Privacy Policy

1. Information we collect

• Account data — your name, email and password (stored only as a secure hash).
• Property data — listing details, room types, rates, availability and photos.
• Operational data — bookings, guests, expenses, payroll and staff records you enter.
• Usage data — basic logs needed to operate and secure the service.

2. How we use it

We use this information to provide MangoHost, process your subscription, secure your account, and — where your property is listed — to publish your listing on MangoStay. We do not sell your data.

3. Storage & security

Data is stored in a managed PostgreSQL database; images and documents are stored on Cloudflare R2. Connections are encrypted in transit (TLS), passwords are hashed, and sessions use signed, HTTP-only cookies. Access is scoped per property.

4. Sharing with the IslandLink network

If your property is listed on MangoStay, your listing content (name, description, photos, rates and availability) is shared with the marketplace so travellers can find and book it. You can delist at any time from Settings → Marketplace. We use vetted service providers (e.g. hosting, email delivery) only to operate the service.

5. Guest data

Information you record about your guests is processed on your behalf. You are the controller of that data and are responsible for handling it lawfully and informing your guests as required.

6. Your rights & the Data Privacy Act

MangoHost is operated by IslandLink Solutions and handles personal data in line with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

You can access and update your data in the app, delist from MangoStay, and request export or deletion of your account data by contacting us. Some records may be retained where required for legal or accounting purposes.

• Be informed about how your data is processed.
• Access your data and obtain a copy.
• Correct inaccurate data, and object to or withdraw consent for processing.
• Request erasure or blocking, and data portability, where allowed by law.
• Be indemnified for damage from unlawful processing, and lodge a complaint with the National Privacy Commission (NPC).

7. Cookies

We use a single essential session cookie to keep you signed in. We do not use advertising trackers.

8. Contact

For privacy questions or requests, contact IslandLink Solutions at islandlinksolutions.com.