SFSwayframeby Manthorne LabsHome

Legal

Privacy Policy

This policy explains how Manthorne Labs handles information when you visit our website or use Swayframe.

Effective July 24, 2026

1. Scope

This Privacy Policy applies to Swayframe, manthornelabs.com, app.manthornelabs.com, and related services operated by Manthorne Labs (“we,” “us,” or “our”). It does not govern third-party websites or services that have their own privacy policies.

2. Information we collect

Information you provide

  • Account information: name, email address, login and verification information.
  • Brand and strategy information: colors, fonts, logos, business details, audience, goals, voice, positioning, and other profile information you choose to save.
  • Content: infographic text, instructions, chart purpose, selected spreadsheet rows, generated visuals, chart titles, and source filenames.
  • Subscription information: plan, billing status, Stripe customer and subscription identifiers, and transaction-related records. Stripe processes payment-card details; we do not store full card numbers.
  • Communications: messages and information you send when requesting support or exercising a privacy right.

Information collected automatically

We and our infrastructure providers may collect IP address, device and browser information, timestamps, referring pages, request and error logs, security events, authentication activity, feature usage, and generation counts. We use this information to operate, secure, troubleshoot, and improve the service.

3. Spreadsheet and AI processing

CSV and Excel files are read in your browser. We do not intentionally store the original spreadsheet file. To create a chart plan, Swayframe sends the relevant column information, selected sample rows, and your instructions to OpenAI. Infographic prompts, saved strategy context, and brand directions may also be sent to OpenAI to create requested content.

OpenAI processes this information under its API and business terms. OpenAI states that API data is not used to train its models by default. Avoid submitting personal information, trade secrets, regulated data, or confidential third-party data unless you have authority and have determined that AI processing is appropriate.

4. How we use information

We use information to:

  • create and manage accounts, authenticate users, and provide customer support;
  • generate, brand, save, display, and download infographics and charts;
  • process subscriptions, prevent fraud, and maintain billing records;
  • apply your saved brand and strategy context across requests;
  • monitor reasonable use, protect the service, investigate abuse, and enforce our terms;
  • diagnose errors, measure service performance, and improve features;
  • send transactional messages, including verification, password reset, billing, security, and service notices;
  • comply with law and protect our rights and the rights of others.

5. How we disclose information

We disclose information only as reasonably needed for the purposes described above:

  • Cloudflare: website and application hosting, network security, logs, and R2 object storage for logos and generated visuals.
  • Neon: authentication and database services for accounts, brand profiles, strategy profiles, library metadata, usage, and billing status.
  • OpenAI: AI generation and chart-planning requests.
  • Stripe: checkout, subscription billing, payment management, fraud prevention, and related analytics. Stripe may collect transaction, device, and identifying information under its privacy policy.
  • Resend: delivery of authentication and service email.
  • Professional advisers and authorities: when reasonably necessary for legal, accounting, security, compliance, or the protection of rights and safety.
  • Business transfers: in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate safeguards.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about you.

6. Cookies and local storage

We use cookies and similar browser storage that are necessary for authentication, security, account sessions, preferences, and application workflow. For example, Swayframe may temporarily keep an in-progress content draft in your browser. Stripe may use cookies and similar technologies during checkout and billing management for authentication, fraud prevention, and service analytics. We do not currently use advertising cookies on our website or application.

7. Retention

We retain account, profile, library, and generated-content information while your account is active and as reasonably needed to provide the service. We retain transaction and billing records as required for accounting, tax, fraud prevention, and legal compliance. Security, request, and usage logs are retained for a limited period appropriate to their purpose. When information is no longer needed, we delete or deidentify it, subject to legal obligations, dispute preservation, backups, and technical limitations.

You may request account deletion. Some information may remain in backups for a limited period or be retained when required by law, to complete transactions, prevent fraud, resolve disputes, or enforce agreements.

8. Security

We use administrative, technical, and organizational safeguards designed to protect information, including authenticated access, ownership controls, encrypted network connections, restricted production credentials, input validation, and service monitoring. No system is completely secure, and we cannot guarantee absolute security.

9. Your choices and rights

You may update brand and strategy information through account settings, manage or cancel a subscription through the billing portal, and request access, correction, export, or deletion of personal information by contacting us. Depending on where you live, you may also have rights to know what we collect and disclose, object to or restrict certain processing, withdraw consent, receive portable data, or appeal a privacy decision.

We may verify your identity before completing a request. Authorized agents may submit requests where permitted by law. We will not discriminate against you for exercising a privacy right.

10. California notice

During the preceding 12 months, we may have collected the following categories of personal information: identifiers; customer-record information; commercial information; internet or electronic-network activity; approximate geolocation derived from IP address; professional or employment-related information you include in a strategy profile; visual information such as logos and generated images; and inferences reflected in user-provided strategy preferences.

We collect these categories from you, your device and browser, service providers, and activity within Swayframe. We use and disclose them for the business purposes described in Sections 4 and 5. The recipient categories are cloud infrastructure, database and authentication, AI, payment, email, security, professional-adviser, and government or legal-process recipients.

We have not sold personal information or shared it for cross-context behavioral advertising during the preceding 12 months. We do not knowingly sell or share the personal information of consumers under 16. California residents may request access, correction, deletion, or portability by emailing us at the address below.

11. International use

We and our service providers may process information in the United States and other countries. Those countries may have data-protection laws different from the laws where you live. Where required, we use recognized transfer mechanisms and contractual protections.

12. Children

Swayframe is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided information, contact us so we can investigate and delete it where appropriate.

13. Changes

We may update this policy as our services or legal obligations change. We will post the revised policy with a new effective date and provide additional notice when a change is material.

14. Contact

To ask a privacy question or request access, correction, export, or deletion, email support@manthornelabs.com. Please include “Privacy Request” in the subject line.