Privacy
Privacy
Last updated: May 4, 2026.
This page explains what data Manta Labs collects, how we use it, and the rights you have over it. Engagements with our clients are governed by individually-signed agreements that may carry stricter terms; if anything in this policy conflicts with those, the agreement wins.
This is a working version. A counsel-reviewed policy will replace it before we sign with a customer who needs one. If you have a specific question, email hello@manta-labs.ai and we'll answer directly.
What we collect
Information you give us. When you fill out the contact form, sign in to a client workspace, or email us, we collect what you send: name, work email, company, and whatever you choose to share about your operation. When you become a client, we may collect additional information necessary to deliver the engagement — typically business operations data scoped in the engagement's statement of work.
Information collected automatically. When you visit manta-labs.ai, our infrastructure logs basic request information (IP address, user agent, page requested, timestamp) for debugging and security. We do not currently use third-party analytics platforms or advertising trackers.
Authentication. If you have a client workspace, we store your email address and short-lived sign-in tokens so we can keep you signed in. We do not store passwords; sign-in is by magic link.
Cookies. We use cookies only for authentication and basic site functionality. We do not use marketing or advertising cookies.
How we use it
- To respond to your inquiry or deliver work under an engagement.
- To run the website (rate limiting, debugging, security).
- To send transactional email (magic-link sign-in, engagement-related communications).
- To meet legal obligations.
We do not sell, rent, or trade personal information to anyone.
Vendors
We use a small set of vendors to run our infrastructure. Each only sees the data necessary to deliver their service:
- Railway — application hosting and managed Postgres.
- Resend — transactional email (magic-link sign-in).
- Google Workspace — our team email.
- Slack — internal notifications, including contact-form submissions.
- Cloudflare — DNS for manta-labs.ai.
Engagement data
When we work with a client we may need access to their operational data — emails, spreadsheets, internal tools, sample documents. The handling of that data is governed by the engagement's SOW or master services agreement, which typically includes confidentiality terms, defined retention periods, and a deletion path on engagement end. This privacy policy is the website-level baseline; the engagement contract overrides it where it differs.
Retention
- Contact form submissions: kept until you ask us to delete them.
- Client workspace data: retained for the life of the engagement plus the period specified in the SOW (typically 90 days post-termination).
- Server logs: retained for up to 30 days.
Your rights
You can ask us to tell you what data we hold on you, correct it, or delete it. Email hello@manta-labs.ai; we'll respond within 30 days.
EU/UK residents have additional rights under GDPR, and California residents have rights under CCPA. We will honor those on request.
Security
We use standard practices: TLS for everything in transit, managed database with encryption at rest, magic-link authentication (no passwords to leak), security headers on every response, and SPF/DKIM/DMARC on email. We don't pretend to be impenetrable. If you're sharing material that needs additional safeguards, talk to us about it before you send it.
Children
Manta Labs is a B2B service. We do not knowingly collect data from anyone under 16.
International transfers
Our infrastructure is hosted in the United States. By using the site or working with us you consent to your data being processed there. EU/UK data is handled under standard contractual clauses where applicable.
Changes
We will update this page when our practices change and revise the “Last updated” date at the top. Material changes will be communicated to active clients directly.
Contact
Questions about this policy → hello@manta-labs.ai.