The plain-language paperwork
Privacy policy
Your strings are your business. Here’s what we collect, why we need it, and who helps us run Lingo.
Last updated: September 22, 2026
Who’s responsible
Mango Technology Solutions LLC operates Lingo and is responsible for account, support, and website information. This policy covers visitors and people using the service.
If your organization puts someone else’s personal information into its localization content, it decides why that information is used. We process that content to provide the service on its behalf. Ask your organization about its own privacy practices; you can also contact us for help routing a request.
When an organization signs up, its administrators and authorized users may access shared content and workspace activity, manage access, and request exports or deletion on its behalf. Your organization’s agreement and internal policies govern that relationship. Leaving an organization does not automatically delete its shared records.
What we collect
Account information: your name, email address, profile image, role, organization or workspace membership, and sign-in/session information. Google currently provides sign-in; other account methods may be offered later. We do not receive your Google password.
Workspace information: connected repository details, localization files, source strings, translations, context, glossary entries, instructions, review decisions, translation memory, and operation history. People with access to your workspace can see its content.
Technical and support information: requests, IP addresses, browser/device information, errors, usage and cost records, and messages you send us. Hosting and infrastructure providers also process technical information needed to deliver and protect the service.
When paid offerings are available, we may process billing names and addresses, tax details, subscriptions, invoices, credit balances, usage charges, payment status, and transaction records. Payment providers handle payment credentials and may share limited payment-method details with us. The checkout will identify the provider and its handling of payment details before you pay.
Why we use it
We use this information to sign you in, operate your workspace, sync repositories, run requested AI features, support you, prevent abuse, troubleshoot problems, and meet legal obligations. We do not sell personal information or share it for targeted advertising.
Where privacy law requires a legal basis, we rely on providing our contract with you; our legitimate interests in running, securing, and supporting the service; legal obligations; or consent where required. You can withdraw consent for an optional use without affecting earlier lawful processing. We do not use your localization content to train our own AI models.
When you connect GitHub
Connecting GitHub lets Lingo process the repository identifiers, metadata, file paths and contents, branches, commits, pull requests, and webhook events needed to discover localization files, import, sync, and publish your work. Access depends on the GitHub App installation and repositories you authorize. Your organization’s GitHub administrators control that installation and can change or revoke its permissions in GitHub.
Removing repository access stops future access under that permission; it does not automatically erase material already imported into Lingo, operation records, or copies already published to GitHub. Contact us about deletion separately. Repository owners and collaborators can access information published back to their repositories according to GitHub permissions.
Who helps us run Lingo
We use hosting and background-processing providers, database providers, sign-in providers, GitHub for connected repositories, and AI service providers chosen by us. We may also use payment, analytics, customer-support, and contextual-advertising providers for the features described here when offered. Providers receive the information needed for their part of the service, subject to applicable contracts and privacy requirements. Sign-in and repository providers also handle your use of their own services under their own policies. Provider identities and changes are disclosed where required by law or a data-processing agreement; contact us for information about providers handling your personal information.
Authorized team members may access information when needed for support, security, or operations. We may disclose information to meet legal requirements, protect people and the service, or handle a business transfer with appropriate privacy protections and notice.
These providers may process information in the United States and other countries. Where applicable law requires protection for international transfers, we use the required contractual or other lawful safeguards. Contact us for details about the safeguards relevant to your information.
What happens when you use AI
AI translation, source improvement, and AI review send the relevant text, language information, and any included keys, context, glossary, or instructions to the AI providers we select. We may change providers or models without changing these general service terms, subject to required privacy disclosures and authorizations. Only use these features with content you are allowed to send. Do not put passwords, secrets, or unnecessary personal information in your strings.
Providers may process and retain prompts, responses, and technical records as needed to deliver and secure their services, subject to the applicable processing arrangements and law. We do not promise zero retention. We do not use your localization content to train our own models, and required privacy protections still apply when we use external models.
Product analytics and simple ads
We may introduce product analytics to understand what works: page views, feature use, clicks, navigation, session duration, errors, performance, device/browser information, and approximate location inferred from an IP address. Events may be associated with an account or organization to understand usage, improve the product, support customers, and prevent abuse. We may use aggregated or de-identified reports for business planning. We do not currently load an analytics tracker in the app.
We may show simple contextual ads or sponsorships, for example based on the page or interface language. We do not use private strings or repository content to target advertising, sell personal information, or share it for cross-site behavioral advertising. Ad delivery or measurement providers may receive technical information such as IP address, browser details, impressions, and clicks if these features are introduced.
For optional analytics or advertising storage that requires consent, we will ask before enabling it and provide a way to withdraw consent. Where another lawful basis applies, we will provide the required notice and choices. Visiting the site or accepting these terms is not consent to optional tracking.
How long we keep it
We keep account and workspace information while it is needed to provide the service. Review history and translation memory can retain earlier text even after an edit. We may retain limited records afterward for security, resolving disputes, and legal or accounting obligations. Retention depends on the kind of record, the purpose, and applicable requirements.
You can request deletion by email. We consider your organization’s ownership of shared content and any legal retention requirements. Deleted information can remain in backups until those backups rotate out. Copies already published to GitHub or exported elsewhere are controlled separately.
We use access controls and encrypted connections to protect information. No online service can promise perfect security.
Your choices and rights
You can ask to access, correct, export, or delete your personal information, or to restrict or object to a use, subject to applicable law. Email our privacy contact below. We may verify your identity and work with your organization to protect shared data. You can complain to your local data-protection authority where that right applies.
The cookie policy explains browser storage and your controls. Lingo is a work tool, not a service directed at children under 18. If a child has provided personal information, contact us so we can address it.
When this policy changes
We may update this policy as Lingo changes. We will update the date above and provide notice of material changes through the service or email, and obtain consent where required. A policy update does not override your legal rights.
Questions?
Lingo is operated by Mango Technology Solutions LLC, Florida, United States. Contact us about this policy, your account, or a request:
Adapted from 37signals / Basecamp · CC BY 4.0.