Privacy
Policy.

1.1 Information You Provide Directly

When you interact with Mansa Markets or the Mansa app, you may provide us with information directly, including:

• ◆Email address — when you subscribe to the Mansa Brief newsletter, create an account, or contact support
• ◆Name — when provided voluntarily in contact forms or account registration
• ◆Payment and subscription metadata — when purchasing a paid plan or app subscription through our payment or platform providers; we do not store full card details
• ◆Communications — when you contact us via email at hello@mansamarkets.com, including the content of those communications
• ◆Portfolio information you choose to save in Mansa — such as holdings, watchlists, dividend records, and alert preferences

1.2 Information Collected Automatically

When you visit mansamarkets.com or use the Mansa app, we automatically collect certain technical information, including:

• ◆Log data — IP address, browser type and version, pages visited, time and date of visit, time spent on each page, referring URLs
• ◆Device information — device type, operating system, app version, screen resolution, and diagnostics
• ◆Usage data — which pages and features you access, how you navigate through the Service, and in-app interaction events
• ◆Cookies and similar technologies — as described in Section 4

1.3 API Usage Data

If you use the Mansa Markets developer API, we collect information about your API requests, including endpoint accessed, request parameters, response codes, timestamp, and volume. This data is used for rate limiting, abuse prevention, billing, and service reliability.

We use the information we collect for the following purposes:

• ◆To provide and operate the Service — including displaying market data, processing API requests, maintaining accounts, and syncing saved app data
• ◆To send the Mansa Brief newsletter — only if you have subscribed and consented to receive it
• ◆To communicate with you — responding to enquiries, providing support, and sending service-related notifications
• ◆To improve the Service — analysing usage patterns to understand how people use Mansa Markets and Mansa and identify areas for improvement
• ◆To ensure security and prevent abuse — detecting and preventing fraud, suspicious activity, and misuse of our systems
• ◆To process subscriptions and verify entitlement access — including validating Mansa subscription status through platform providers
• ◆To comply with legal obligations — where required by applicable law
• ◆To enforce our Terms of Service — including investigating potential violations

We do not sell your personal information to third parties. We do not use your personal information for automated decision-making that produces legal or similarly significant effects.

We share your information only in the following limited circumstances:

3.1 Service Providers

We share information with third-party service providers who assist in operating the Service, subject to contractual data processing agreements. These may include:

• ◆Hosting and infrastructure providers (such as Vercel and Supabase)
• ◆Email service providers for newsletter delivery and communications
• ◆Payment processors and platform billing providers, including Apple for in-app subscriptions
• ◆Analytics and error monitoring providers

3.2 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request — including to comply with a court order, to protect the safety of any person, or to prevent or investigate illegal activity.

3.3 Business Transfers

If Mansa Labs is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Service before your information becomes subject to a different privacy policy.

3.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

4.1 What We Use

Mansa Markets uses cookies and similar tracking technologies to operate and improve the Service. We use:

• ◆Strictly necessary cookies — essential for the Service to function, including session management and security. These cannot be disabled.
• ◆Performance and analytics cookies — to understand how visitors interact with the Service. We use analytics configured to minimise identification of individuals.
• ◆Preference cookies — to remember your settings and preferences such as selected market filters.

4.2 Your Choices

You can control cookies through your browser settings. Disabling non-essential cookies may affect functionality such as saved preferences. Mobile app permissions and notifications can also be managed through your device settings.

4.3 Do Not Track

Where technically supported, we respect browser "Do Not Track" signals by limiting collection to necessary operational data.

We retain personal information for as long as necessary to provide the Service and fulfil the purposes described in this policy, unless a longer retention period is required by law.

• ◆Account data — retained for the duration of your account and for a limited period after deletion for legal, audit, and fraud-prevention purposes
• ◆Newsletter subscription data — retained until you unsubscribe, plus a limited processing period
• ◆API logs and security logs — retained for security, reliability, and billing purposes
• ◆Email correspondence — retained as needed for support and compliance
• ◆Anonymised analytics data — may be retained longer because it cannot reasonably be linked to individuals

Depending on your location, you may have rights regarding your personal information. We will respond to valid requests within a reasonable timeframe and in accordance with applicable law.

• ◆Right of access — to obtain a copy of the personal information we hold about you
• ◆Right to rectification — to request correction of inaccurate or incomplete information
• ◆Right to erasure — to request deletion of your personal information, subject to legal retention obligations
• ◆Right to restriction — to request that we limit how we use your information
• ◆Right to data portability — to receive your personal information in a structured, machine-readable format
• ◆Right to object — to object to processing based on legitimate interests
• ◆Right to withdraw consent — where processing is based on consent
• ◆Right to lodge a complaint — with your local data protection authority

To exercise any of these rights, email us at hello@mansamarkets.com with the subject line "Privacy Rights Request". We may ask you to verify your identity before fulfilling your request.

For EU/UK residents: If you are located in the European Economic Area or the United Kingdom, our legal bases for processing may include contract performance, legitimate interests, legal obligation, and consent where explicitly obtained.

For California residents: You may have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information.

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, accidental loss, alteration, or disclosure. These measures may include:

• ◆Encryption of data in transit (TLS/HTTPS) and, where appropriate, at rest
• ◆Access controls limiting who within our team can access personal data
• ◆Database security policies and infrastructure monitoring
• ◆Regular review of our application and hosting configuration
• ◆Authentication controls, API keys, and abuse prevention systems

No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we take our obligations to protect your information seriously.

Mansa Markets and Mansa are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us and we will take appropriate steps.

Mansa Markets is operated globally and your information may be transferred to, stored, and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from those in your jurisdiction.

Where required, we use appropriate safeguards for international data transfers, including contractual protections or equivalent mechanisms.

The Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy applies only to Mansa Markets products and services. We encourage you to review the privacy policies of any third-party services you use.

Examples of third-party services we may use include:

• ◆Vercel — hosting and CDN
• ◆Supabase — database and authentication infrastructure
• ◆Apple — in-app subscription billing and purchase verification for Mansa on iOS
• ◆Other data and infrastructure providers needed to operate the Service

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the Last Updated date on this page and, where required, provide additional notice.

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have a complaint about how we handle your personal information, please contact us: