Privacy Policy

What Manaform collects

Manaform collects the account information you use to sign in, including your name, email address, locale, and profile picture from Google when available. We also collect the intake information you choose to share, such as your name, public link or handle, marketing consent choice, browser location if you allow it, quest answers, reviews, journey progress, XP, avatar state, quest feedback, and generated quest history.

Manaform uses essential cookies for sign-in and OAuth security. We also use local storage for a first-party visitor ID and landing-page variant so we can understand whether the public site is working. Site analytics may include landing path, referrer, UTM parameters, visitor ID, user agent, and whether a visitor appears to be a bot.

If you make an early-access payment, Stripe processes the payment. Manaform stores payment metadata needed to unlock the journey and support refunds, such as payment status, Stripe checkout session identifiers, payment intent identifiers, amount label, and payment timing.

How Manaform uses it

We use your information to run the 30-day journey, generate and adapt quests, save your progress, provide account access, send operational and quest-reminder emails, support payments and refunds, respond to requests, measure conversion and retention in aggregate, improve reliability, and protect the service from abuse.

If you opt in to occasional updates, we may use your email for product news or early-access updates. Quest-reminder emails include an unsubscribe link, and you can ask us to stop sending optional messages at any time.

AI and service providers

Manaform uses AI providers to generate and adapt parts of the journey. The prompts may include your intake answers, quest context, progress, browser location if you allow it, and other journey signals needed to create useful output. AI run traces can contain participant data and generated internal context, so we treat them as sensitive.

Manaform uses trusted service providers for authentication, payment processing, database hosting, email delivery, AI generation, error monitoring, analytics, and infrastructure operations. These providers process data only as needed to provide, secure, monitor, or support Manaform.

Where data lives

Account records, sessions, OAuth state, usage counters, journeys, AI run records, email preferences, email delivery logs, funnel analytics, retention snapshots, and payment metadata are stored in Manaform databases or operational systems. Payment card details are handled by Stripe rather than stored by Manaform.

Production monitoring is configured to avoid request bodies, cookies, headers, journey text, and AI traces. Operational reports are aggregate-only and intentionally exclude participant names, email addresses, session hashes, journey text, hidden directions, AI prompts, and raw AI responses.

Retention and requests

We keep journey and account data while your account or early-access journey is active, and for a reasonable period afterward for support, security, accounting, backup, and product operations. Some payment, email delivery, security, aggregate analytics, and backup records may be retained when needed for legal, accounting, abuse-prevention, or operational reasons.

To request access, correction, deletion, export, marketing opt-out, or privacy help, contact support@manaform.ai. We will use the email address associated with your Manaform account to find your account, journey, payment metadata, email preferences, and related support records.