Privacy

Depending on how you use Maneta, you may provide:

• your name, email address and sign-in information;
• crypto transaction files, wallet addresses and read-only exchange connection credentials;
• corrections, tax settings, accountant-sharing choices and support information; and
• billing details submitted to Stripe. Maneta does not receive or store your full card number.

Maneta never asks for a wallet seed phrase or private key. Exchange credentials are encrypted and are used only to perform the connections you request.

We and our service providers may process your IP address, browser or device type, operating system, session identifiers, requested pages, timestamps and diagnostic events. We use this information to authenticate you, keep Maneta secure, operate the service and diagnose faults. Maneta does not request precise location data from your device.

We use essential storage for sign-in, security and preferences such as hiding account figures. We do not use advertising cookies. We will ask for a clear choice before enabling any non-essential storage that requires consent.

We use personal information to:

• import and reconcile transactions, calculate UK crypto tax and create the reports you request;
• provide accounts, subscriptions, synchronisation, support and service messages;
• prevent fraud, protect accounts, investigate errors and improve reliability; and
• meet legal, tax, accounting and regulatory obligations.

Our lawful bases are performing our contract with you, complying with legal obligations and our legitimate interests in securing and improving Maneta. Where the law requires consent, you may withdraw it at any time.

We share only the information needed to provide Maneta with trusted processors for authentication (Clerk), hosting and files (Vercel), databases (Supabase), payments (Stripe), email (Resend) and privacy-filtered error monitoring (Sentry). An AI service provider helps suggest how to read a CSV import and which transactions may be duplicates. It receives column names, the type of each value (such as date or number) and transaction labels, never full transaction rows, amounts or dates, and no transaction is removed or changed without your confirmation. Market data requests use CoinGecko and other public price sources. Connections that you add send the required request to the relevant exchange, blockchain or wallet service.

We may also share information with an accountant when you explicitly invite or authorise them, when required by law, or when necessary to protect Maneta, our users or others from fraud or harm. We do not sell personal information.

Some providers may process information outside the UK. Where this happens, we rely on recognised safeguards such as adequacy regulations or approved contractual terms. Each provider also publishes its own privacy information.

We keep account and transaction information while your account is active so that Maneta can provide your ledger and tax reports. You can delete your account from Settings or start from our public account-deletion page. This cancels an active Maneta subscription and removes your identity, imported transactions, reports and uploaded files from Maneta's active systems.

What is kept after deletion, and why: the record of payments you made to Maneta, with our payment provider Stripe, for as long as UK company and tax law requires us to keep financial records (usually six years from the end of the financial year). We keep nothing else of yours except where the law requires it or to establish, exercise or defend legal claims. Privacy-filtered Sentry events have a 30-day lookback. Residual encrypted backup copies age out under our providers' backup schedules and are not returned to active use except for disaster recovery.

If you cannot sign in to delete your account, email hello@maneta.co.uk and we will delete it within one month of confirming the request is yours, as UK data protection law requires.

Deleting the mobile app does not by itself delete your account or information.

UK data protection law may give you rights to be informed, access your information, correct it, erase it, restrict or object to processing, and receive certain information in a portable format. You may also complain to the Information Commissioner's Office. We may need to verify your identity before completing a request.

Maneta is intended for people aged 18 or over. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us so we can investigate and delete it where appropriate.

We use technical and organisational safeguards including encryption, access controls, tenant isolation and privacy-filtered monitoring. No online service can guarantee absolute security, so please use a strong sign-in method and keep your connected account credentials safe.

We may update this policy when Maneta or the law changes. We will publish the updated version here, change the effective date and provide an additional notice when a material change requires one.

For privacy questions or to exercise your rights, email hello@maneta.co.uk. You can also write to CLAVEL INCORPORATED LIMITED, 16 Coed Pella Road, Colwyn Bay, Clwyd LL29 7BA, United Kingdom.