Privacy Policy

1. Who we are

Mancebo AI, Inc. ("Mancebo", "we", "us") provides an AI workforce platform that lets businesses hire AI employees to run on hardware they own or on Mancebo's shared infrastructure. This Privacy Policy explains how we handle personal data across:

• our website, mancebo.ai;
• our hosted application and dashboard;
• our APIs, SDKs, integrations, and connected services.

Mancebo is the data controller for the personal data described here. Our use of the services is also governed by our Terms & Conditions.

2. Data we collect

• Account data: name, email address, password credentials handled by our authentication provider, and account settings.
• Business and workspace data: company name, workspace settings, employee configurations, knowledge bases, connected computers, and integration settings you choose to add.
• Usage data: which AI employees you hire, tasks they perform, messages and approvals, audit events, and feature usage.
• Content you upload: documents, knowledge-base articles, files, and other materials you add to the service.
• Requests and messages: support emails, sales enquiries, and messages exchanged through our support channels.
• Purchase data: subscription and order records, plan status, and partial card details supplied by our payment processor. We never receive or store full card numbers.
• Device and technical data: device type, browser, operating system, app version, IP address, crash logs, and cookie or analytics identifiers (analytics only with your consent).

3. How we use your data

• To create and operate your account and deliver the Mancebo services.
• To run your AI employees, process their tasks, and surface results for review.
• To process payments, subscriptions, and refunds.
• To provide support, investigate issues, prevent fraud and abuse, and keep the service secure.
• To send service emails, and marketing emails only where permitted or with consent.
• To measure and improve our products using aggregated or de-identified analytics.
• To comply with legal, tax, and accounting obligations.

Where required by law, our legal bases are: performance of our contract with you, your consent (for analytics and marketing), our legitimate interests in operating and securing the service, and compliance with legal obligations.

4. Business and AI data

The business information, documents, and instructions you add to Mancebo are treated as confidential workspace data. We use them only to deliver the features you are using. We do not sell them, we do not use them for advertising or ad targeting, and we do not share them with data brokers. Any research or product analytics use is limited to aggregated or de-identified data that cannot reasonably be linked back to you or your business.

5. Who we share data with

We share personal data only with service providers who process it on our behalf under contract, and only as needed to run the service:

• Supabase — application hosting, database, authentication, file storage.
• Stripe — payment processing and subscription billing.
• Resend — transactional and notification email delivery.
• Google Analytics / Google Tag Manager — website analytics, loaded only with consent.
• OpenAI, Anthropic, and other AI providers — powering AI features you trigger. Inputs are not used by us to train public models.
• Cloudflare and our deployment platform — content delivery and security.

We also share data where you direct us to (for example, sharing contact details with a teammate you invite), where required by law or valid legal process, to protect rights and safety, or in connection with a merger or acquisition — in which case this policy continues to apply to the transferred data.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

6. Data retention

Mancebo stores and retains user data. We retain your personal data for as long as your account remains active, and then for the additional periods listed below. We keep personal data only as long as we need it for the purposes described above, and when that period ends we permanently delete it or irreversibly anonymize it so it can no longer be linked to you.

• Account and profile data: kept while your account is active.
• Data after a deletion request: erased from our live systems within 30 days of a verified request.
• Inactive accounts: if you do not use the service for 36 consecutive months, we delete or anonymize your account data.
• Encrypted backups: purged on a rolling basis within 90 days.
• Payment, invoice, and tax records: retained up to 7 years where required by tax and accounting law.
• Analytics data: retained up to 14 months, in aggregated form.
• Support and email correspondence: retained up to 24 months.
• Security and fraud-prevention logs: retained up to 12 months.

Where a longer period is required by law, or needed to resolve a dispute or enforce our agreements, we retain the minimum data necessary for that purpose only.

7. How to delete your data

You have the right to request deletion of your Mancebo account and all personal data associated with it at any time. There is no charge, you do not have to give a reason, and you do not have to keep a paid subscription to make the request. Our data deletion request page is published at mancebo.ai/delete-my-data.

This is the process, step by step:

1. Email hello@mancebo.ai with the subject line "Data Deletion Request".
2. Send it from the email address on your account, and tell us which Mancebo service you use. This lets us verify you own the account.
3. We confirm receipt and verify your identity within 5 business days. We may ask one follow-up question if we cannot match the request to an account.
4. We complete deletion within 30 days of verification and email you when it is done.

Deleting only some of your data: you do not have to close your account to have data removed. If you want us to delete specific information — for example a knowledge base, uploaded files, or a workspace — say so in the same email and we will delete only what you name and keep your account open.

Account deletion is permanent. Your saved knowledge, employee configurations, and workspace data cannot be restored afterwards, and you would need to start a new account to use Mancebo again. Deleting your account does not automatically cancel a subscription purchased through a third-party app store — cancel that in your store account settings so you are not billed again.

8. Your privacy rights

Depending on where you live (including under the GDPR and the CCPA/CPRA), you have the right to:

• access a copy of the personal data we hold about you;
• correct inaccurate or incomplete data;
• delete your data (see section 7);
• receive your data in a portable, machine-readable format;
• object to or restrict certain processing;
• withdraw consent at any time, including for analytics and marketing;
• opt out of the sale or sharing of personal information — we do not do either;
• not be discriminated against for exercising these rights.

To exercise any right, email hello@mancebo.ai. We respond within 30 days. You may also use an authorized agent, and EU/UK residents may lodge a complaint with their local data protection authority.

9. Security

We protect your data with encryption in transit (TLS) and at rest, row-level access controls in our database, least-privilege access for staff, audit logging, and regular security reviews. No system is perfectly secure, so we also maintain an incident response process and will notify you and the relevant regulators where a breach legally requires it.

10. International transfers

We are based in the United States and our service providers may process data in the United States and the European Union. Where we transfer personal data out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses and equivalent safeguards with our processors.

11. Children

Our services are not intended for children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, email hello@mancebo.ai and we will delete it.

12. Changes to this policy

We may update this policy. When we make a material change, we update the effective date above and notify you by email or an in-app notice before the change takes effect.

13. Contact us

Mancebo AI, Inc. — privacy enquiries: hello@mancebo.ai. We aim to reply within 5 business days.