Last updated: August 1, 2026 · Version 1.1
The data controller responsible for processing your personal data is Adrien Savelli (Manifst), 6 Allée des Restanques, 13016 Marseille, France (SIREN: 797 513 470, contact: privacy@manifst.net).
We collect and process personal data necessary to provide the Manifst platform:
| Category | Data Types | Purpose & Legal Basis |
|---|---|---|
| Account Data | First name, last name, email address, password hash | Account creation, authentication, communication (Contractual necessity) |
| Project Data | Backlog items, tasks, story points, time logs, risk logs | Service provision, metrics calculation (Contractual necessity) |
| Billing Data | Billing address, transaction receipts, payment status | Subscription billing, tax compliance (Legal obligation) |
| Technical Logs | IP address, browser type, connection timestamps | Security monitoring, fraud prevention (Legitimate interest) |
Personal data is retained only for as long as necessary for the purposes for which it was collected:
All database records and file attachments managed by Manifst are hosted exclusively on secure infrastructure located in France. Data is stored strictly within the European Union.
Manifst implements industry-standard technical and organizational security measures, including TLS/HTTPS transport encryption, salted password hashing, role-based access control, and daily offsite backups.
Under the GDPR, you hold the following rights regarding your personal data:
Obtain a copy of all personal data held about you.
Request correction of inaccurate or incomplete data.
Request permanent deletion of your personal data.
Export your project and backlog data in structured formats.
To exercise any of these rights, email us at privacy@manifst.net.
Manifst uses essential functional session cookies strictly necessary to maintain authentication state. Analytics trackers (Google Analytics / GTM) are loaded with IP anonymization enabled.
For any privacy inquiries or to reach our Data Protection Officer, please contact privacy@manifst.net.
When connecting your Google account to Manifst's Google Meet Connector, the application accesses, with your explicit consent, the following data:
| Google Data | Scope | Purpose |
|---|---|---|
| Account Email Address | openid, email | Identify connected account |
| Meeting Titles & Dates | calendar.events.readonly | Name and timestamp analyzed meeting |
| Meet Meeting Transcripts | meetings.space.readonly | Generate agile backlog (epics / user stories) |
To generate backlog items, meeting transcript text is transmitted to our AI processor Mistral AI (a French company operating strictly within European Union data centers). Mistral AI processes this data exclusively to produce requested backlog output, does not use your data to train AI models, and never shares it with third parties.
Data retrieved from Google APIs (transcripts, meeting titles, account email) is transmitted over encrypted channels (HTTPS/TLS), stored on secure servers in France, and accessible solely to authorized personnel. Your Google data is never sold, rented, or used for advertising purposes.
Cached meeting transcripts are retained for the duration of the associated project to allow backlog generation and refinement. They are automatically deleted upon project deletion, and can be deleted at any time upon request to privacy@manifst.net. Disconnecting the connector halts all further access to Google APIs.
Manifst's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect the Google Meet connector at any time in project settings, or revoke access directly from your Google Account Permissions page.