Privacy policy

Manifold works on your own machine, and nothing you write leaves it unless you ask. This page is about the times you do ask: the account service, and what it keeps.

Who is responsible

Nitzan Daloomy, a sole trader in Israel, is responsible for the data described here. You can reach us through the contact page.

Without an account

The program sends nothing about you or your writing. It asks the service only when you open Settings › Account or use something that needs it, and it fetches the list of the latest version to offer updates. The website uses no analytics, no advertising and no tracking cookies.

Your account

Your email address, your username, a salted hash of your password (never the password itself), when you signed up, whether you confirmed your address, and your plan. A session is kept only as a hash of its token and ends after 90 days.

What you keep and send

Documents you keep in your account, copies you send, the replies people send back to them, and the state of a session of editing together — stored on Cloudflare. They are handled only by the service, to give them back to you and to the people you choose.

Payments

Paddle, as Merchant of Record, takes your payment and your card details — they never reach us. We receive only the customer and subscription identifiers Paddle gives us, and whether the plan is active.

The model a plan includes

If you choose Manifold's model, the text it is asked about is sent through our service to OpenRouter, and to the company whose model answers, to produce the suggestion — only to providers that neither keep it nor train on it. We keep only what each request cost, to count your allowance, never the text.

Reports and ideas

A report after a crash or a freeze holds the version, the system, the interface language and a record of pauses — never your document; file paths, email addresses and quoted text are removed from it. A feature request holds what you wrote in it. Both are read only to improve Manifold. The address a request comes from is used to stop floods, and forgotten within fifteen minutes.

Email

We send email only to confirm your address, to reset your password and to tell you of a change to these terms that matters — through Resend. No newsletters.

Who else handles it

Cloudflare (hosting and storage), Paddle (payments), OpenRouter and the model's provider (only if you choose Manifold's model) and Resend (email). None may use your data for anything but providing their service to us. We sell nothing, share nothing for advertising, and train no models on your writing.

Where, and how long

Cloudflare keeps data in its network, which may be outside your country, under its own contractual safeguards. It is kept as long as your account exists: deleting the account in Settings › Account removes it, your documents, the copies you sent and the replies to them at once. A report is deleted on request.

Your rights

You may see, correct, export or delete what we hold about you, and object to how it is used — most of it directly in the app, the rest by writing to us. You may also complain to your data protection authority; in Israel, the Privacy Protection Authority.

Changes

Changes are posted here with their date, and a change that matters is told by email first.

Last updated: 30 September 2026.