Privacy Policy

Mandala For Us, Inc. (“Mandala,” “we,” “us,” or “our”) values your privacy and is committed to protecting your personal data. This Privacy Policy describes our practices with respect to Personal Data that we collect from or about you when you use our website, applications, and services (collectively, “Services”).By using our services, you acknowledge that you have read and understood this Privacy Policy.

Privacy Policy
Effective Date: 07/08/2024

Mandala For Us, Inc. (“Mandala,” “we,” “us,” or “our”) values your privacy and is committed to protecting your personal data. This Privacy Policy describes our practices with respect to Personal Data that we collect from or about you when you use our website, applications, and services (collectively, “Services”). By using our services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Data We Collect

We collect personal data relating to you (“Personal Data”) as follows:

Personal Data You Provide. We collect Personal Data when you create an account, use our Services, or communicate with us, including:

Third-Party Platform Information: When you install or access the Mandala Coach through a third-party platform (e.g., Slack), that platform may provide us with account details including your username, profile information, workspace ID, and related metadata based on your permissions.
User Content: We collect content you provide to our AI-powered coaching bot, including prompt inputs, text, and any uploaded files, audio, or reflections.
Communication Information: This includes emails or social media messages you send to us.
Training Participation Data: If you join a Mandala training, we may collect attendance and submitted materials.
Community Engagement Data: If you participate in Mandala’s Slack-based communities, we collect messages and interactions initiated via the Mandala bot.
Other Information You Provide: We may also collect information from event participation, surveys, or identity verification when necessary.

Technical Information We Receive Automatically:

Log Data: Such as IP address, device type, timestamps, and browser information.
Usage Data: Engagement with our Services, prompts used, time spent, and features accessed.
Device and Location Info: Device identifiers and inferred location from IP address.

Data From Subprocessors and APIs:

We use OpenRouter to route content to AI model providers: OpenAI and Anthropic.
Mandala has not opted into prompt logging or training with these providers. Inputs are processed via secure APIs and retained only for short-term operational needs (typically ≤30 days) per provider policy listed here (OpenRouter, OpenAI, Anthropic)
See our Subprocessors List for current sub-processors and data use breakdown.

2. How We Use Personal Data

We may use Personal Data for the following purposes:

To provide, analyze, and maintain our Services, including training programs, Slack coaching, and community support
To personalize AI responses and improve coaching outcomes
To support user account functionality and system administration
To communicate with you about updates, events, or service notices
To prevent fraud or unauthorized access, and enforce our Terms
To comply with legal obligations and requests from authorities

We do not sell personal data or share it for advertising.

3. Disclosure of Personal Data

We disclose Personal Data under these limited circumstances:

Subprocessors: We use third-party providers (e.g., OpenRouter, Claude, OpenAI) to power functionality. Data is shared only as needed and governed by contracts.
Legal or Regulatory Disclosure: When required to comply with the law or enforce our rights.
Business Transfers: In the event of acquisition or restructuring.
User Consent: With your explicit direction or authorization.

4. Data Retention

We retain your Personal Data only as long as needed to provide services and support, or to meet legal obligations. This includes:

User prompts and Slack inputs: typically retained on our servers for as long as service is provided to customer.
User account and CRM information: retained until you request deletion.

5. Your Rights

You may request to:

Access, delete, or correct your Personal Data within 2 business days from our servers and within 30 days from OpenAI, and Anthropic servers.

Restrict or object to our processing
Request data portability

To exercise your rights, email: privacy@mandalaforus.com. We may request identity verification to process your request.

6. Children

Our Services are not intended for children under 13. If you believe a child has submitted data, contact us immediately at privacy@mandalaforus.com.

7. Security

We implement reasonable administrative, technical, and organizational safeguards including:

TLS 1.2+ encryption for all data in transit
Secure Slack app scopes
Access limited to the founder, protected by multi-factor authentication
Cloud-hosted storage on Railway with encryption at rest managed by underlying providers

No system is 100% secure. You use our services at your own risk.

8. Subprocessor Details

Mandala uses the following subprocessors:

OpenRouter – AI model routing (U.S.)
Anthropic (Claude) – AI model provider
OpenAI – API-based transcription only
Slack – Slackbot delivery
Langfuse – Prompt Engineering
Zoom – Virtual sessions
Railway – Cloud infrastructure (U.S.)
Google Workspace – Internal email and file storage

We do not opt into training with OpenAI or Anthropic. OpenAI retains abuse logs up to 30 days. Anthropic retains prompt and output data for ≤30 days, unless flagged.

9. U.S. State Privacy Disclosures

We do not sell personal data or share it for behavioral advertising. For additional rights under California or other U.S. privacy laws, see Sections 1–5 above or contact us.

10. Updates to This Policy

We may revise this Privacy Policy from time to time. We will update the effective date and notify users if changes are material.

11. Contact Us

For questions about this policy, contact:
team@mandalaforus.com or privacy@mandalaforus.com

‍