Privacy Policy

Last updated: 11 June 2026

This Privacy Policy explains how Maneuvr.app (“Maneuvr”, “we”, “us”) collects, uses and protects personal data in connection with the Maneuvr competitor intelligence platform (the “Service”) and our website at https://maneuvr.app.

We are the data controller for the personal data described in this policy, except where stated otherwise in section 4. We are registered in England and Wales with company number [NUMBER], registered office at [ADDRESS], and registered with the Information Commissioner’s Office under registration number [ICO NUMBER].

Contact: privacy@maneuvr.app

1. Personal data we collect

1.1 Account data. Name, email address, password (stored only as a salted hash, never in plain text), organisation name, role and account preferences.

1.2 Billing data. Billing contact details, billing address and VAT number. Payment card details are collected and processed directly by our payment provider, Stripe; we do not store full card numbers.

1.3 Usage data. Log data such as IP address, browser type, device information, pages viewed, features used, queries submitted to the Service’s chat interface, and timestamps. We use this to operate, secure and improve the Service.

1.4 Communications. Messages you send us, including support requests and feedback.

1.5 Publicly sourced data. The Service collects publicly available information about companies our customers choose to track. This may incidentally include personal data about individuals associated with those companies, such as the names, job titles and public statements of executives or spokespeople appearing in news articles, company websites and other public sources. Section 5 explains how we handle this.

We do not intentionally collect special category data (such as health, religious or political information) and the Service must not be used to submit it.

2. How we use personal data and our lawful bases

Where we rely on legitimate interests, we have balanced those interests against your rights and concluded they are not overridden. You can request details of our assessments via privacy@maneuvr.app.

3. AI processing

The Service uses artificial intelligence models provided by Google (Gemini) [AND ANTHROPIC, IF STILL USED] to analyse data and generate outputs. Content processed for this purpose may include your queries and your account’s tracked-competitor data. Our AI providers process this data on our behalf under contractual terms that prohibit use of the data to train their models [CONFIRM: this requires using Google’s paid API tier; Google’s free tier permits use of data for model improvement and must not be used in production]. We do not sell personal data, and we do not use your Customer Data to train AI models.

4. Customer Data: when we are a processor

When customers submit data to the Service that contains personal data (for example, notes naming individuals), the customer is the controller of that data and we process it only on their instructions as a processor, under the data processing terms at [DPA URL]. This policy does not apply to that processing; questions about it should be directed to the relevant customer.

5. Publicly sourced data about individuals

5.1 The Service is designed to track companies, not people. Where personal data appears incidentally in public sources (for example, an executive quoted in a press release), we process it only as part of analysing the company concerned.

5.2 We rely on legitimate interests for this processing. We do not use publicly sourced data to build profiles of private individuals, and our terms prohibit customers from doing so.

5.3 Because this data is collected from third-party sources rather than from the individuals themselves, this policy serves as our transparency notice under Article 14 UK GDPR. If you believe the Service holds personal data about you from public sources, you may exercise the rights in section 9, including objection and erasure, by contacting privacy@maneuvr.app.

6. Who we share personal data with

We share personal data only with:

• Service providers (processors): hosting, database, authentication and storage infrastructure (Supabase), AI model providers (Google [AND ANTHROPIC, IF STILL USED]), email delivery ([EMAIL PROVIDER]), payment processing (Stripe), and analytics ([ANALYTICS PROVIDER, IF ANY]). Each is bound by contract to process data only on our instructions and to protect it appropriately.
• Your organisation: if you use the Service under an organisation account, your account administrator can see your name, email, role and activity within that account.
• Professional advisers and authorities: where necessary for legal compliance, to enforce our terms, or in connection with a business sale or restructuring (in which case this policy continues to apply to your data).

We do not sell personal data and we do not share it with third parties for their own marketing.

7. International transfers

Some of our service providers, including our AI provider, are located outside the UK, including in the United States. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision (including the UK-US Data Bridge where the provider is certified). You can request a copy of the relevant safeguards via privacy@maneuvr.app.

8. Retention

• Account data: for the life of your account, then deleted or anonymised within [30/60/90] days of account closure.
• Billing records: 6 years after the relevant tax year, as required by UK law.
• Usage logs: [12] months, then deleted or aggregated.
• Support communications: [24] months after resolution.
• Publicly sourced data: retained while relevant to active tracking, reviewed periodically, and deleted when no longer needed.

Backups containing personal data are deleted on a rolling basis within [X] days.

9. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data in certain circumstances;
• Restrict processing in certain circumstances;
• Object to processing based on legitimate interests, and to direct marketing at any time;
• Data portability for data you provided to us, processed by automated means under contract or consent;
• Withdraw consent at any time, where processing is based on consent.

To exercise any right, contact privacy@maneuvr.app. We will respond within one month. We may need to verify your identity first.

You also have the right to complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113), though we would appreciate the chance to address your concerns first.

10. Security

We protect personal data using measures including encryption in transit, password hashing using a modern memory-hard algorithm, role-based access controls, and the principle of least privilege for staff and system access. No system is completely secure; if a breach occurs that risks your rights, we will notify you and the ICO as required by law.

11. Cookies

We use essential cookies required to operate the Service (such as session authentication). [IF APPLICABLE: We also use analytics cookies with your consent.] For details, see our Cookie Policy at [COOKIE POLICY URL].

12. Children

The Service is not intended for anyone under 18 and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact privacy@maneuvr.app and we will delete it.

13. Changes to this policy

We may update this policy from time to time. For material changes we will notify you by email or in-app notice before they take effect. The “Last updated” date at the top shows the current version.

Maneuvr.app [ADDRESS] privacy@maneuvr.app