Back to Mana

Privacy Policy

Mana Finance Corporation

Last updated: August 21, 2026

Introduction

Mana Finance Corporation (“Mana,” “we,” “our,” or “us”) provides an AI-powered investment research platform through our websites (mana.ai and manafinance.com), applications, and API (collectively, our “Services”).

This Privacy Policy explains what information we collect, how we use it, who we share it with, and what choices you have. It applies to all users of our Services, whether you access them through our website, API, or any other means.

By using our Services, you agree to the collection and use of information as described in this policy.

Information We Collect

Information You Provide

When you create an account, subscribe to our Services, or interact with our platform, you may provide us with:

  • Account information: your name, email address, phone number, and other contact details.

  • Payment information: credit card, debit card, or other payment method details used for subscriptions and usage-based billing. We use third-party payment processors and do not store full payment card numbers on our servers.

  • Customer Materials: documents you upload or direct Mana to retrieve from connected sources, data Mana derives from those documents such as extracted text, summaries, and key terms, research queries you submit, conversation history, and other content you provide through our platform or API. You retain ownership of your Customer Materials.

  • Professional information: investment experience, professional background, or other details you choose to share.

  • Communications: messages you send to our support team or feedback you provide about our Services.

Information We Collect Automatically

When you use our Services, we automatically collect:

  • Usage data: pages visited, features used, queries submitted, API calls made, timestamps, and interaction patterns.

  • Device information: IP address, browser type and version, operating system, device identifiers, and general location (country, state, or city) derived from your IP address.

  • System Data: performance logs, error reports, latency measurements, model output quality metrics, service logs, and other telemetry about how our Services perform. System Data may include elements of your conversations or uploaded content where that content appears in trace logs generated during normal operation. Mana takes reasonable steps to limit the amount of Customer Materials content captured in System Data to what is necessary for operational purposes. Mana may use System Data to maintain, improve, and secure our Services. Your ownership of the underlying Customer Materials is not affected. You may request deletion of System Data associated with your account by contacting us at support@mana.ai.

  • Cookies and similar technologies: we use cookies, web beacons, and server logs to collect information about how you interact with our Services. You can control cookies through your browser settings, though some features may not work properly if you disable them.

Information from Third Parties

We may receive information about you from service providers that help us operate our business, such as payment processors, analytics providers, and security and anti-fraud services.

How We Use Your Information

We use the information we collect to:

  • Provide the Services: deliver AI-powered investment research, process your queries, and make our platform and API available to you.

  • Process payments: manage subscriptions, usage-based billing, and related transactions.

  • Improve our Services: analyze System Data and usage patterns to develop, maintain, optimize, and improve our platform. Our analysis may include the use of technology like machine learning and large language models to enhance our AI-powered investment research capabilities. Unless you opt out, we may also use your Customer Materials as training data for AI models. Enterprise customers who have entered into a separate agreement with Mana may have different default settings for AI model training. Connected-source materials and their derivatives, including Google Workspace API data, are excluded from AI model training; Google data is also governed by the section below.

  • Debug and ensure quality: review conversation traces, error logs, and system performance data to identify and fix issues. This may include review by Mana personnel of the content of conversations and queries to diagnose problems or improve the quality of our Services.

  • Communicate with you: send account notifications, subscription and renewal notices, security alerts, and respond to your support requests.

  • Ensure security: detect, prevent, and address fraud, abuse, and technical issues.

  • Comply with legal obligations: meet our legal and regulatory requirements.

AI and Data Practices

Because Mana is an AI-powered platform, we want to be especially clear about how your data interacts with AI systems:

Customer Materials and AI Improvement

Mana may use your Customer Materials, including uploaded documents, research queries, and conversation history, to improve our AI-powered investment research capabilities. This may include using Customer Materials to evaluate, fine-tune, or enhance the AI models that power our Services. We use third-party AI models provided by companies like Anthropic and OpenAI, and we build software around those models to deliver our Services. These practices do not apply to connected-source materials or their derivatives, including Google Workspace API data.

You can opt out of having your Customer Materials used for AI model training at any time by contacting us at support@mana.ai. If you opt out, your Customer Materials will still be processed as needed to deliver the Services to you, but will not be used as training data for AI models. Enterprise customers who have entered into a separate agreement with Mana may have AI model training disabled by default and may opt in at their discretion.

Separately, Mana may make general product improvements based on patterns observed in how our Services are used. For example, if we observe that a certain type of query produces poor results, we may update our software code, refine the instructions and prompts our AI systems follow, or improve the capabilities available to our AI to address the issue. These improvements are authored by Mana and do not incorporate your Customer Materials into any training dataset, prompt, or system instruction.

Third-Party AI Service Providers

To deliver our Services, your queries and uploaded content may be sent to third-party AI model providers for processing. We access these providers through their business API tiers under terms that prohibit them from using your data to train their models. However, these providers may temporarily retain data for a limited period for safety monitoring and abuse prevention purposes, consistent with their own data handling policies.

System Data and Telemetry

We collect System Data, which includes performance metrics, error logs, usage patterns, output quality measurements, and service logs, to monitor, debug, and improve our Services for all users. System Data is derived from your use of the platform and may include elements of your conversations, queries, or uploaded content where that content appears in trace logs or system records generated during the normal operation of our Services. Mana takes reasonable steps to limit the amount of Customer Materials content captured in System Data to what is necessary for operational purposes. Mana may use System Data to maintain, debug, secure, and improve our Services. Your ownership of the underlying Customer Materials is not affected. You may request deletion of System Data associated with your account by contacting us at support@mana.ai.

Human Review of Conversations

Mana personnel and automated tools may review the content of conversations, queries, and system outputs for the purposes of debugging issues, ensuring quality, and improving how our Services work. Access is restricted to a small number of designated personnel, all access is logged, and we use anonymization or pseudonymization where feasible to protect the confidentiality of your information during this process.

Google Workspace API Data

In this section, “Google Workspace API data” means data Mana receives from or derives from Google Workspace APIs. The Drive details below describe the generally available integration; these restrictions apply to all such data.

If you connect Google Drive, Mana requests read-only access. Within Mana, you designate folders for search and indexing or, separately, for monitoring. Mana may access file and folder metadata to display and enforce those choices, and contents from designated folders when you ask Mana to search, summarize, cite, monitor, or otherwise use a file. Mana uses this information only to provide and improve the Google Drive features you choose. If you connect Gmail when available, Mana requests read-only access and retrieves messages only at your request.

Mana uses a third-party authorization provider, currently Nango, to manage Google authorization and access tokens. Mana and its cloud hosting and AI service providers may process Google Workspace API data only as needed to operate the Google Workspace features you request, protect the Services, comply with applicable law, or as otherwise permitted with your consent. We do not sell this data or use it for advertising, lending, or credit-worthiness decisions.

Google Workspace content, including Drive files and Gmail messages, may be sent to third-party AI model providers to generate results for you. This is processing to provide the requested feature, not model training. Mana may use operational signals and user feedback to improve its user-facing software, retrieval, prompts, and workflows, but does not use Google Workspace API data, including data derived from it, to create, train, or improve generalized or non-personalized AI or machine learning models.

Mana stores connection and folder-selection metadata, document metadata such as titles, paths, types, and modification times, and derived indexing data such as summaries and key terms. For folders you designate for search and indexing, Mana also stores the text extracted from those documents, which is what allows you to search and cite them within Mana. Mana stores this connection metadata, document metadata, extracted text, and derived indexing data only as needed to provide the Google Workspace features you have chosen. If you disconnect the source, Mana stops using that data immediately and deletes it within 30 days, unless you reconnect during that period. If you delete your account, it is deleted as described in the Data Retention section. When you ask Mana to monitor a Google Drive folder, Mana stores a copy of each triggered file and the results derived from it as part of the relevant pipeline-run records. Google Workspace API data may also appear in your conversations or limited operational logs. These records are retained as described in the Data Retention section. You may disconnect Google Drive through Mana, revoke Mana’s access through your Google Account, or request deletion by contacting support@mana.ai.

Mana personnel do not access Google Workspace API data unless you expressly consent to review of specific data, the data has been aggregated and anonymized for permitted internal operations, access is necessary for security purposes, including investigating abuse or security incidents, or access is required to comply with applicable law. Where this section conflicts with another section of this policy, this section controls for Google Workspace API data.

Mana’s use of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who We Share Your Information With

We do not sell your personal data. We may share your information with:

  • AI service providers: third-party AI model providers who process your queries and content to deliver our Services, under contractual terms that restrict their use of your data.

  • Service providers: companies that help us operate our business, including payment processors, cloud hosting providers, analytics services, email platforms, and security and anti-fraud services. These providers are contractually bound to use your data only for the purposes we specify.

  • Affiliates and subsidiaries: entities within our corporate family, subject to this Privacy Policy.

  • Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

  • Legal requirements: when required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

  • With your consent: for any other purpose with your explicit consent.

Data Retention

We retain your account information, Customer Materials (including conversation history and uploaded documents), and System Data for as long as your account is active and for a reasonable period thereafter as needed to comply with our legal obligations, resolve disputes, and enforce our agreements.

If you request deletion of your account or specific data, we will delete or de-identify your Customer Materials within 30 days of your request. System Data and information retained in backups or logs will be deleted or de-identified within 90 days, except where we have a legal obligation to retain it longer.

Data Security

We implement commercially reasonable administrative, physical, and technical safeguards designed to protect your information from unauthorized access, use, alteration, and disclosure. These include encryption in transit and at rest, access controls, and regular security assessments.

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security.

Your Rights and Choices

Depending on where you live, you may have certain rights regarding your personal data:

  • Access: you may request a copy of the personal data we hold about you.

  • Correction: you may request that we correct inaccurate personal data.

  • Deletion: you may request that we delete your personal data, subject to certain legal exceptions.

  • Opt out of AI model training: you can opt out of having your Customer Materials used as training data for AI models by contacting us at support@mana.ai.

  • Opt out of marketing: you can opt out of promotional communications by adjusting your account settings or emailing us at support@mana.ai.

  • Cookie controls: you can manage cookies through your browser settings.

To exercise any of these rights, contact us at support@mana.ai. We will respond to your request in accordance with applicable law.

State Privacy Rights

If you are a resident of California, Colorado, Virginia, Connecticut, or another state with consumer privacy legislation, you may have additional rights including the right to know what personal data we collect, the right to opt out of certain data processing, and the right to appeal a decision regarding your privacy request. To exercise these rights or to appeal a decision, contact us at support@mana.ai.

We do not sell personal data and do not use personal data for targeted advertising.

We support the Global Privacy Control (GPC) signal. When we detect a GPC signal from your browser, we will respect your opt-out preferences as required by applicable law.

Children’s Privacy

Our Services are not intended for anyone under the age of 18. We do not knowingly collect personal data from children under 18. If we learn that we have collected personal data from a child under 18, we will take steps to delete that information.

International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. Where required by applicable law, we will implement appropriate safeguards for international data transfers, such as Standard Contractual Clauses or other mechanisms recognized under applicable data protection legislation.

Changes to This Privacy Policy

We may update this policy from time to time. We will notify you of material changes by updating the “Last updated” date at the top of this policy and, where required by law, by providing additional notice (such as email notification). Your continued use of our Services after any changes constitutes your acceptance of the updated policy.

Contact Us

Questions about this Privacy Policy or our data practices? Contact Mana Finance Corporation at support@mana.ai or 2261 Market Street STE 85323, San Francisco, California 94114.