Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account Information: Email address, name, password (encrypted)
• Payment Information: Processed securely through Stripe (we do not store card details)
• Usage Data: Service usage patterns, feature interactions, build requests
• Technical Data: IP address, browser type, device information

2. How We Use Your Information

We use collected information to:

• Provide and improve the Service
• Process payments and manage subscriptions
• Send service-related notifications
• Analyze usage patterns and optimize features
• Prevent fraud and ensure security
• Comply with legal obligations

3. Data Sharing & Disclosure

We do not sell your personal information. We may share data with:

• Stripe: For payment processing
• Service Providers: Hosting (Railway), email delivery
• Legal Requirements: When required by law or to protect rights

4. Data Security

We implement industry-standard security measures including encryption, secure authentication, and regular security audits. However, no method of transmission over the internet is 100% secure.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. You may request account deletion at any time.

6. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Opt-out of marketing communications

7. Cookies & Tracking

We use essential cookies for authentication and session management. We do not use third-party tracking or advertising cookies.

8. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children.

9. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service.

10. Contact Us

Kristoffer Kelly (sole proprietor)
doing business as Manifest / ConversationMine

Las Vegas, NV

For privacy-related questions, data access requests, or to request deletion of your data, contact us at: [email protected]

We will respond to data requests within 30 days as required by applicable law.

11. California Privacy Rights (CCPA)

California residents have the right to: (1) know what personal information we collect; (2) delete personal information we hold; (3) opt-out of the sale of personal information. We do not sell your personal information. To exercise your rights, email [email protected] with subject line "CCPA Request."

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data where there is no compelling reason for continued processing.
• Right to Restriction: Request that we restrict processing of your personal data.
• Right to Data Portability: Request transfer of your data in a structured, machine-readable format.
• Right to Object: Object to processing of your personal data for direct marketing purposes.

Legal Basis for Processing: We process your data on the basis of (a) contract performance — to deliver the Service you subscribed to; (b) legitimate interests — fraud prevention, security, and service improvement; and (c) your consent where explicitly given.

Data Retention: We retain personal data for as long as your account is active plus 3 years, or as required by applicable law.

International Transfers: Your data may be processed in the United States. We rely on Standard Contractual Clauses where required for transfers from the EEA.

To exercise any GDPR rights, email [email protected] with subject line "GDPR Request." We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.