manva.ai
Login Get Started
Privacy

Privacy Policy

Last updated: April 25, 2026  ·  Effective date: March 1, 2026

Terms of Service Privacy Policy Refund Policy

Plain English summary: We collect only what we need to run the platform. We never sell your data. We store it securely in India. You can delete your account and all data at any time. We use trusted third-party services like Razorpay, Anthropic, and Meta APIs — each with their own privacy practices.

Table of Contents

  1. Who We Are
  2. Information We Collect
  3. How We Use Your Information
  4. Meta Platform Data (Instagram, Facebook, WhatsApp)
  5. WhatsApp Business API
  6. Information Sharing
  7. Data Security
  8. Cookies
  9. Your Rights & Data Deletion
  10. Data Retention
  11. Children's Privacy
  12. Changes to This Policy
  13. Contact Us

1. Who We Are

Manva.ai ("we", "our", "us") is a social media design and automation platform for Indian businesses, operated at manva.ai. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our Service.

Data Controller: Manva AI · hello@manva.ai · manva.ai

By using Manva.ai, you consent to the data practices described in this policy.

2. Information We Collect

Data TypeWhat We CollectWhy
Account InfoName, email address, password (hashed), business name, categoryTo create and manage your account
Billing InfoPlan type, payment status (Razorpay handles card data — we never see it)To manage subscriptions
Platform TokensOAuth tokens for Instagram, Facebook, YouTube, Pinterest, Threads, WhatsAppTo post content on your behalf
DesignsCanvas JSON, design names, export historyTo save your creative work
Social AnalyticsPost reach, likes, comments (fetched from connected platforms)To show you performance dashboards
WhatsApp MessagesMessage templates, campaign recipient lists, delivery statusTo operate the WhatsApp Business messaging feature
Usage DataPages visited, features used, login timestampsTo improve the product
Device InfoBrowser type, IP address, screen sizeFor security and debugging

3. How We Use Your Information

We use your information to:

  • Provide, operate, and maintain the Manva.ai platform
  • Process payments and manage subscriptions via Razorpay
  • Post content to your connected social media accounts at your explicit direction
  • Send WhatsApp messages on behalf of your business via the WhatsApp Business API
  • Send transactional emails (welcome, password reset, payment confirmations)
  • Send product updates and tips (you can unsubscribe at any time)
  • Generate AI captions and content using Anthropic APIs
  • Detect and prevent fraud and abuse
  • Improve the platform based on anonymised usage patterns

We do not sell, rent, trade, or use your personal information — including data obtained from Meta APIs — for advertising purposes or to create profiles for third-party advertisers.

4. Meta Platform Data (Instagram, Facebook, WhatsApp)

When you connect your Instagram, Facebook, or WhatsApp Business account to Manva.ai, we request the following permissions. We access only what is necessary to provide the features you use:

Permission What we use it for What we never do
instagram_basic Read your Instagram profile, username, follower count Never share with third parties
instagram_content_publish Publish posts, reels, carousels to Instagram on your behalf Only what you explicitly schedule or approve
instagram_manage_insights Read reach, impressions, engagement data for your posts Shown only in your dashboard — never sold
pages_show_list See Facebook Pages you manage to link to Instagram No posting without your explicit instruction
pages_manage_posts Publish posts to your Facebook Page Only posts you schedule or approve
pages_read_engagement Read likes, shares, reach for Facebook Page posts Analytics shown only to account owner
whatsapp_business_messaging Send WhatsApp messages and manage templates via WhatsApp Business API Only sent when you trigger them
whatsapp_business_management Manage WhatsApp Business account settings and phone numbers No changes without your direction
Meta data retention: OAuth access tokens are stored encrypted using AES-256. When you disconnect a platform or delete your account, tokens are immediately revoked with Meta and deleted from our systems within 24 hours. We do not retain Meta user data after disconnection. Your use of connected Meta platforms is also subject to Meta's Privacy Policy.

We use Meta platform data only to provide the services you have requested. We do not use this data for any purpose other than what is described in this policy and the permissions we have requested.

5. WhatsApp Business API

Manva.ai integrates with the WhatsApp Business Platform (Meta) to allow businesses to send marketing and transactional messages to their customers. Here is how we handle WhatsApp data:

What we do

  • Send WhatsApp messages (template messages and session messages) on behalf of your business to your customers
  • Store message templates you create within Manva.ai
  • Log message delivery status (sent, delivered, read, failed) for your reporting
  • Store customer phone numbers you upload for campaigns

What we never do

  • We do not read, store, or analyse the content of your customers' inbound WhatsApp messages beyond what is required to route them to your dashboard
  • We do not sell or share your customers' phone numbers with any third party
  • We do not send messages without your explicit instruction or scheduled automation you set up
  • We do not use WhatsApp messaging data to train AI models

Recipient consent

You (the Manva.ai user / business) are solely responsible for ensuring that your message recipients have opted in to receive WhatsApp communications from your business, in compliance with WhatsApp's Business Policy and applicable laws (including the TCPA, GDPR, and India's DPDP Act).

Data deletion

Recipient phone numbers and message logs are deleted when you delete your Manva.ai account or when you manually delete a campaign. You can also contact us at privacy@manva.ai to request deletion of specific campaign data.

WhatsApp messaging through Manva.ai is subject to the WhatsApp Business Policy and WhatsApp Commerce Policy. By using our WhatsApp feature, you agree to comply with these policies.

6. Information Sharing

We share your information only with the following service providers, and only to the extent necessary to operate the platform:

  • Razorpay — Payment processing. Razorpay's Privacy Policy governs payment data. We never see or store your card details.
  • Anthropic — Your product descriptions and prompts are sent to generate AI captions. These providers have their own data retention policies.
  • Meta (Instagram, Facebook, Threads, WhatsApp) — OAuth tokens and content are used to interact with Meta APIs on your explicit instruction.
  • Google (YouTube) — OAuth tokens used for YouTube posting at your direction.
  • Pinterest — OAuth tokens used for Pinterest posting at your direction.
  • Legal authorities — If required by applicable law, court order, or to protect our rights and users from fraud.

We do not sell, rent, or trade your personal information — including any data received from Meta APIs — to any third party for any purpose, including advertising.

7. Data Security

We implement the following security measures to protect your data:

  • All data transmitted between your browser and our servers is encrypted via HTTPS (TLS 1.2+)
  • Passwords are stored using bcrypt hashing — we never store plain text passwords
  • OAuth access tokens (Meta, Google, Pinterest) are stored encrypted using AES-256-CBC
  • Our servers are protected by firewalls and strict access controls
  • Regular security reviews and dependency updates
  • Rate limiting on all API endpoints to prevent abuse

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects you, we will notify you within 72 hours of becoming aware of it.

8. Cookies

We use minimal cookies and localStorage to:

  • Keep you logged in (JWT authentication token stored in localStorage)
  • Remember your preferences and settings
  • Maintain session state within the dashboard

We use Google Analytics to understand aggregate usage patterns. Google Analytics cookies are only loaded after you accept analytics cookies via our consent banner. We do not use advertising cookies or tracking pixels. We do not participate in third-party advertising networks. You can change your cookie preferences at any time by clearing your browser's localStorage entry for manva_cookie_consent.

9. Your Rights & Data Deletion

Under applicable Indian law (DPDP Act 2023) and global best practices, you have the right to:

  • Access: Request a copy of all personal data we hold about you
  • Correction: Update incorrect or incomplete information via Settings → Profile
  • Deletion: Delete your account and all associated data from Settings → Account → Delete Account. All data is permanently erased within 30 days.
  • Data Portability: Export your designs and data at any time
  • Withdraw Consent: Disconnect any platform integration at any time from Settings → Platforms. We immediately revoke the token with the platform provider.
  • Unsubscribe: Opt out of marketing emails via the unsubscribe link in any email

How to delete your data

You can delete your Manva.ai account and all associated data in two ways:

  • In-app: Settings → scroll to bottom → "Delete Account" — all data is deleted immediately
  • By email: Send a deletion request to privacy@manva.ai with subject line "Data Deletion Request — [Your Email]". We will confirm deletion within 30 days.
Meta data deletion: If you connected Instagram, Facebook, or WhatsApp accounts, disconnecting them from Settings → Platforms will immediately revoke our access tokens with Meta. Your Meta account data is not affected — only our stored copy of the access token is deleted.

To exercise any of these rights, contact us at privacy@manva.ai. We will respond within 30 days.

9b. Cross-Border Data Transfers

Manva.ai stores your primary data on servers located in India. However, some of our third-party service providers may process data outside India to deliver their services:

  • Anthropic — United States — used for AI-generated captions, content, and website copy
  • OpenAI — United States — used for carousel, meme, and image generation features
  • Cloudinary — United States / EU — used for image hosting and optimization
  • Google (Analytics, YouTube, OAuth) — United States — used for analytics and platform integrations
  • Meta (Instagram, Facebook, WhatsApp APIs) — United States — used for social media posting and messaging
  • Razorpay — India — payment processing (data stays in India)

These service providers process data solely to deliver their services to us and are bound by their own privacy policies and data protection standards. We only share the minimum data necessary for each service to function. By using Manva.ai, you consent to this limited transfer of data to these trusted service providers.

9c. AI-Generated Content Disclosure

Manva.ai uses artificial intelligence (AI) services including Anthropic and OpenAI to generate:

  • Social media captions and hashtags
  • Product descriptions and marketing copy
  • Website content and landing page text
  • Image suggestions and design elements

Important: Content generated by AI may not always be accurate, original, or appropriate for your specific context. You are responsible for reviewing, editing, and approving all AI-generated content before publishing. Under applicable regulations (including the EU AI Act), you may be required to disclose that content was generated with AI assistance when publishing it. We encourage all users to comply with local disclosure requirements in their jurisdiction.

Your prompts and inputs may be processed by our AI providers (Anthropic, OpenAI) to generate responses. We do not use your content to train AI models. Please refer to each provider's data usage policies for details.

10. Data Retention

We retain your data as follows:

  • Account data: Retained while your account is active; deleted within 30 days of account deletion request
  • Design files: Deleted immediately upon request or account deletion
  • Payment records: Retained for 7 years as required by Indian financial regulations (GST Act)
  • Analytics cache: Refreshed every 24 hours; historical data retained for 90 days
  • Meta OAuth tokens: Deleted immediately upon disconnection or account deletion
  • WhatsApp campaign data: Retained until you delete the campaign or your account
  • Server logs: Retained for 30 days for security monitoring, then auto-deleted

11. Children's Privacy

Manva.ai is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@manva.ai and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the platform. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the platform after changes constitutes your acceptance of the updated policy.

13. Contact Us

For privacy-related questions, data access or deletion requests:

  • Company: Sravs Online Solutions Private Limited
  • Address: No. 10-3-34, Vidyanagar, Karimnagar 505001, Telangana, India
  • Email: privacy@manva.ai
  • Phone: +91-8921427573
  • Subject line: "Privacy Request — [Your Name]"
  • Website: manva.ai
  • Response time: Within 30 days
For complaints about data handling, you may also contact the Data Protection Board of India once established under the DPDP Act 2023, or your local data protection authority.
Terms of Service Privacy Policy Refund Policy Home
© 2026 Manva.ai · All rights reserved