Privacy Policy

Welcome to Mantle. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI chat platform. We are committed to protecting your privacy and handling your data responsibly.

By using Mantle, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our services.

Information you provide

• Account information (email address, name)
• Payment information (processed securely through Stripe)
• Content you create (messages, conversations, documents)
• Communications with us (support requests, feedback)

Automatically collected information

• Usage data (features used, interaction patterns)
• Device information (browser type, operating system, IP address)
• Log data (access times, pages viewed)
• Cookies and similar tracking technologies

We use the information we collect to:

• Provide, maintain, and improve our services
• Process AI requests by sending your messages to third-party AI providers
• Enable search and collaboration features
• Process payments and send transaction information
• Send service updates and support messages
• Respond to your questions and provide customer support
• Monitor and analyze usage to improve our services
• Detect and prevent fraud and security issues
• Comply with legal obligations

We may share your information in the following situations:

Service providers

We share data with third-party service providers who perform services on our behalf, including cloud hosting, payment processing, AI services, analytics, and customer support.

AI providers

When you use AI features, your message content is sent to the selected AI provider (OpenAI, Anthropic, Google, xAI, DeepSeek, Moonshot AI, Z.AI, or Mistral AI) to generate responses. These providers process your data according to their own privacy policies.

Legal requirements

We may disclose information if required by law or in response to valid legal processes.

Business transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner.

We implement appropriate security measures to protect your information against unauthorized access, alteration, disclosure, or destruction:

• Encryption of data in transit (TLS 1.3) and at rest
• Workspace data encrypted with industry-standard encryption (AES-256-GCM)
• Encryption keys managed through Google Cloud Key Management Service
• Regular security assessments and monitoring
• Access controls and authentication mechanisms
• Employee training on data protection

While we strive to protect your data, no method of transmission over the internet is 100% secure. We continuously work to improve our security measures.

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain business records

Account deletion

When you delete your account, we will delete or redact your personal information within 30 days, except where retention is required by law. Workspace data is deleted immediately, and encryption keys are permanently destroyed within 24 hours.

Workspace deletion

When you delete a workspace, the encryption key is immediately destroyed, making all encrypted data unrecoverable. File attachments are deleted within 24 hours.

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Restriction: Request restriction of processing in certain circumstances
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing for direct marketing purposes
• Withdraw consent: Withdraw consent where we rely on consent for processing

To exercise these rights, please contact us at [email protected]. We will respond within 30 days.

We use cookies and similar technologies to:

• Keep you signed in
• Remember your preferences
• Analyze usage patterns
• Improve performance and security

You can control cookies through your browser settings. Disabling certain cookies may limit functionality.

Our primary infrastructure is located in the European Union (Amsterdam, Netherlands). Your data is stored and processed in EU data centers.

Some service providers (including AI providers) may process data outside the EU. For transfers outside the European Economic Area, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission.

Our services are not intended for children under 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

We do not sell personal information. To exercise your rights, contact [email protected].

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we will provide additional notice via email or through the platform.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Website: mantle.chat