Privacy policy
This policy describes the intended operation of Manifest AI. It should be reviewed for the laws and hosting regions that apply before public launch.
Data we process
Account details, workspace settings, saved vendor field mappings, usage records, and documents submitted for extraction. The MVP streams source PDFs to the configured document-AI provider and does not intentionally persist the PDF or generated workbook after the request.
Why we process it
We use this data to authenticate users, provide extraction and export functions, enforce page limits, prevent abuse, support customers, and improve reliability.
Service providers
The deployment may use Clerk for authentication, PostgreSQL for product records, Google Vertex AI or OpenAI for document processing, and Resend for contact email. The operator must configure appropriate regions, agreements, and retention settings before production use.
Security
Access controls are tenant-scoped, service-to-service calls can be token protected, uploads are limited and validated, and formula-like spreadsheet cells are neutralized. No internet service can promise absolute security.
Retention and deletion
Account records remain while an account is active or as required for legitimate business and legal needs. Users may request account deletion by email. Production retention periods must be documented before launch.
Your choices
Do not upload a document unless you are authorized to process it. Contact us to request access, correction, export, or deletion where applicable.
Contact
Privacy questions: sohailkhan2k22@gmail.com