Privacy Policy
Last updated: June 2026
1. Introduction
Manfarang (“we”, “us”, or “our”) provides an AI-powered lead generation service that automates lead generation and outreach for B2B businesses. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.
For questions about this policy or to exercise your data protection rights, contact us at support@manfarang.com.
2. Information We Collect
We collect the following types of information:
- Account information: Your email address and display name, collected when you sign up via Google or Microsoft OAuth.
- Business information: When you provide your website URL during onboarding, we analyze your publicly available content to understand your business using AI. This content is processed but not permanently stored. You also provide descriptions of your business, offerings, target market, and free value offers.
- Campaign data: Your campaign settings, email sequences, sending schedules, and any edits you make to AI-generated content.
- Lead data: We collect publicly available business contact information, including names, job titles, company names, and business email addresses, from third-party data providers for the purpose of B2B outreach. This data is sourced from our data providers, not collected directly from the individuals it pertains to. We do not collect personal data about individuals in their personal capacity; all lead data relates to professional and business context only.
- Email activity data: Outreach emails are sent from Manfarang-managed email accounts on your behalf. We store outbound email content for quality assurance purposes. When leads reply to outreach emails, we read and store the reply content for AI classification (positive, negative, or neutral) and display on your dashboard.
- Payment information: Payments are processed by Lemon Squeezy, our Merchant of Record. We do not store your credit card details. We receive confirmation of your subscription status and billing events from Lemon Squeezy.
- Analytics data: We use analytics tools to collect page views, product usage events, and device and browser information for the purpose of improving our service. Analytics are opt-in and GDPR compliant. See Section 6 for details.
3. How We Use Your Information
- To provide and maintain the Manfarang service
- To analyze your website content and understand your business using AI
- To discover and verify lead contact information via third-party data providers
- To generate personalized email sequences using AI
- To send outreach emails and follow-ups on your behalf from managed email accounts
- To classify incoming replies using AI and surface them on your dashboard
- To notify you when prospects express interest in your offer
- To process payments and manage subscriptions through our Merchant of Record
- To send transactional emails such as subscription and campaign notifications
4. AI Data Processing
Manfarang uses AI language model services for several core features. The following data may be sent to our AI provider for processing:
- Your website content
- Your business and offering descriptions (for campaign brief generation)
- Lead company information (for email personalization)
- Incoming reply text (for reply classification)
Data sent to our AI provider is processed in accordance with their data usage policies. Our AI provider does not use API inputs to train their models. We do not send your email account credentials or payment information to our AI provider.
5. Cookies and Local Storage
We use cookies and browser local storage as follows:
- Authentication cookies: Used to maintain your login session securely.
- Local storage: Used to remember your preferences such as theme settings and cookie banner dismissal.
We do not use advertising cookies or cross-site tracking of any kind.
6. Analytics and Tracking
We use privacy-focused, GDPR-compliant analytics tools to understand how our service is used and to improve the product. Analytics collection is opt-in: we only collect analytics data after you provide consent via our cookie banner. Our analytics tools collect:
- Page views and navigation patterns
- Product usage events
- Device and browser information
Session recording is not enabled. We do not sell your personal data. Analytics data is used solely to improve the website and product. You can opt out of analytics at any time by withdrawing consent via your browser cookie settings or by contacting us.
7. Third-Party Services
We use industry-standard third-party service providers for hosting, database management, analytics, AI processing, email delivery, and lead data enrichment. We select providers that maintain appropriate security and privacy standards.
The following categories of third-party services are used to operate Manfarang:
- Cloud hosting and infrastructure providers
- Database and authentication providers
- AI language model providers for content generation and classification
- Lead data enrichment and verification services
- Transactional email delivery services
- Analytics services
- Payment processing via our Merchant of Record, Lemon Squeezy
Each third-party service processes data in accordance with their own privacy policies. We share only the minimum data necessary for each service to function.
8. Data Storage and Security
Your data is stored securely on cloud infrastructure with encryption at rest and in transit. We use row-level security policies to ensure that each user can only access their own data. Access to production systems is restricted and monitored. While we take reasonable measures to protect your information, no method of transmission over the Internet is 100% secure.
9. Data Retention
We retain different categories of data for different periods:
- Account data: Retained while your account is active. Upon account deletion, all account data is permanently deleted within 30 days.
- Lead data: Retained for the duration of your active subscription plus 30 days after cancellation or account deletion.
- Email content: Outbound email content is retained for 90 days after sending for quality assurance purposes, then permanently deleted.
- Analytics data: Aggregated and anonymized after 12 months. Individual-level analytics data is not retained beyond this period.
If your subscription expires, your data is retained in a read-only state so you can resubscribe without losing your work. No data is retained after account deletion beyond the periods stated above.
10. Data Sharing
We do not sell, trade, or otherwise transfer your personal information to third parties. We share data only with the categories of third-party service providers listed in Section 7, solely for the purpose of operating the service. We may disclose your information if required by law or in response to valid legal process.
11. Your Rights
We are committed to compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws. You have the right to:
- Access your personal data
- Correct inaccurate personal data
- Request deletion of your personal data
- Export your data in a portable format
- Object to or restrict processing of your data
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, please contact us at support@manfarang.com.
12. Lead Data and Third-Party Rights
Lead contact information used in Manfarang is sourced from third-party data providers and consists of publicly available business contact information. We collect this data under the legal basis of legitimate interest in B2B marketing, in accordance with GDPR. Manfarang does not collect personal data about individuals in their personal capacity; all lead data relates to business and professional context only.
If you are a lead whose business contact information appears in Manfarang and you wish to exercise your data protection rights, including requesting removal of your information, please contact us at support@manfarang.com. We will remove your information from our systems promptly.
13. Minimum Age
Manfarang is intended for business professionals and is not available to anyone under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from someone under 18, we will delete it promptly.
14. International Data Transfers
Your data may be processed in various jurisdictions by our service providers, including in the United States and the European Union. We ensure appropriate safeguards are in place for all international data transfers, including standard contractual clauses where applicable, in accordance with GDPR requirements.
15. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of changes by updating the “Last updated” date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.
16. Contact
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at support@manfarang.com.