Privacy Policy

Mantaglow is built and operated by Darian Harmon in Phoenix, Arizona, and is responsible for the personal data described here. This policy covers mantaglow.com, your Mantaglow account, the apps on it and our desktop apps.

• Account details: your name, email address and password (stored only as a one-way hash). If you sign in with Google or Apple, we receive your name and email from them, never your password.
• Organization details: organization names, members, invitations, roles and app permissions.
• Your content: what you create in the apps (projects, maps, rundowns, gear lists, crew invoices, scripts and so on) and files you upload. This can include details about other people, such as crew names and contact details, which you're responsible for having the right to share.
• Things you send us: contact and access-request forms, survey answers, bug reports and feedback.
• Billing: if you take a paid plan, Stripe collects your payment details. We keep only what we need to manage the subscription, such as your plan and its status. We never see or store card numbers.

• Sign-in sessions: IP address and browser user agent, to keep your session secure and spot misuse.
• Page analytics we run ourselves: which pages are viewed and for how long, the referring site, browser type and approximate country, tied to a random ID that lasts for one browser tab. This stays on our servers. We don't use third-party analytics. Ad platform pixels (Meta, Google, Reddit) load only if you allow marketing cookies; see the Cookies page. If you choose "Reject optional" or turn analytics off in the cookie banner, we stop recording your page views on mantaglow.com.
• Bot checks: some public forms use Cloudflare Turnstile, which checks your browser to tell people from bots.

• To run the Service: sign you in, store and sync your work, and show it to the people you share it with.
• To send account email: verification, password resets, invitations, reminders you set up and billing notices.
• To answer your messages and review access requests.
• To understand which features are used so we can improve them.
• To send product news, only if you opted in. Every one has an unsubscribe link.
• To keep the Service secure and prevent fraud and abuse.

Some apps include optional AI features, and we use AI to help review access requests. When you use one, the relevant text is sent to our AI provider (Anthropic) to produce the result, under their API terms.

We don't use your content to train AI models, and we don't sell it.

We never sell personal data. We share it only with:

• People you choose: members of your organization, according to their role, and anyone you send a share link to.
• Service providers who process it for us: Stripe (payments), Resend (email delivery), Anthropic (AI features), Vercel (storage for files you upload), Cloudflare (bot checks), and Google or Apple if you use them to sign in. Fonts on our pages load from Fontshare, which receives your IP address the way any web host does.
• When the law requires it, or to protect people's safety or the Service from abuse.

• All traffic is encrypted with HTTPS.
• Passwords are hashed and never stored in plain text.
• Session cookies are secure and HTTP-only, so page scripts can't read them.
• Sign-in and public endpoints are rate-limited.
• Each organization's app data is kept separate, and every request checks you belong to it.
• The database is backed up regularly.

We keep your account and content while your account is open. When you delete your account, it's removed straight away along with every sign-in method, and any organization where you were the only member is deleted with its content and uploads. Work you added to organizations you share with others stays with them. Copies in our backups age out on their own schedule. We keep billing records for as long as tax law requires.

Wherever you live, you can:

• see and correct your account details in Settings;
• download a copy of your data from Settings → Account;
• delete your account from Settings → Account;
• unsubscribe from product email at any time;
• object to or ask us to limit how we use your data.

For anything you can't do in Settings, email contact@mantaglow.com and we'll respond within 30 days. If you're in the EU, UK or a US state with privacy laws such as California, these are your legal rights, and you can also complain to your local data-protection authority.

• Sign-in cookie: keeps you signed in across mantaglow.com and its app subdomains. It's essential and is removed when you sign out.
• Your cookie choice: remembered in your browser's local storage so we don't ask again.
• Analytics tab ID: a random ID in session storage that's cleared when you close the tab.
• The full list, with what each one does and how long it lasts, is on the Cookies page, where you can also change your choice.

Our desktop apps keep your projects on your own computer and work offline. Nothing leaves your machine unless you sign in to back up or sync a project, or you check for updates.

Mantaglow is for working professionals and isn't meant for anyone under 16.

We'll post any update here with a new date, and email you before material changes take effect. See also our Terms of Service.

Privacy questions or requests: contact@mantaglow.com.