Privacy Policy

Overview

Manifest ("we," "us," or "our") is a personal asset management platform. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service. We are committed to safeguarding your privacy and being transparent about our data practices.

Information We Collect

Account information: When you create an account, we collect your email address and display name. If you sign in with Google or Apple, we receive your name and email from those providers.

Asset data: Information you provide about your belongings, including photos, receipts, serial numbers, purchase dates, prices, warranty details, and any documents you upload.

Email forwarding: If you use our receipt forwarding feature, we process incoming emails sent to your unique Manifest address to extract product and purchase information. We store the extracted data and any attached images. We do not read or store the full email body beyond what is needed for extraction.

Usage data: We use third-party analytics tools — currently Google Analytics and PostHog — to understand how Manifest is used, improve the product, monitor performance, and troubleshoot issues. These tools record information such as the pages you visit, the features you use, and basic device and browser details. We do not use them for advertising and we never share your asset data with them.

Benchmark demographics (optional): If you opt in on the Insights page, we collect age band, home tenure and type, number of kids, pets, and income band. This information is stored separately from your asset data and is always collected as ranges or categories — never as exact values.

How We Use Your Information

We use your information solely to provide, maintain, and improve the Manifest service. Specifically:

• To store and organize your asset catalog
• To extract product details from photos, receipts, and emails using AI
• To check your products against recall databases
• To generate insurance reports and export documents
• To calculate estimated resale values
• To send you alerts about expiring warranties and return windows
• To process your subscription and payments (via Stripe)
• To show you household benchmarks and, only if you opt in, to contribute your data — anonymized and aggregated — to a comparison pool

AI Processing

We use AI models to extract information from your photos, receipts, and documents. Image and text data is sent to our AI processing providers solely for the purpose of extraction. We do not use your data to train AI models. AI-processed data may contain inaccuracies — you should always verify extracted information.

Data Storage & Security

Your data is stored on secure, encrypted infrastructure. All data is encrypted in transit using TLS. Files and documents are stored in private, access-controlled storage buckets. We implement row-level security to ensure you can only access your own data. We regularly review our security practices.

Data Sharing

We do not sell, rent, or trade your personal information. We share data only with:

• Stripe: For payment processing (email and subscription status only)
• AI providers: For data extraction from your uploads (processed data only, not stored by them)
• CPSC databases: Product identifiers only, to check for recalls (no personal information is shared)
• Analytics providers (Google Analytics, PostHog): Usage and basic device information to help us understand and improve the product (no asset data is shared)
• Connector infrastructure (Cloudflare, Resend): If you connect an app, Cloudflare hosts the connector and stores the encrypted connection, and Resend sends the email telling you a new app was connected (your email address and the app's name)
• Apps you connect: If you connect an AI assistant such as Claude to Manifest, it can read the inventory details described under "Connected Apps" below, only for your account and only until you disconnect it
• Aggregated benchmarks: If you opt in, your banded demographics and inventory counts (never individual items) are combined with other users' data and shown only in aggregate, with a minimum group size to ensure no individual is identifiable. We never sell your data and never share individual items.

We will never sell your data or use it for advertising.

Connected Apps

You can choose to connect an AI assistant, such as Claude, to your Manifest account through our connector at mcp.manifestme.me. Nothing is shared until you approve the connection on two Manifest consent screens, and we email you each time a new app is connected.

• What a connected app can read: the items you've saved (name, category, subcategory, brand, model, UPC or ISBN, quantity, condition, values, purchase date and price, warranty date, return status, location, when the item was added or changed, and how many photos and documents are attached), pet details (type, breed, color, birthday, and adoption date), the last 4 characters of serial numbers, your rooms and tags, and gift card retailers, original amounts, balances, and expiry dates
• What it can't read: photos, receipts, and documents; the text of your notes (a search can match words in your notes, but the note itself is never sent); full serial numbers; pet microchip and license numbers; gift card numbers and PINs; unreviewed drafts; and your email, billing, or account settings
• Read-only: a connected app can't add, change, or delete anything, use AI actions, or make purchases
• What we keep: the connection itself (an encrypted access grant) until you disconnect it; after you disconnect, the leftover encrypted record expires within 30 days; and short operational logs of which lookup was used and whether it failed. We don't store the answers sent to the app
• The app's own handling: once information reaches the connected app, that provider's privacy policy applies to it

You can disconnect connected apps at any time under Settings → Connected apps; this disconnects all of them at once. Access ends within an hour. Deleting your account ends every connection.

Your Rights

You have the right to:

• Access all data associated with your account
• Export your data at any time via the insurance export or individual asset downloads
• Delete your account and all associated data permanently from the Settings page
• Correct any inaccurate information by editing your assets
• Disconnect connected apps at any time from Settings → Connected apps
• Opt out of benchmarking at any time — you can stop sharing or delete your benchmark data outright from the Insights page; deleting your account removes it automatically

Cookies & Local Storage

We use essential cookies and local storage for authentication and remembering your preferences (such as dismissed onboarding cards), along with analytics cookies and local storage from the tools described above to understand how the app is used. We do not use advertising cookies.

Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data — including assets, documents, files, and profile information — is permanently deleted. We do not retain backups of deleted accounts.

Children's Privacy

Manifest is not intended for use by children under 13. We do not knowingly collect information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice within the app. Your continued use of Manifest after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy or your data, contact us at privacy@manifestme.me.