Manifest helps you organise travel bookings in one beautiful timeline. Your privacy matters to us, so here's exactly what we do with your data.
Manifest operates this service and is the data controller for the personal data described below. We process that data to provide the service you've asked for (performing our contract with you) and, where relevant, on the basis of your consent (for example when you forward a booking email for parsing).
Account info: your name and email address, collected via our authentication provider so you can sign in.
Trip and booking data: dates, flight numbers, hotel names, and other details you add. This is the core of the product.
Forwarded emails: when you forward a booking confirmation to your Manifest address, Manifest reads it to extract the booking details, then the email is immediately discarded. We never store the raw email content.
Username & forwarding address: used to enable email-based booking import and identify your account.
Your data is used exclusively to provide the Manifest service.
We rely on a small number of trusted providers:
Some of our providers (including Clerk, Supabase, Anthropic, and Vercel) are based in, or process data in, the United States. Where your data is transferred outside the UK or EEA, those providers rely on appropriate safeguards such as Standard Contractual Clauses to protect it.
Forwarded emails pass through Postmark for delivery to our server. Postmark may retain inbound messages on its own systems for a limited period as part of providing that delivery service.
Manifest is not intended for children. You must be at least 16 years old to use the service, and we do not knowingly collect data from anyone under 16.
Your account data is kept for as long as your account is active.
Forwarded emails are processed in memory and never written to storage.
When you delete your account, all your data is permanently removed within 30 days.
We use essential cookies only: your authentication session and a lightweight onboarding status check. Nothing else.
Our analytics run via PostHog in cookieless mode: aggregate usage data with no individual tracking and no cookies set.
We do not use any advertising or third-party tracking cookies.
You stay in control of your data. On this page you can export a full copy at any time, or permanently delete your account and everything associated with it.
Last updated: June 2026