Privacy Policy

Manifold Software, Inc. · Effective: July 20, 2026

Manifold (“Manifold,” “we,” “us”) builds software for breakbulk terminal operators. This policy explains what data we collect, how we use it, and the choices you have. We’ve tried to write it in plain language. If anything is unclear, email us at privacy@yourmanifold.com.

The short version

• We collect the account and usage data we need to run the product, and we process the operational data you put into it — cost data, tally sheets, BOLs, damage reports — on your behalf.
• Your operational data belongs to you. We don’t sell it, we don’t use it for advertising, and we don’t use it to train AI models.
• We use a small number of third-party services to run Manifold. They’re listed below.

Two kinds of data

Manifold handles data in two distinct roles, and your rights differ between them:

1. Data we collect directly (we are the “controller”). This is information about you and your use of Manifold: your name, work email, company, and role when an account is created for you; billing contact information used for invoicing; technical data like IP address, browser type, and pages visited; and the content of emails, feedback, or support messages you send us.

2. Customer Data we process on your behalf (we are the “processor”). This is the operational data your terminal puts into Manifold: cost inputs (labor rates, equipment costs, opex and capex figures), job and quote records, and documents you upload to the digitizer — tally sheets, bills of lading, damage reports, and similar dock paperwork. These documents may contain personal information such as the names, signatures, or hours of dock personnel. We process this data only on your instructions and only to provide the service. Your terminal controls it; requests about it should go to your terminal, and we’ll assist them in responding.

How we use data

We use the data described above to provide and maintain the service, authenticate your account, handle billing, respond to support requests, understand aggregate product usage so we can improve Manifold, and meet legal obligations.

We do not sell personal data, share it for cross-context behavioral advertising, or use Customer Data for any purpose other than providing the service to you.

AI processing

Some Manifold features use third-party AI models: the document digitizer uses them to read handwritten paperwork, the in-app assistant uses them to answer questions about your cost models, and the business development agent uses them to identify cargo opportunities relevant to your terminal.

• We do not use your Customer Data to train AI models.
• We access our AI providers (currently Anthropic and OpenAI) under their commercial API terms, which state that data submitted through their APIs is not used to train their models. We only use providers whose terms include this commitment.
• Digitizer output is presented for human review before it becomes part of your records — the software reads the paperwork; your people confirm it.
• The business development agent works from publicly available sources — press releases, government postings, utility and project announcements. It does not collect private information about individuals.

Who we share data with

We share data only with service providers that help us run Manifold, each bound by contract to use it solely to provide their service to us:

• Supabase — Database, authentication, and file storage
• Vercel — Application hosting and privacy-friendly, cookieless analytics
• Anthropic — AI processing (document digitization, in-app AI assistance)
• OpenAI — AI processing (automated market signal scans)
• Resend — Transactional and service email delivery
• Sentry — Error monitoring and application reliability
• Stripe — Payment processing for card payments
• Neon — Database for our self-hosted analytics instance

We’ll update this list when it changes; material changes to how Customer Data is processed will be communicated to customers directly. Beyond these providers, we disclose data only if required by law (we’ll notify you unless legally barred), in connection with a merger or acquisition (under equivalent protections), or with your explicit consent.

Retention and deletion

We keep account data for as long as your account is active and for up to 90 days after closure, except records we must keep for tax and accounting purposes. Customer Data is retained while your subscription is active; on termination, we make it available for export and delete it from production systems within 30 days, with residual copies in encrypted backups expiring on a rolling cycle of no more than 35 days. You can request earlier deletion at any time.

Security

Data is encrypted in transit and at rest, and access is restricted per organization at the database layer. Access to Customer Data is limited to personnel who need it to operate or support the service. We’re an early-stage company and say so plainly: we follow current security best practices but do not yet hold formal certifications like SOC 2. If a breach affects your data, we’ll notify you without undue delay and no later than 72 hours after we confirm it.

Your rights

Depending on your state, you may have the right to know what personal data we hold about you, correct it, delete it, obtain a copy, or opt out of sales and targeted advertising (we do neither). To exercise any of these, email privacy@yourmanifold.com — we respond within 45 days and don’t discriminate against anyone for exercising their rights. If you’re in California, these rights extend to business contact data. If we deny a request, you may appeal by replying to our response.

Cookies

We use only the essential cookies required to keep you signed in. Our site analytics (Vercel Web Analytics and a self-hosted Umami instance) are cookieless. We do not use advertising or tracking cookies — which is why you won’t see a cookie banner here. We honor Global Privacy Control signals; since we don’t sell or share personal data, there is nothing further for them to switch off.

Other things

Manifold is a business tool, not directed to anyone under 18, and we don’t knowingly collect data from minors. Our services and data are hosted in the United States. If we change this policy materially, we’ll notify account holders by email before the change takes effect.

Contact: Manifold Software, Inc., 2810 N Church St STE 88843, Wilmington, DE 19802 · privacy@yourmanifold.com