ManthorneHome

Legal

Privacy Policy

This policy explains how Manthorne Labs handles information when you visit our website or use Manthorne.

Effective July 30, 2026

1. Scope

This Privacy Policy applies to Manthorne, manthornelabs.com, app.manthornelabs.com, and related services operated by Manthorne Labs (“we,” “us,” or “our”). It does not govern third-party websites or services that have their own privacy policies.

2. Information we collect

Information you provide

  • Account information: name, email address, login, and verification information.
  • Workspace information: firm details, objectives, expertise, positioning, brand settings, preferences, and other context you choose to save.
  • Relationship knowledge: corrections, private notes, relevance decisions, sensitivity labels, and other context you explicitly validate or provide.
  • Growth work: drafts, approvals, commitments, outcomes, content, opportunity notes, and related operator activity.
  • Billing information: plan, billing status, Stripe identifiers, and transaction-related records. Stripe processes payment details; we do not store full bank-account or card numbers.
  • Communications: messages and information you send when requesting support or exercising a privacy right.

Information collected through connected services

If you explicitly connect Gmail, we process authorized account and message data needed to reconstruct professional relationship history. This may include message metadata, participants, timestamps, thread context, and limited message content used to identify relationship evidence. We also collect security events, authentication activity, feature usage, request logs, and device information needed to operate and protect the service.

3. Relationship and AI processing

Manthorne separates observed evidence, system-generated inferences, and knowledge you or an authorized operator validates. System inferences may be incomplete or incorrect. You control whether a relationship is relevant, sensitive, inappropriate to contact, or suitable for follow-up.

We may send limited relationship evidence, saved workspace profile context, drafts, and your instructions to OpenAI to classify information and prepare requested work. OpenAI processes this information under its API and business terms and states that API data is not used to train its models by default. Manthorne does not automatically send email or publish content on your behalf.

4. How we use information

We use information to:

  • create accounts, isolate client workspaces, authenticate users, and provide support;
  • reconstruct relationship memory and surface objective-relevant people and introduction paths;
  • prepare content, outreach, follow-up, meeting context, and other growth work for review;
  • record approvals, commitments, opportunities, outcomes, and operating history;
  • process subscriptions and payments, prevent fraud, and maintain billing records;
  • maintain audit trails, protect private relationship knowledge, and enforce workspace permissions;
  • diagnose errors, measure service performance, and improve the service;
  • send verification, password reset, billing, security, and service notices;
  • comply with law and protect our rights and the rights of others.

5. How we disclose information

We disclose information only as reasonably needed for the purposes described above:

  • Cloudflare: website and application hosting, network security, logs, and object storage.
  • Neon: authentication and database services for accounts, workspace information, relationship memory, activity history, usage, and billing status.
  • Google: Gmail connection and authorized email data access initiated by you.
  • OpenAI: relationship analysis and AI-assisted preparation requests.
  • Stripe: subscription billing, payment management, fraud prevention, and related analytics. Stripe may collect transaction, device, and identifying information under its privacy policy.
  • Resend: delivery of authentication and service email.
  • Authorized growth operators: only when explicitly assigned to your workspace and only for providing the service.
  • Professional advisers and authorities: when reasonably necessary for legal, accounting, security, compliance, or the protection of rights and safety.
  • Business transfers: in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate safeguards.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about you.

6. Cookies and local storage

We use cookies and similar browser storage that are necessary for authentication, security, account sessions, preferences, and application workflow. Stripe may use cookies and similar technologies during checkout and billing management for authentication, fraud prevention, and service analytics. We do not currently use advertising cookies on our website or application.

7. Retention

We retain account, workspace, relationship, growth-work, and outcome information while your account is active and as reasonably needed to provide the service. We retain transaction and billing records as required for accounting, tax, fraud prevention, and legal compliance. Security, audit, request, and usage logs are retained for a period appropriate to their purpose. When information is no longer needed, we delete or deidentify it, subject to legal obligations, dispute preservation, backups, and technical limitations.

You may disconnect Gmail, revoke operator access, or request account deletion. Some information may remain in backups for a limited period or be retained when required by law, to complete transactions, prevent fraud, resolve disputes, or enforce agreements.

8. Security

We use administrative, technical, and organizational safeguards designed to protect information, including authenticated access, ownership controls, encrypted network connections, restricted production credentials, input validation, and service monitoring. No system is completely secure, and we cannot guarantee absolute security.

9. Your choices and rights

You may correct relationship context, manage saved workspace information, disconnect Gmail, revoke operator access, manage billing, and request access, correction, export, or deletion of personal information. Depending on where you live, you may also have rights to know what we collect and disclose, object to or restrict certain processing, withdraw consent, receive portable data, or appeal a privacy decision.

We may verify your identity before completing a request. Authorized agents may submit requests where permitted by law. We will not discriminate against you for exercising a privacy right.

10. California notice

During the preceding 12 months, we may have collected the following categories of personal information: identifiers; customer-record information; commercial information; internet or electronic-network activity; approximate geolocation derived from IP address; professional or employment-related information you include in a workspace profile; visual information such as logos and generated images; and inferences reflected in user-provided profile preferences.

We collect these categories from you, your device and browser, service providers, and activity within Manthorne. We use and disclose them for the business purposes described in Sections 4 and 5. The recipient categories are cloud infrastructure, database and authentication, AI, payment, email, security, professional-adviser, and government or legal-process recipients.

We have not sold personal information or shared it for cross-context behavioral advertising during the preceding 12 months. We do not knowingly sell or share the personal information of consumers under 16. California residents may request access, correction, deletion, or portability by emailing us at the address below.

11. International use

We and our service providers may process information in the United States and other countries. Those countries may have data-protection laws different from the laws where you live. Where required, we use recognized transfer mechanisms and contractual protections.

12. Children

Manthorne is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided information, contact us so we can investigate and delete it where appropriate.

13. Changes

We may update this policy as our services or legal obligations change. We will post the revised policy with a new effective date and provide additional notice when a change is material.

14. Contact

To ask a privacy question or request access, correction, export, or deletion, email support@manthornelabs.com. Please include “Privacy Request” in the subject line.