Legal

Privacy Policy

Last updated: July 4, 2026

Mangrove One PBC (“Mangrove,” “we,” “us”) operates the Mangrove platform at try.mangrove.one and this website at mangrove.one. Mangrove helps people who care about AI safety find each other, form small teams, and ship real work together. This policy explains what personal information we collect, why, who we share it with, and the choices and rights you have.

1. Information we collect

We collect information you give us, information from accounts you connect, and a small amount of technical information that is created automatically when you use the platform.

Information you provide

• Account details: your email address (used for magic-link sign-in), display name, username/handle, and initials or avatar.
• Profile & matching preferences: your time zone, the weekly availability you paint on your calendar grid, how many hours per week you want to commit, and the roles or skills you bring.
• Activity: ideas you post, ideas you back or commit to (“Apply”), comments, the projects and roles you take part in, and peer ratings you give and receive.
• Communications: messages you send us, and your notification preferences.

Information from connected accounts

• LinkedIn (optional): if you choose “Sign in with LinkedIn,” we receive your name, profile photo, email address, and LinkedIn profile URL. See section 6.
• Google (where used): to schedule team kickoff and check-in meetings, we create Google Calendar events with Google Meet links on the team’s behalf.
• Meeting notes: for team meetings held over Google Meet, we ingest the notes Gemini generates for the call (its AI-written summary and transcript) so the platform can turn them into a shared record and action items for your team. See section 2 and section 4.

Information collected automatically

• Technical & usage data: basic log information such as your IP address, browser type, pages viewed, and timestamps, used to keep the service secure and working.
• Product & site analytics: privacy-friendly, cookieless usage analytics, such as pages viewed, referrers, and which features are used, that help us understand how Mangrove is used and improve it. These do not set tracking cookies, do not track you across other sites, and are never used for advertising. See section 7.
• Essential cookies: to keep you signed in and protect your session. See section 7.

2. How we use your information

• Run the platform: authenticate you, show you ideas, and match you into teams based on shared availability and mutual interest.
• Form & run projects: assemble teams when an idea reaches its threshold, and schedule the kickoff and check-in meetings.
• Capture meeting outcomes: read the notes Gemini generates from your team’s Google Meet calls to automatically log action items and follow-ups for the project, so your team has a shared record without anyone taking notes by hand.
• Schedule on your calendar: if you connect your Google Calendar, we use the Google Calendar API to read your free/busy times for scheduling and, with your consent, to create and update your team’s meeting events on your own calendar. We only create and modify the meeting events Mangrove itself schedules; we do not read or change your other calendar events.
• Improve your matches (opt-in): only if you opt in, we use AI (Claude, from Anthropic) to analyze your meeting transcripts so we can understand how you work and improve how Mangrove matches and staffs you on future projects. Claude acts as our processor, under confidentiality, and does not train its models on your data. This is off unless you turn it on, and you can opt out at any time.
• Team chemistry: build a profile of you from peer ratings so that we can match you with people you would enjoy working with.
• Notify you: send in-app, email, and Slack notifications about project activity, according to your preferences.
• Improve & secure: understand how the platform is used, troubleshoot, prevent abuse, and keep accounts safe.
• Comply with law: meet legal and regulatory obligations.

3. Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we rely on these legal bases:

• Performance of a contract: to provide the platform and the features you ask for.
• Legitimate interests: to secure, maintain, and improve the service, and to build the matching features that make the platform work (balanced against your rights).
• Consent: for optional connections like Sign in with LinkedIn, for the opt-in analysis of your meeting transcripts to improve your matches, and for any non-essential communications. You can withdraw consent at any time.
• Legal obligation: where we must process data to comply with the law.

4. How we share your information

• With other members: Mangrove is a collaboration platform, so parts of your profile are visible to other members by design: your name, avatar, availability overlap, and the ideas and comments you post.
• With your project team: meeting notes and the action items we derive from them are shared with the members of the project team the meeting belongs to. They are not visible to the wider Mangrove membership or to anyone outside your team. The only other access is the service providers that help us run Mangrove, and (if you opt in) the AI we use to analyze your meetings to improve your matches, described below.
• With service providers: vendors who process data on our behalf to run the platform (section 5).
• For legal reasons: if required by law, or to protect the rights, safety, and security of Mangrove, our members, or the public.

5. Service providers

We use a small set of trusted processors. Each handles only the data needed for its function, under its own security and privacy commitments:

Mangrove’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data for advertising and do not use it to develop, improve, or train generalized AI/ML models.

6. Signing in with LinkedIn

You can sign in with LinkedIn. When you do, that provider shares a limited set of profile information with us through its standard sign-in service, such as your name, profile photo, and email address, so we can create your Mangrove profile and save you re-typing it during onboarding. We use this only to sign you in and set up your profile. We do not post anything on your behalf, and we do not read your contacts, messages, posts, files, or anything else in your account. You can use a magic-link email sign-in instead at any time, and you can ask us to remove any imported details.

7. Cookies & sessions

We use strictly necessary cookies to keep you signed in and to protect your session against fraud and abuse. We do not use advertising or cross-site tracking cookies. Because these cookies are essential to signing in, disabling them may prevent the platform from working.

To understand how Mangrove is used, we rely on privacy-friendly, cookieless analytics (Vercel and PostHog). These do not set tracking cookies, do not track you across other sites, and are never used for advertising, so no cookie-consent banner is required for them.

8. Data retention

We keep your information for as long as your account is active or as needed to provide the platform. If you close your account or ask us to delete your data, we will delete or anonymize it within a reasonable period, except where we need to retain certain records to comply with legal obligations, resolve disputes, or enforce our agreements. Team chemistry data may be retained in de-identified, aggregated form that no longer identifies you.

9. Your rights & choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you, and receive a copy.
• Correct information that is inaccurate or incomplete.
• Delete your information.
• Object to or restrict certain processing, and withdraw consent.
• Port your data to another service.

To exercise any of these, email us at hello@mangrove.one. We will respond within the time required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

10. International data transfers

Mangrove is operated from the United States, and our service providers may process your information in the United States and other countries. Where we transfer personal information out of the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. Our product analytics (PostHog) are hosted in the European Union.

11. Security

We protect your information with encryption in transit, access controls, and row-level security on our database. No method of transmission or storage is completely secure, so while we work hard to protect your information, we cannot guarantee absolute security. If you believe your account has been compromised, contact us right away.

12. Children

Mangrove is not directed to children. You must be at least 16 years old to use the platform, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above, and for material changes we will provide a more prominent notice. Your continued use of Mangrove after an update means you accept the revised policy.

14. Contact us

Questions about this policy or your personal information? Reach us at:

Mangrove One PBC
hello@mangrove.one