Privacy Policy

Last updated: August 5, 2026

Manawa Technologies ("Manawa", "we", "our", or "us") operates the Manawa Terminal platform at terminal.manawa.app and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

Account Information: When you sign in via Google OAuth, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password.

Usage Data: We automatically collect information about how you interact with our services, including:

• Search queries submitted through the Finance Search API
• Daily query counts for billing and rate-limiting
• API key usage metadata (timestamps, endpoint accessed)
• IP addresses and browser user-agent strings

Financial Data: Portfolio holdings, watchlists, alert configurations, research library documents, and journal entries you create are stored in our database. We do not have access to your brokerage accounts — all portfolio data is manually entered by you.

Payment Information: If you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your credit card numbers. We receive only a reference to your Stripe customer ID and subscription status.

2. How We Use Your Information

• To provide, maintain, and improve our services
• To authenticate your identity and manage your account
• To enforce rate limits and billing based on your subscription plan
• To send transactional notifications (e.g., alert triggers, billing confirmations)
• To detect and prevent fraud, abuse, or security incidents
• To comply with legal obligations

3. Data Sharing

We do not sell your personal information. We may share data with:

• Google Cloud Platform: Our infrastructure provider (compute, storage, databases)
• Stripe: Payment processing for subscriptions
• Market Data Providers: Third-party APIs — we send ticker symbols as part of API requests but no personal data
• Google Gemini: For AI-powered search synthesis — queries are sent without personal identifiers
• Google Analytics: We use Google Analytics to understand aggregate usage of our website and platform (pages visited, session sources, signup events). IP anonymization is enabled and analytics data is not tied to your account contents.

AI Assistant Integrations: If you connect Manawa Terminal to a third-party AI assistant (such as Claude, ChatGPT, or Grok) via our MCP connector, your queries and the data returned flow through that assistant's platform under its own privacy policy. We receive only the requests made through your authenticated connection and apply this policy to them.

4. Data Retention

We retain your account data for as long as your account is active. Usage logs are retained for up to 90 days. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

5. Data Security

We implement industry-standard security measures including:

• TLS encryption for all data in transit
• Encrypted storage for API keys and secrets (GCP Secret Manager)
• Non-root container execution in production
• CORS restrictions and CSP frame-ancestors policies
• JWT-based authentication with secure token handling

6. Your Rights

You have the right to:

• Access, update, or delete your personal data
• Export your portfolio and watchlist data
• Revoke API keys at any time
• Request deletion of your account and all associated data

7. Cookies

We use essential cookies and local storage for authentication (JWT tokens) and user preferences (theme, layout), and Google Analytics cookies to measure aggregate usage. We do not use advertising cookies.

8. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, contact us at privacy@manawa.app.