Privacy policy

Information you provide

Depending on how you use Maneta, you may provide:

• your name, email address and sign-in information;
• crypto transaction files, wallet addresses and read-only exchange connection credentials;
• corrections, tax settings, accountant-sharing choices and support information; and
• billing details submitted to Stripe. Maneta does not receive or store your full card number.

Maneta never asks for a wallet seed phrase or private key. Exchange credentials are encrypted and are used only to perform the connections you request.

Information collected automatically

We and our service providers may process your IP address, browser or device type, operating system, session identifiers, requested pages, timestamps and diagnostic events. We use this information to authenticate you, keep Maneta secure, operate the service and diagnose faults. Maneta does not request precise location data from your device.

We use essential storage for sign-in, security and preferences such as hiding account figures. We do not use advertising cookies. We will ask for a clear choice before enabling any non-essential storage that requires consent.

How we use your information

We use personal information to:

• import and reconcile transactions, calculate UK crypto tax and create the reports you request;
• provide accounts, subscriptions, synchronisation, support and service messages;
• prevent fraud, protect accounts, investigate errors and improve reliability; and
• meet legal, tax, accounting and regulatory obligations.

Our lawful bases are performing our contract with you, complying with legal obligations and our legitimate interests in securing and improving Maneta. Where the law requires consent, you may withdraw it at any time.

Service providers and sharing

We share only the information needed to provide Maneta with trusted processors for authentication (Clerk), hosting and files (Vercel), databases (Supabase), payments (Stripe), email (Resend) and privacy-filtered error monitoring (Sentry). Market data requests use CoinGecko and other public price sources. Connections that you add send the required request to the relevant exchange, blockchain or wallet service.

We may also share information with an accountant when you explicitly invite or authorise them, when required by law, or when necessary to protect Maneta, our users or others from fraud or harm. We do not sell personal information.

Some providers may process information outside the UK. Where this happens, we rely on recognised safeguards such as adequacy regulations or approved contractual terms. Each provider also publishes its own privacy information.

Data retention and deletion

We keep account and transaction information while your account is active so that Maneta can provide your ledger and tax reports. You can delete your account from Settings or start from our public account-deletion page. This cancels an active Maneta subscription and removes your identity, imported transactions, reports and uploaded files from Maneta's active systems.

We may retain limited billing, security or legal records when the law requires it or to establish, exercise or defend legal claims. Privacy-filtered Sentry events have a 30-day lookback. Residual encrypted backup copies age out under our providers' backup schedules and are not returned to active use except for disaster recovery.

Deleting the mobile app does not by itself delete your account or information.

Your rights

UK data protection law may give you rights to be informed, access your information, correct it, erase it, restrict or object to processing, and receive certain information in a portable format. You may also complain to the Information Commissioner's Office. We may need to verify your identity before completing a request.

Children

Maneta is intended for people aged 18 or over. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us so we can investigate and delete it where appropriate.

Security

We use technical and organisational safeguards including encryption, access controls, tenant isolation and privacy-filtered monitoring. No online service can guarantee absolute security, so please use a strong sign-in method and keep your connected account credentials safe.

Changes to this policy

We may update this policy when Maneta or the law changes. We will publish the updated version here, change the effective date and provide an additional notice when a material change requires one.

Contact us

For privacy questions or to exercise your rights, email hello@maneta.co.uk. You can also write to CLAVEL INCORPORATED LIMITED, 16 Coed Pella Road, Colwyn Bay, Clwyd LL29 7BA, United Kingdom.