Last updated: October 23, 2026 · Version 1.4
The data controller responsible for processing your personal data is Adrien Savelli (Manifst), 6 Allée des Restanques, 13016 Marseille, France (SIREN: 797 513 470, contact: privacy@manifst.net).
We collect and process personal data necessary to provide the Manifst platform:
| Category | Data Types | Purpose & Legal Basis |
|---|---|---|
| Account Data | First name, last name, email address, password hash | Account creation, authentication, communication (Contractual necessity) |
| Project Data | Backlog items, tasks, story points, time logs, risk logs | Service provision, metrics calculation (Contractual necessity) |
| Billing Data | Billing address, transaction receipts, payment status | Subscription billing, tax compliance (Legal obligation) |
| Technical Logs | IP address, browser type, connection timestamps | Security monitoring, fraud prevention (Legitimate interest) |
| Institution License | For the institution: contact name and email address. For attached accounts: confirmed email address, confirmation and attachment dates | Eligibility check (email domain compared with those declared by the institution, then address confirmation by link), seat assignment, renewal reminders to the institution's contact (Contractual necessity). The institution only receives the number of seats in use, never the identity of attached accounts. |
Personal data is retained only for as long as necessary for the purposes for which it was collected:
All database records and file attachments managed by Manifst are hosted exclusively on secure infrastructure located in France. Data is stored strictly within the European Union.
Manifst implements industry-standard technical and organizational security measures, including TLS/HTTPS transport encryption, salted password hashing, role-based access control, and daily offsite backups.
Under the GDPR, you hold the following rights regarding your personal data:
Obtain a copy of all personal data held about you.
Request correction of inaccurate or incomplete data.
Request permanent deletion of your personal data.
Export your project and backlog data in structured formats.
To exercise any of these rights, email us at privacy@manifst.net.
Manifst uses essential functional session cookies strictly necessary to maintain authentication state. Analytics trackers (Google Analytics / GTM) are loaded with IP anonymization enabled.
For any privacy inquiries or to reach our Data Protection Officer, please contact privacy@manifst.net.
When connecting your Google account to Manifst's Google Meet Connector, the application accesses, with your explicit consent, the following data:
| Google Data | Scope | Purpose |
|---|---|---|
| Account Email Address | openid, email | Identify connected account |
| Meeting Titles & Dates | calendar.events.readonly | Name and timestamp analyzed meeting |
| Meet Meeting Transcripts | meetings.space.readonly | Generate agile backlog (epics / user stories) |
To generate backlog items, meeting transcript text is transmitted to our AI processor Mistral AI (a French company operating strictly within European Union data centers). Mistral AI processes this data exclusively to produce requested backlog output, does not use your data to train AI models, and never shares it with third parties.
Data retrieved from Google APIs (transcripts, meeting titles, account email) is transmitted over encrypted channels (HTTPS/TLS), stored on secure servers in France, and accessible solely to authorized personnel. Your Google data is never sold, rented, or used for advertising purposes.
Cached meeting transcripts are retained for the duration of the associated project to allow backlog generation and refinement. They are automatically deleted upon project deletion, and can be deleted at any time upon request to privacy@manifst.net. Disconnecting the connector halts all further access to Google APIs.
Manifst's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect the Google Meet connector at any time in project settings, or revoke access directly from your Google Account Permissions page.
When connecting your Microsoft work or school account to Manifst's Teams Meetings Connector, the application accesses, with your consent and your organization administrator's approval, the following data. Manifst acts on behalf of the connected account only and reads only the meetings in its calendar.
| Microsoft Data | Permission | Purpose |
|---|---|---|
| Account Email Address & Name | openid, email, profile, User.Read | Identify connected account |
| Titles, Dates & Links of Teams Meetings in the Calendar | Calendars.Read, OnlineMeetings.Read | Find, name and timestamp analyzed meeting |
| Teams Meeting Transcripts | OnlineMeetingTranscript.Read.All | Generate agile backlog (epics / user stories) |
Other calendar events are ignored: only the title, time slot and technical identifiers of Teams meetings are kept. No video recording or Copilot recap is read.
A transcript is retrieved only when you ask for it. To generate backlog items, its text is transmitted to Mistral AI under the conditions described in Art. 9: processing within the European Union, exclusively to produce the requested output, with no model training.
Cached transcripts and detected meeting information are retained for the duration of the associated project and automatically deleted with it, or at any time upon request to privacy@manifst.net. They are stored in France, never sold, and never used for advertising purposes.
You can disconnect the connector at any time in project settings. Your organization administrator can withdraw the permission for all users by deleting the “Manifst – Réunions Teams” application in the Microsoft Entra admin center (Enterprise applications).