Manova
Legal

Privacy Policy

Last updated: July 18, 2026

1. Introduction

Manova provides SEO analytics tools that read Google Search Console and Google Analytics data on behalf of authenticated users. This policy explains what we collect, how we use it, and the rights you have over your data.

2. Information We Collect

  • Account information: email address, name, plan tier.
  • Google-provided data via OAuth: see section 3.
  • Usage data: pages viewed, features used, timestamps.
  • Payment information: processed by Stripe, not stored by Manova.

3. Google User Data — Limited Use Disclosure

Manova's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

  • We access: Google Search Console data (webmasters.readonly scope) and Google Analytics 4 data (analytics.readonly scope, coming soon).
  • We use it for: displaying SEO analytics to the authenticated user only.
  • We do NOT: sell this data, share it with third parties for advertising, use it to train AI/ML models, or allow humans to read it except for support with user consent.
  • We store it: encrypted at rest in Supabase, isolated per user via row-level security.
  • Retention: while the user's account is active, plus 30 days after cancellation, then permanently deleted.

4. How We Share Information

We share data with third-party service providers only as needed:

  • Anthropic (Claude API) — receives specific opportunity context to generate SEO suggestions. No personally identifiable user data is sent.
  • OpenAI (embeddings) — receives keyword text for clustering. No personally identifiable user data is sent.
  • Supabase — our database provider (encrypted, SOC 2 compliant).
  • Vercel — hosting provider.
  • Stripe — payment processing.
  • Trigger.dev — background job execution.

We do not sell user data. Ever.

5. Your Rights

  • Access all data we hold about you through account settings → "Export my data".
  • Delete your account and all associated data through account settings → "Delete account".
  • Revoke Google account access through Google account settings.
  • Contact support@manova.pro for any privacy questions.

6. Data Security

  • All data encrypted in transit using TLS 1.3 and encrypted at rest.
  • Row-level security in the database so users can only access their own data.
  • OAuth tokens stored in Supabase Vault and encrypted at rest.
  • Regular security audits, with external SOC 2 planned.

7. International Users

Manova is operated from Canada. If you access Manova from outside Canada, your data will be transferred to and processed in Canada, the US (Vercel, Trigger.dev, Anthropic, and OpenAI hosting), and Europe (Supabase EU regions if selected).

8. Children

Manova is not directed at children under 16. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this policy. Material changes will be announced via email to registered users at least 30 days before taking effect.

10. Contact