Privacy Policy

1.Scope and who is responsible

This policy applies to the ManyO website and workspace. ManyO (Singapore) is the controller of the personal data described here.

It does not cover third-party services that you reach from our pages, or the separate practices of the providers named in the sharing section below, each of which operates under its own privacy notice.

2.Data we collect

We collect the following categories of data:

• Account data — your email address, password (stored only in hashed form), display name and profile image, and, if you sign in with Google, the basic profile information that Google returns.
• Content data — the images, video and other files you upload, the prompts and settings you submit, and the content generated in response.
• Transaction data — your plan, subscription status, credit balance and history, and order records. Card details are handled by our payment provider and are not received or stored by us.
• Technical data — IP address, device and browser information, a device identifier generated in your browser, and diagnostic and performance data.
• Marketing attribution data — campaign parameters such as utm_source, gclid and similar identifiers, when you arrive through a campaign link.

3.How we process AI content

When you run a generation, your uploads, prompts and settings are sent to the AI model that performs the task, which may be a third-party model operated by another provider. This is necessary to produce the output you asked for.

We do not sell your uploads, prompts or generated content, and we do not provide them to third parties to train their models.

Generated content is stored in your account library so that you can return to it, and remains available to you until you delete it or your account closes.

4.Cookies and local storage

We use a small number of cookies and browser storage entries, all of which support the operation of the service:

• Authentication cookies that keep you signed in and allow your session to be refreshed.
• A session cookie for visitors who are not signed in, used to apply guest usage limits.
• A device cookie and a device identifier in local storage, used for account security and abuse prevention.
• A short-lived cookie used during Google sign-in to protect against cross-site request forgery.
• A session-storage entry holding marketing attribution parameters for the current browsing session.

5.How we use your data

We use personal data to:

• Operate the service — create and secure your account, run generations, and store your library.
• Handle payments, subscriptions, credits and orders, and send related transactional messages.
• Protect the service — apply rate limits and guest quotas, detect and prevent abuse and fraud, and keep audit records of significant actions.
• Understand and improve how the service is used, including aggregate usage and performance measurement.

6.Who we share data with

We share data with the following categories of recipient, only as needed for the purposes above:

• AI model providers that perform the generation you request.
• Airwallex, our payment provider, which processes your payment and holds your card details.
• Google, when you choose to sign in with Google, and Cloudflare, which provides the human-verification check on sign-up and sign-in.
• Hosting, storage, logging and analytics providers that run our infrastructure, including Google Analytics where it is enabled for a deployment.

7.International transfers

We and the providers listed above operate in more than one country, so your data may be transferred to and processed outside the country where you live, including in jurisdictions whose data-protection laws differ from your own. Where we make such a transfer we take steps to ensure an appropriate level of protection, using recognised transfer mechanisms where they apply.

8.How long we keep data

We keep account and content data for as long as your account is open. If you delete a file or a generated asset, we remove it from your library and delete it from our active systems within a reasonable period.

After an account closes we retain data only for a reasonable period, and thereafter only where we must keep it to meet a legal, tax, accounting or fraud-prevention obligation. Technical and audit logs are kept for shorter periods appropriate to their purpose.

9.How we protect data

We use encrypted connections, store authentication tokens in cookies that scripts on the page cannot read, verify that state-changing requests originate from our own interface, apply rate limits, and keep audit records of significant actions. Payment card data never reaches our systems.

No service can guarantee absolute security. Please use a strong, unique password and tell us at support@manyo.ai if you believe your account has been compromised.

10.Your rights

Depending on where you live, you may have the right to:

• Ask what personal data we hold about you and obtain a copy of it.
• Ask us to correct data that is inaccurate or incomplete.
• Ask us to delete your data, or close your account and have the associated data removed.
• Object to or ask us to restrict certain processing, and withdraw consent where processing is based on consent.
• Lodge a complaint with your local data-protection authority.

11.Children's privacy

ManyO is not intended for anyone under 18 and we do not knowingly collect personal data from children. If we learn that we hold data belonging to a child, we will delete it and close the associated account. If you believe a child has provided us with personal data, contact us at support@manyo.ai.

12.Links to other sites

Our pages may link to websites we do not operate. This policy does not apply to those sites, and we are not responsible for how they handle your data. Please read their own privacy notices before providing information to them.

13.Changes to this policy

We may update this policy. When we do, we will change the "last updated" date at the top of this page, and for material changes we will give notice in the product or by email before they take effect.

14.How to contact us

For privacy questions or to exercise any of the rights above, write to support@manyo.ai with the subject prefix [Privacy]. Please send the request from the email address registered to your account so that we can verify it.