Privacy Policy
Last updated: 13 June 2026
Manthan Intelligence ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use our products and services, including ManthanBot, Blueprint, Sutra, Charaka Notes, and our website at getmanthan.com (collectively, the "Services").
1. Data Controller
Manthan Intelligence is the data controller for personal data processed through the Services. Manthan Intelligence is a UK-based business (Manthan Intelligence Ltd, in incorporation in England and Wales; the company number and registered office will be added on registration). For questions about how your data is handled, contact us at [email protected].
2. What We Collect
We collect the following categories of data depending on how you interact with our Services:
| Data Category | Examples | Basis |
|---|---|---|
| Account information | Name, email address, company name | Contract performance |
| Sign-in data (portal) | Email and name from Google/LinkedIn sign-in or one-time email codes; session identifiers. We never receive or store passwords; one-time codes are stored only as salted hashes and expire within 10 minutes. | Contract performance |
| Enquiry / lead data | Name, work email, firm, role, product interest and message you submit through briefing or contact forms; the page the form was on | Legitimate interest (responding to your enquiry) |
| Usage data | Pages visited, features used, session duration | Legitimate interest |
| Uploaded content | Documents, pitch decks, data files you submit for analysis | Contract performance |
| Communication data | Messages sent via Telegram bot, emails, support requests | Contract performance |
| Payment data | Billing address, payment method (processed by Stripe) | Contract performance |
| Device and technical data | IP address, browser type, operating system | Legitimate interest |
| Relationship intelligence | Professional connections, interaction history (via SilentCRM integration) | Consent |
3. How We Use Your Data
We use your data for the following purposes:
- To provide and improve our Services, including structured analysis, knowledge graph queries, and intelligence reports.
- To personalise your experience and tailor analytical outputs to your context.
- To process payments and manage your subscription.
- To communicate with you about your account, service updates, and product announcements.
- To maintain security, detect fraud, and enforce our Terms of Service.
- To respond to briefing requests and enquiries you submit through our forms. Form submissions are stored on Cloudflare infrastructure (Workers KV), along with portal session and sign-in records, and are visible only to Manthan Intelligence. Transactional emails (sign-in codes, request confirmations, delivery notifications) are sent via Resend, Inc. (US), acting as our processor. The Charaka Notes newsletter is operated via Kit (ConvertKit, Inc., US); subscribing submits your email address directly to Kit, which processes it under its own privacy policy until you confirm or unsubscribe. We do not add you to marketing lists — the Charaka Notes newsletter is a separate, explicit opt-in.
- To operate portal sign-in. Sessions use an HttpOnly cookie (
mi_sess) that is strictly necessary for authentication — it is not used for tracking or advertising and is not shared with third parties. Signing in with Google or LinkedIn shares only your name, email address and verification status with us; we request no further scopes.
4. AI Processing
Our Services use large language models (LLMs) and multi-agent AI systems to analyse documents and generate intelligence outputs. When you submit content for analysis:
- Your documents are processed by AI models to produce structured assessments, including the Analytical Council deliberation.
- We do not use your submitted content, or any data derived from it, to train, fine-tune, evaluate, or otherwise improve any AI or machine-learning model — ours, a sub-processor's, or any third party's. This commitment is also stated in our Terms of Service and our Data Processing Addendum.
- AI-generated outputs are provided as analytical tools, not as investment advice or professional recommendations.
- Processing occurs on secure infrastructure. Data transmitted to third-party AI providers (e.g., Anthropic) is governed by their data processing agreements, which prohibit training on customer data.
5. Knowledge Graph
Our Knowledge Graph aggregates intelligence about companies, investors, sectors, and market patterns. Data in the Knowledge Graph is organised into confidentiality tiers:
- Public (Tier 1): Information derived from publicly available sources. Accessible to all users.
- Anonymised (Tier 2): Aggregated patterns and insights with company identities removed.
- Internal (Tier 3): Data shared during analysis engagements. Accessible only to authorised Manthan Intelligence personnel.
- Engagement-confidential (Tier 4): Sensitive data such as cap tables, burn rates, and fundraise status. Scoped to the specific engagement and never shared beyond it.
Your uploaded content is never added to the Knowledge Graph without your explicit consent. Where you do consent, anything that enters the Knowledge Graph is anonymised and stripped of identifying details.
6. Data Retention
We retain your data as follows:
- Account information: For the duration of your account and 12 months after closure.
- Uploaded content: For the duration of your subscription. Deleted within 30 days of account closure or upon request.
- Analysis outputs: For the duration of your subscription and 6 months after, unless you request earlier deletion.
- Usage and technical data: Up to 24 months from collection.
- Payment data: As required by applicable tax and financial regulations (typically 7 years).
7. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data (subject to legal retention requirements).
- Portability: Receive your data in a structured, machine-readable format.
- Restriction: Request restriction of processing in certain circumstances.
- Objection: Object to processing based on legitimate interest.
- Withdrawal of consent: Where processing is based on consent, withdraw at any time.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. International Transfers
Your data may be processed in jurisdictions outside your country of residence, including the United Kingdom, the United States, and India. Where we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses and data processing agreements with our service providers.
9. Security
We implement technical and organisational measures to protect your data, including:
- Encryption in transit (TLS 1.2+) and at rest.
- Access controls and authentication for all internal systems.
- Regular security reviews and monitoring.
- Data isolation between client environments (no cross-client data leakage).
- Audit logging of data access and processing activities.
No system is completely secure. If you discover a vulnerability, please report it to [email protected].
10. Children
Our Services are designed for professional use and are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through the Services before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the updated policy.
12. Analytics, Cookies, and Agent-Traffic Measurement
We measure how our website is used through two separate, deliberately decoupled mechanisms. We keep them separate because human visitors and automated agents are fundamentally different, and conflating them would be both inaccurate and privacy-invasive.
Human analytics — Google Analytics 4
We use Google Analytics 4 (GA4), a service provided by Google, to understand aggregate human visitor behaviour (such as pages viewed, sessions, and approximate engagement). GA4 sets first-party cookies and processes a pseudonymous client identifier. We configure GA4 with the following privacy protections:
- IP anonymisation is enabled — your IP address is truncated by Google before any processing or storage, and we never receive your full IP through GA4.
- We respect Do-Not-Track (DNT) — if your browser sends a Do-Not-Track signal, the analytics tag does not load and no request is sent to Google at all.
- No advertising or cross-site tracking features are enabled.
- We do not use GA4 data to identify you individually, and we do not combine it with the account or uploaded content described elsewhere in this policy.
Google processes this data as our processor under its own privacy policy. You can opt out of GA4 across all sites using Google's browser opt-out add-on, by enabling Do-Not-Track, or by blocking analytics cookies in your browser. Our website functions fully without analytics.
Agent-traffic measurement — counts only
A growing share of our visitors are not humans but AI agents and crawlers (for example, assistant browsers and
model crawlers) that read our public pages. Because these agents generally do not run JavaScript, GA4 does not
see them. We measure them separately at our content-delivery edge by classifying the
User-Agent header of each request against a published list of known agents. This mechanism:
- Stores counts only — aggregate daily tallies per agent class and per vendor. We do not store IP addresses, raw User-Agent strings, request bodies, or any personal data, and we keep no raw request logs.
- Is used to understand how discoverable our public content is to AI systems — a reach metric, not a profile of any individual.
- Never affects, blocks, or delays the response served to you.
This measurement applies to automated traffic. It is not a mechanism for tracking human visitors, who are covered by the GA4 disclosure above.
13. Contact
If you have questions about this Privacy Policy or our data practices, contact us at:
Manthan Intelligence
Email: [email protected]
Website: getmanthan.com