Legal Document

Privacy Policy

Last updated: August 1, 2026 · Version 1.1

Data Controller
Data Collected and Purposes
Data Retention Periods
Data Hosting and Sovereignty
Data Security
Your GDPR Rights
Cookies and Trackers
Contact Information

Art. 1 Data Controller

The data controller responsible for processing your personal data is Adrien Savelli (Manifst), 6 Allée des Restanques, 13016 Marseille, France (SIREN: 797 513 470, contact: privacy@manifst.net).

Art. 2 Data Collected and Purposes

We collect and process personal data necessary to provide the Manifst platform:

Category	Data Types	Purpose & Legal Basis
Account Data	First name, last name, email address, password hash	Account creation, authentication, communication (Contractual necessity)
Project Data	Backlog items, tasks, story points, time logs, risk logs	Service provision, metrics calculation (Contractual necessity)
Billing Data	Billing address, transaction receipts, payment status	Subscription billing, tax compliance (Legal obligation)
Technical Logs	IP address, browser type, connection timestamps	Security monitoring, fraud prevention (Legitimate interest)

Art. 3 Data Retention Periods

Personal data is retained only for as long as necessary for the purposes for which it was collected:

Active Account: Retained for the entire duration of active subscription / account use.
Closed Account: Deleted permanently within 30 days after account deletion.
Invoices & Billing: Retained for 10 years in accordance with French commercial tax regulations.

Art. 4 Data Hosting and Sovereignty

All database records and file attachments managed by Manifst are hosted exclusively on secure infrastructure located in France. Data is stored strictly within the European Union.

Art. 5 Data Security

Manifst implements industry-standard technical and organizational security measures, including TLS/HTTPS transport encryption, salted password hashing, role-based access control, and daily offsite backups.

Art. 6 Your GDPR Rights

Under the GDPR, you hold the following rights regarding your personal data:

Right of Access

Obtain a copy of all personal data held about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure

Request permanent deletion of your personal data.

Right to Data Portability

Export your project and backlog data in structured formats.

To exercise any of these rights, email us at privacy@manifst.net.

Art. 7 Cookies and Trackers

Manifst uses essential functional session cookies strictly necessary to maintain authentication state. Analytics trackers (Google Analytics / GTM) are loaded with IP anonymization enabled.

Art. 8 Contact Information

For any privacy inquiries or to reach our Data Protection Officer, please contact privacy@manifst.net.