Privacy Policy

Your privacy, simply explained

Manifest helps you organise travel bookings in one beautiful timeline. Your privacy matters to us, so here's exactly what we do with your data.

Manifest operates this service and is the data controller for the personal data described below. We process that data to provide the service you've asked for (performing our contract with you) and, where relevant, on the basis of your consent (for example when you forward a booking email for parsing).

What we collect & why

Account info: your name and email address, collected via our authentication provider so you can sign in.

Trip and booking data: dates, flight numbers, hotel names, and other details you add. This is the core of the product.

Forwarded emails: when you forward a booking confirmation to your Manifest address, Manifest reads it to extract the booking details, then the email is immediately discarded. We never store the raw email content.

Username & forwarding address: used to enable email-based booking import and identify your account.

How we use your data

Your data is used exclusively to provide the Manifest service.

  • Never sold to third parties.
  • Never used for advertising.
  • Never shared with other users unless you explicitly invite them to a trip.

Third-party services

We rely on a small number of trusted providers:

  • Clerk (authentication): stores your email and name. Privacy policy
  • Supabase (database): stores your trips and bookings. Privacy policy
  • Postmark (email): receives forwarded emails and delivers them to our server. Privacy policy
  • Anthropic (booking extraction): processes email text to extract booking details via API. Content is not stored. Privacy policy
  • Unsplash (images): provides trip cover photos. No personal data is shared. Privacy policy
  • PostHog (analytics): aggregate, cookieless analytics. No individual tracking. Privacy policy
  • Vercel (hosting): serves the application. Privacy policy

Where your data is processed

Some of our providers (including Clerk, Supabase, Anthropic, and Vercel) are based in, or process data in, the United States. Where your data is transferred outside the UK or EEA, those providers rely on appropriate safeguards such as Standard Contractual Clauses to protect it.

Forwarded emails pass through Postmark for delivery to our server. Postmark may retain inbound messages on its own systems for a limited period as part of providing that delivery service.

Children

Manifest is not intended for children. You must be at least 16 years old to use the service, and we do not knowingly collect data from anyone under 16.

Data retention

Your account data is kept for as long as your account is active.

Forwarded emails are processed in memory and never written to storage.

When you delete your account, all your data is permanently removed within 30 days.

Your rights

  • Export a copy of all your data at any time.
  • Delete your account and all associated data.
  • Edit your bookings and profile at any time.
  • Manage your data right here: export a copy or delete your account using the buttons below.

Cookies & analytics

We use essential cookies only: your authentication session and a lightweight onboarding status check. Nothing else.

Our analytics run via PostHog in cookieless mode: aggregate usage data with no individual tracking and no cookies set.

We do not use any advertising or third-party tracking cookies.

Managing your data

You stay in control of your data. On this page you can export a full copy at any time, or permanently delete your account and everything associated with it.

Last updated: June 2026