter (`genderId`).
• Optional limit on the number of results (`limit`).

The Connector does not actively request personally identifiable information: name, email, exact location (GPS or address), full chat history, or credentials of any kind are not requested.

With each request, ChatGPT, Codex or Claude may send the user's language and country as technical parameters. This data does not individually identify the user: it is used specifically for that request (responding in the corresponding language and displaying a catalog/prices appropriate to the country) and is not stored independently beyond the specific use of the request, except as indicated in the error/warning logs.

• Product and color identifiers (`productId`, `colorId`).
• Product name.
• Price amounts.
• URL of the product page on mango.com.
• URL of the product image (for the plugin's optional UI).

• `countryISO`
• `languageISO`
• `locale`
• `currency` (and associated formatting fields)

• email, name, phone number, or postal address;
• account IDs or loyalty membership numbers;
• payment details or login credentials;
• warehouse IDs;
• newsletter preferences;
• cart, shipping, or refund settings;
• other internal store settings.

The free text of the query is not repeated in the tool's text summary (`Found N products.`).

For security and service-operation reasons, we log in our cloud infrastructure the errors and warnings that occur while handling requests.

Each log entry includes the reason for the error or warning and the text of the query sent to the API, but does not include the client's originating IP address or other identifying data.

The Connector does not actively request personal data. However, if a user voluntarily includes any personal data within the free text of their search, that text could be recorded in the aforementioned error or warning logs, subject to the timeframes described in the “Retention period” section.

1. Process the user's specific query to return relevant catalog results (garments/items).
2. Adapt language, catalog availability, and price format to the country/language of the request.
3. Enable the link back to mango.com to complete the purchase or view the product.
4. Ensure the security, proper functioning, and resolution of incidents of the Connector (error logs/warnings).

We do not sell personal data derived from this Connector.

The processing is based on MANGO's legitimate interest (Article 6.1.f of the GDPR) to ensure the security, proper functioning, and resolution of incidents of the Connector, as well as to provide the requested service (including localizing the response by language and country).

Generally, the Connector does not process personally identifiable information, so the GDPR does not apply to the main activity of the service. In the residual case described above (personal data voluntarily included by the user in the text of a query that generates an error or warning), this processing is also based on MANGO's legitimate interest in the maintenance, security, and continuous improvement of the service.

• OpenAI, in its role as a necessary technical intermediary for the operation of ChatGPT, Codex or Claude, in accordance with OpenAI's own privacy policies;
• the host (ChatGPT, Codex or Claude), which receives the tool's response to display it to the user. Product links open mango.com.

• Technical logs (error and warning logs) are kept in active storage for 3 months, and are subsequently archived in frozen storage for a maximum of 1 year, after which they are automatically deleted.
• The language and country received in each request are not stored independently nor subject to their own retention period, as they are used only on a case-by-case basis to respond to that request (unless they are part of the text of a query recorded in an error/warning log).
• The catalog content itself does not constitute personal data of the ChatGPT, Codex or Claude user.

The Connector does not actively collect personal data. In the residual case described in “What data is collected/processed” (personal data that the user has voluntarily included in the text of a search that generated an error or warning), the user can exercise their rights of access, rectification, or erasure by contacting dpo@mango.com.

The user can stop using the Connector at any time from ChatGPT, Codex or Claude.