Mantafin Privacy Policy

We collect information you provide directly, information generated through your use of Mantafin, and information received from service providers that help us operate the product.

• Account information, such as name, email address, authentication identifiers, account status, plan, and preferences.
• Google sign-in information, when you choose to authenticate with Google through WorkOS, such as your Google account name, email address, profile image if provided, and authentication identifiers used to create your Mantafin account and secure access.
• Billing information processed through Stripe, such as subscription status, Stripe customer identifiers, invoices, trial status, cancellation status, and payment metadata. We do not store full card numbers.
• Usage information, such as API requests, dashboard routes used, searched symbols, usage credits, request IDs, timestamps, device/browser metadata, IP address, and logs needed for security, debugging, billing, rate limits, and abuse prevention.
• Research inputs, such as symbols, filters, portfolio backtest inputs, benchmark selections, and other parameters you submit to generate financial analysis.
• Local browser data, such as saved portfolio backtests and cached API payloads stored in IndexedDB or localStorage on your device for performance and convenience.
• Support and communication data, such as messages, feedback, bug reports, and related contact information.
• GPT Action or MCP integration data, such as prompts, parameters, selected symbols, authentication tokens, and API responses needed to perform an action you request through ChatGPT or another connected client.

Mantafin stores some product data locally in your browser using IndexedDB and localStorage. This may include the latest dashboard payloads, saved portfolio backtests, UI preferences, table settings, and cached search or research results.

Locally stored portfolio backtests and settings are stored on your device and are not necessarily synced to Mantafin servers. If you clear browser data, use private browsing, switch browsers, or lose access to your device, that locally stored data may be deleted and may not be recoverable by Mantafin.

• Provide, operate, secure, and improve Mantafin.
• Authenticate users and manage sessions through WorkOS AuthKit.
• Use Google sign-in information, when selected, only to create or identify your Mantafin account, authenticate your session, secure access, prevent abuse, and provide account support.
• Provision local accounts, determine account status, enforce access decisions, and manage plan and usage limits.
• Process paid subscriptions, trials, invoices, cancellations, and customer portal sessions through Stripe.
• Run searches, screeners, portfolio backtests, financial-data requests, GPT Actions, MCP-connected workflows, and other product features.
• Cache results, remember preferences, improve performance, and preserve product state on your device.
• Prevent fraud, abuse, scraping, credential misuse, and unauthorized access.
• Debug errors, audit request behavior, maintain service reliability, and respond to support requests.
• Comply with legal obligations and enforce our Terms of Service.

If you use Mantafin through ChatGPT, GPT Actions, MCP-connected clients, or other external tools, relevant portions of your input may be sent to Mantafin so the requested action can be performed. For example, a connected client may send a ticker symbol, screen filters, portfolio inputs, or account-authentication information.

We use this information to execute the requested action, return results, secure the service, enforce usage limits, and maintain operational logs. The external client may have its own privacy practices. Review the privacy settings and disclosures of the client you use.

We do not sell your personal information. We may share information with service providers and partners that help us run Mantafin.

• Authentication providers, including WorkOS, to manage hosted login, signup, sessions, access tokens, and account identity.
• Google, when you choose Google sign-in through WorkOS, to verify your identity and return the account information needed for authentication.
• Payment processors, including Stripe, to manage Checkout, subscriptions, invoices, taxes, trials, cancellations, and customer portal sessions.
• Infrastructure, hosting, database, logging, analytics, monitoring, email, and customer-support providers that process information on our behalf.
• Financial-data and reference-data providers as needed to provide requested market, financial, fund, estimates, filings, earnings, IPO, screener, and portfolio analytics functionality.
• Law enforcement, regulators, courts, or other parties when required by law or when necessary to protect rights, safety, security, and the integrity of the service.
• Successors or affiliates in connection with a merger, acquisition, financing, reorganization, or sale of assets.

Mantafin is an investment research and analytics tool. We may process securities symbols, portfolio weights, backtest settings, contribution schedules, benchmark selections, and related inputs you provide. These inputs are used to generate research outputs and may be logged or cached as described in this Policy.

Mantafin does not use your portfolio inputs to provide personalized investment advice, brokerage services, custody, trade execution, or tax advice.

We and our service providers may use cookies, localStorage, IndexedDB, session storage, and similar technologies to keep you signed in, remember preferences, cache product data, prevent abuse, measure usage, and improve performance.

We retain personal information for as long as reasonably necessary to provide the service, maintain account and billing records, enforce usage limits, comply with legal obligations, resolve disputes, and protect the service. Local browser data remains on your device until the app updates it, you delete it, or your browser removes it.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No internet service or storage system can be guaranteed to be completely secure. You are responsible for protecting your account access, device, browser profile, and credentials.

Depending on where you live, you may have rights to access, correct, delete, export, or object to certain processing of your personal information. You may also manage billing through Stripe Customer Portal where available, manage connected accounts through the relevant external client, and clear local browser storage from your browser settings.

Mantafin is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so we can take appropriate action.

Mantafin is operated from the United States. If you access the service from outside the United States, your information may be processed in the United States and other jurisdictions where our service providers operate.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. Your continued use of Mantafin after an update means the updated Policy applies to your use going forward.

If you have questions about this Privacy Policy or wish to make a privacy request, contact Finnch Inc. at [email protected].