Privacy Policy
Last updated: 28 March 2026
Manthan Intelligence ("we," "us," "our") operates getmanthan.com and the ManthanBot service. This policy explains how we collect, use, store, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the India Digital Personal Data Protection Act 2023 (DPDP Act).
1. Data Controller
Manthan Intelligence is the data controller for personal data processed through our services. For enquiries, contact us at [email protected].
2. What We Collect
| Data category | Examples | Lawful basis |
|---|---|---|
| Identity & contact | Name, email, Telegram username | Contract / Consent |
| Documents you submit | Pitch decks, financial models | Contract (service delivery) |
| Analysis outputs | Deal memos, Analytical Council assessments | Legitimate interest |
| Knowledge graph entities | Company profiles, sector data, public funding rounds | Legitimate interest |
| Website analytics | Page views, referrer (via Cloudflare Web Analytics) | Legitimate interest |
Cloudflare Web Analytics is cookieless and does not collect personally identifiable information. We do not use cookies, tracking pixels, or third-party advertising trackers on getmanthan.com.
3. How We Use Your Data
We process personal data to deliver the service you requested (analysis of your documents), to improve our analytical methodology (via anonymised calibration data), and to publish aggregated, non-identifiable intelligence through Charaka Notes. We never sell personal data to third parties.
4. AI Processing
Documents you submit are processed through Anthropic's Claude API. Anthropic acts as our data processor under their commercial API terms, which include GDPR-compliant data processing provisions. Anthropic does not train on data submitted through their commercial API. Your submitted documents are deleted from our systems after analysis pipeline completion and delivery, unless you have an active subscription.
5. Knowledge Graph
Our knowledge graph stores structured intelligence about companies, sectors, and market patterns. Company-level data derived from your submissions may be retained in anonymised or aggregated form as part of the knowledge graph. Personally identifiable information (founder names, contact details) is stored only with your consent or where we have a legitimate interest, and is subject to the same rights and protections described in this policy.
Confidentiality tiers
All knowledge graph entries are classified into confidentiality tiers: Public (sector/market data), Anonymised (patterns without company identity), Internal (Manthan use only), and Engagement Confidential (specific to a client relationship). Cap tables, burn rates, and fundraise status are always classified at the highest confidentiality tier.
6. Data Retention
Submitted documents: deleted after analysis pipeline completion. Analysis outputs: retained for the duration of your subscription plus 30 days. Knowledge graph entities: retained indefinitely in anonymised form. Account data: retained until you request deletion.
7. Your Rights
Under UK GDPR and the DPDP Act, you have the right to access your personal data, rectify inaccuracies, request erasure, restrict processing, data portability, and object to processing. For ManthanBot users, the /delete command initiates data erasure. For all other requests, email [email protected]. We respond within 30 days.
8. International Transfers
Our server infrastructure is hosted in the United Kingdom (DigitalOcean London). API calls to Anthropic's Claude are processed on Anthropic's infrastructure (United States). This transfer is covered by Anthropic's Standard Contractual Clauses and their UK GDPR-compliant data processing addendum.
9. Security
We implement encryption in transit (TLS 1.3), encrypted storage for sensitive data, bearer token authentication for API access, role-based access controls, and automated security monitoring. Our infrastructure runs on isolated containers with minimal attack surface.
10. Children
Our services are not directed at individuals under 18. We do not knowingly collect personal data from minors.
11. Changes to This Policy
We will update this page when our practices change. Material changes will be communicated via email to active users. The "last updated" date at the top reflects the most recent revision.
12. Contact
For privacy enquiries, data subject requests, or complaints: [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK or the Data Protection Board of India.