Privacy Policy

Effective: 21 March 2026

This Privacy Policy describes how Dawson Design Ltd. ("Company", "we", "us") collects, uses, and protects your personal information when you use Manifest ("Service"). This policy applies to manifestdocs.ai and all related services.

1. Information We Collect

Account Information (via Clerk)

When you create an account, we collect your email address, name, and organization name through our authentication provider, Clerk. Clerk also handles payment processing for paid plans.

Payment Information (via Clerk)

Payment processing is handled by Clerk. We receive billing details necessary to manage your subscription, but we never have access to your full payment card numbers.

Project Data

Content you create within the Service: feature titles, descriptions, specifications, verification proof output, session history, and project configuration.

Usage Data

We collect aggregate usage data including pages visited, features used, and timestamps. This data is used in aggregate form only and is not linked to individual user profiles.

Technical Data

IP address, browser type, device information, and network-level data collected by Cloudflare as our infrastructure provider.

2. How We Use Information

  • Delivering and operating the Service
  • Processing payments and managing subscriptions
  • Providing customer support
  • Protecting the security and integrity of the Service
  • Improving the Service based on aggregate usage patterns
  • Complying with legal obligations

We never use your project data for AI model training or any machine learning purpose.

3. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

  • Contract performance — to provide the Service you signed up for
  • Legitimate interests — to improve the Service, ensure security, and prevent fraud
  • Consent — where you have explicitly opted in (e.g., marketing communications)
  • Legal obligation — to comply with applicable laws

4. Data Sharing

We share personal data only with the following parties:

  • Clerk — authentication, identity management, and payment processing
  • Cloudflare — infrastructure, hosting, and content delivery
  • Law enforcement — only when legally required to comply with valid legal process
  • Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to affected users

We do not sell your personal data. Ever.

5. Data Storage & Security

Your data is stored on Cloudflare's infrastructure: D1 (database), R2 (assets), and KV (cache). All data is encrypted in transit via TLS and at rest. Note that Cloudflare, as our infrastructure provider, may collect network-level analytics data independently.

6. Data Retention

  • Active accounts — your data is retained for as long as your account exists
  • Deleted accounts — data is removed within 30 days of account deletion
  • Backups — purged within 90 days of account deletion

7. Your Rights

GDPR (EU/UK Residents)

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure of your data
  • Request data portability
  • Restrict or object to processing
  • Withdraw consent at any time

CCPA (California Residents)

You have the right to:

  • Know what personal information we collect and how it is used
  • Request deletion of your personal information
  • Opt out of the sale of personal information (we do not sell your data)
  • Non-discrimination for exercising your rights

To exercise any of these rights, email privacy@manifestdocs.ai. We will respond within 30 days.

8. International Transfers

Your data is processed on Cloudflare's global network. Where data is transferred outside the EU/UK, we rely on EU Standard Contractual Clauses or equivalent safeguards to ensure appropriate protection.

9. Cookies

We use session cookies only, provided by Clerk for authentication. We do not use third-party tracking cookies. No analytics cookies are set unless you explicitly opt in.

10. Children

The Service is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe we have collected data from a minor, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' notice via email or through the Service. The "Effective" date at the top indicates the latest revision.

12. Contact

For privacy inquiries or to exercise your data rights:

← Back to home