Legal

Privacy Policy

Last updated: April 2026

This Privacy Policy explains how Manifest ("we", "our", "the Service") collects, uses, stores, and protects information about you when you use our platform. We believe in plain-language privacy policies — this document is written to be read, not just filed.

1. What Data We Collect

We collect only the information necessary to provide and improve the Service.

Account & Profile Information

When you create an account, we collect your email address and password. During onboarding, we collect your name, brokerage name, market area, and other preferences you configure. This information is used to personalize your hub.

Transaction Data

Transaction records you enter into the log — property addresses, sale prices, client names, closing dates, and notes — are stored securely in your account. This is your operational data; you own it.

Contact Directory Data

Vendor and contact information you enter — names, phone numbers, emails, company names — is stored in your account to support the email generation and workflow features.

Usage Data

We collect basic usage information such as pages visited, features used, and session duration. This helps us understand how to improve the Service. We do not track your behavior across other websites.

Payment Information

Payment processing is handled entirely by Stripe. We do not collect or store your credit card number, CVV, or full billing details. We receive only a token and basic billing status from Stripe.

2. How We Use Your Data

We use your data to:

  • Provide, maintain, and improve the Manifest platform
  • Personalize your hub with your name, brokerage, and preferences
  • Generate AI email drafts using your contact and transaction context
  • Process your subscription payments via Stripe
  • Send transactional emails (account confirmation, password reset, billing receipts)
  • Respond to your support requests
  • Analyze aggregate usage patterns to improve the product

We do not sell your data. We do not share your data with advertisers. We do not use your data to build profiles for third-party marketing.

3. Third-Party Service Providers

We use a small number of trusted third-party providers to operate the Service. Each has its own privacy practices.

SupabaseDatabase & Authentication

Your account data, transaction records, and contact directory are stored in Supabase, a secure cloud database. Supabase enforces row-level security, meaning your data is isolated from other users at the database level.

StripePayment Processing

Stripe processes all subscription payments. Your payment card information is collected and stored by Stripe, not by Manifest. Stripe is PCI DSS compliant.

AnthropicAI Email Generation

When you generate an email using the AI Email Studio, relevant context (your name, brokerage, client names, selected contact details) is sent to Anthropic's Claude API. Anthropic uses this data to generate the email and does not store it to train future models under their standard API terms.

4. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your data remains accessible for the duration of your final billing period. After account closure, we retain your data for 90 days in case you wish to re-subscribe or request an export.

After the 90-day retention period, your data is permanently deleted from our systems. Backups may retain your data for an additional 30 days before being purged.

5. Your Rights

You have the following rights with respect to your personal data:

AccessYou can request a copy of the personal data we hold about you.
CorrectionYou can update your profile information directly in the app settings at any time.
DeletionYou can request deletion of your account and all associated data. We will process deletion requests within 30 days.
ExportYou can request an export of your transaction log and contact directory data in a standard format.
Opt-outYou can opt out of non-transactional emails (such as product updates) at any time via the unsubscribe link in those emails.

6. Security

We use industry-standard security practices including HTTPS encryption for all data in transit, secure password hashing, and row-level database security. However, no system is 100% secure. If you believe your account has been compromised, contact us immediately at ben@harwoodrealestate.com.

7. Children's Privacy

Manifest is intended for professional use by adults. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has created an account, please contact us and we will promptly delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify active subscribers via email and update the "last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

9. Contact

For any privacy-related questions, requests, or concerns, contact us at: ben@harwoodrealestate.com