Mango9 Privacy Policy

These disclosures apply to the Mango9 Chrome extension, version 2.2.0 and later. The extension lets you use your Mango9 account to call or text phone numbers on web pages. The service-wide sharing, retention, security, and privacy-rights provisions below also apply, as do your organization's policies for its communications and CRM records.

Account and sign-in

When you sign in, the extension sends your username or email, password or email code, and a browser installation identifier over HTTPS to Mango9 provisioning. Provisioning locates and authenticates your account on its home CRM. Central-linked accounts are verified through Mango9 Central. The extension does not save your password or email code.

Access and refresh tokens, your account label, CRM address, phone extension, and preferences are saved in this browser so you can stay signed in across browser restarts. Credential storage is restricted to trusted extension contexts. Page scripts are not given these credentials. The extension periodically renews its own session.

Phone numbers on web pages

The extension reads page text locally to recognize phone numbers and add call/text controls, including on authenticated websites and in frames. It does not upload entire pages, browsing history, or a list of detected numbers. Your excluded-site preferences are stored locally.

When you use a number's controls, the selected number is sent to your Mango9 account for the requested call, message, or contact/history lookup. The SMS panel displays relevant CRM contact details and recent messages within the page you are using. The panel is part of that page, so use it on websites appropriate for your business communications.

Calls, texts, and optional media

Calling sends the selected destination, caller ID, and call-control requests to your account's CRM and PBX. Your connected Mango9 app or IP phone carries the call. Call identifiers, numbers, timestamps, and state are kept locally for call controls and history and are processed by the communications service.

Texting sends your chosen sender number, recipient number, message, and any attachments you choose to your account's messaging service. File uploads use service-generated upload addresses. Voice-message and voicemail-recording features request microphone access when you start recording. Recordings and files are transmitted when you send or save them. Call recording, when selected and available for your account, is performed by your PBX.

Notifications and lookup links

The extension registers a push identifier with Google's Chrome push service and Mango9. Push messages can contain call state, caller numbers, or incoming SMS content so Chrome can display notifications. Notification context is held in browser session storage.

Using the optional lookup action opens the URL configured in Settings with the selected phone number. Its default is Google Search; you can change it to your CRM. That selected lookup provider receives the number when you use this action.

Who processes the information

Information needed for these actions is processed by Mango9 provisioning, authentication, your organization's CRM/PBX and authorized account users, and the communications and hosting providers used by your account, including Telnyx for applicable messaging services and Google for Chrome push notifications. Your chosen call/message recipients receive the communications you send. A configured lookup provider receives numbers you ask it to look up.

The extension contains no advertising, analytics, or data-sale integration. It uses information for sign-in, calling, messaging, notifications, and the related controls described here. It does not use information for advertising profiles, creditworthiness, or lending decisions. Service-level disclosures and legally required sharing are described elsewhere in this Privacy Policy.

Retention and controls

Signing out clears this browser's login credentials and call history and revokes its session when the service is reachable. It does not sign out your mobile app. Changing accounts clears local call/history state. Uninstalling removes the extension's local storage. A failed network connection can prevent server-side revocation until a token expires or the session is revoked by the service.

Signing out or uninstalling does not delete CRM messages, call records, or recordings held by your organization or its communications providers. Their retention follows your account configuration, applicable agreements, legal requirements, and this Privacy Policy. Contact your account administrator or Mango9 for access or deletion requests.

You can disable call/text detection, exclude websites, adjust incoming notifications, or change the lookup URL in extension Settings. Chrome also lets you restrict the extension's website access and manage microphone and notification permissions.

For privacy questions or requests, contact privacy@mango9.com. For extension support, contact support@mango9.com.