Privacy Policy.
Last updated · 2026-07-05
1. Introduction and scope
mana is a US-based business and our Services are intended for businesses and individuals located in the United States.
2. Information we collect
- Contact and inquiry information. Your name, email address, phone number, company name, and job title when you fill out a form, request a demo, or contact us.
- Account information. If your organization has engaged us under a Master Services Agreement, we collect information necessary to provision and administer authorized user accounts on the mana platform, including name, business email, and role.
- Communications. Records of emails, support tickets, demo conversations, and other communications you send us.
- Payment information. If your organization purchases our Services, we collect billing details. Payment card information is processed directly by Stripe, our payment processor. We do not store full payment card numbers on our systems.
- Device and technical data. IP address, browser type, operating system, device identifiers, and referring URLs.
- Usage data. Pages visited, features used, time spent, and interactions with our Services.
- Approximate location. General geographic location derived from your IP address (city or region level), used for security and fraud prevention.
- Cookies and similar technologies. See Section 7 below for details.
- Business intelligence and prospecting tools (such as sales intelligence platforms) that provide publicly available business contact information.
- Payment processors. Stripe provides us with transaction status and billing information, but not full payment card details.
- Referrals. When a current client or partner refers you to us.
3. How we use information
- Operate, maintain, and improve our website and Services.
- Respond to inquiries, schedule demos, and provide customer support.
- Provision accounts, deliver our platform, and fulfill our obligations under client agreements.
- Process payments and manage billing.
- Send service-related communications (account updates, security alerts, policy changes).
- Send marketing communications about new features and offerings, with your consent where required.
- Analyze usage patterns to improve our Services and develop new features.
- Detect, investigate, and prevent fraud, abuse, and security incidents.
- Comply with legal obligations, including tax and accounting requirements.
- Establish, exercise, or defend legal claims.
4. How we share information
We share information with the following categories of recipients:
- Cloud hosting and infrastructure. Providers who host our platform and store data.
- Payment processing. Stripe processes payments.
- Customer support and CRM tools used to manage client relationships and communications.
These service providers are contractually limited to using information only to provide services to us.
5. California privacy disclosures
This section provides additional disclosures for California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”). Similar rights may apply to residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws.
- Identifiers (such as name, email address, and IP address).
- Commercial information (such as transaction and purchase history).
- Internet or other electronic network activity (such as browsing and usage data).
- Geolocation data (approximate location derived from IP address).
- Professional or employment-related information (such as job title and company name).
- Inferences drawn from the above information.
Under CCPA, “selling” and “sharing” include disclosing personal information for cross-context behavioral advertising, even without monetary exchange. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. Our website does not use advertising cookies, cross-site pixels, or third-party analytics.
- Know what personal information we collect, use, and disclose about you.
- Access a copy of your personal information.
- Delete your personal information, subject to certain exceptions.
- Correct inaccurate personal information.
- Opt out of the sale or sharing of your personal information.
- Limit our use of sensitive personal information (we do not currently use sensitive personal information beyond permitted purposes).
- Non-discrimination for exercising your rights.
- Opt-out of sale/sharing and targeted advertising. Not applicable. We do not sell personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of.
- All rights requests. Email us at privacy@withmana.ai.
- Authorized agents. You may designate an authorized agent to submit requests on your behalf. We may require verification of the agent’s authority.
We will respond to verifiable requests within the timeframes required by applicable law (typically 45 days, with possible extension).
6. Your choices
- Marketing emails. You can unsubscribe from marketing emails using the link at the bottom of any marketing message. You will continue to receive transactional and service-related communications.
- Cookies. Our website does not use advertising or third-party analytics cookies. You can manage or block cookies through your browser settings at any time.
- Account information. Authorized users can update account information through the platform or by contacting us.
7. Cookies and tracking technologies
- Strictly necessary. Required for the website and platform to function (login, security, load balancing).
- Functional. Remember your preferences and settings.
If we add analytics or non-essential cookies in the future, we will update this policy, update the Cookie Policy, and add consent or opt-out controls where required. You can manage or block cookies at any time through your browser settings or privacy-focused browser extensions.
We do not respond to Do Not Track (DNT) browser signals, as there is no widely accepted standard for interpreting them.
8. Data security
- Encryption. We use SSL/TLS encryption for data in transit and encryption for data at rest.
- Access controls. Internal access to data is limited to personnel who require it to perform their roles.
- Authentication. We support and encourage Multi-Factor Authentication (MFA) for platform accounts.
- Vendor management. We evaluate the security practices of our service providers.
9. Data retention
- Account data. Retained while you have an active account and for a reasonable period after account termination to fulfill ongoing obligations.
- Financial and transaction records. Retained for up to seven years to comply with tax and accounting requirements.
- Marketing contact information. Retained until you unsubscribe or request deletion.
- Technical logs. Routinely purged on a rolling basis.
- Communications. Retained as needed to resolve disputes and improve our Services.
Specific retention periods depend on the nature of the information and applicable legal requirements.
10. Children's privacy
11. Third-party links
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email (to the address associated with your account) or by posting a prominent notice on our website before the changes take effect. The “Last updated” date at the top of this policy indicates when it was most recently revised. We encourage you to review this policy periodically.
13. Contact us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Mana Agents LLC (dba mana)
We aim to respond to all privacy-related inquiries promptly.