Privacy Policy
Effective November 13, 2026
This policy explains what Manjano, operated by Oliver Chibwe ("Manjano", "we"), does with personal information.
1. Two different roles
- Our own customers and visitors. For restaurant owners, staff and visitors to manjanohq.com, we decide how the data is used (we are the "controller"). This policy covers that.
- A restaurant's guests. When someone books a table, joins a newsletter or sends a request on a restaurant's website that runs on Manjano, the restaurant decides how that data is used. We only process it for them. Guests should read that restaurant's own privacy notice and contact the restaurant first. Our commitments to restaurants are in the Data Processing Agreement.
2. What we collect
- Sign-up and trial forms: name, email, phone, restaurant name, city, plan, restaurant type, opening hours, links and notes you give us.
- Account: email, sign-in records, and what admins do in the dashboard.
- Billing (when billing starts): handled by our payment provider. We see the plan, payment status and the last four digits of the card, not the full number.
- Messages: emails and support requests you send us.
- Technical: IP address, browser type and pages requested, in server logs kept by our hosting providers for security and troubleshooting.
We do not buy personal data and we do not knowingly collect data from children under 16.
3. Why we use it
- To set up and run your account and website.
- To contact you about your trial or account (you agreed to this on the sign-up form).
- To send product news if you asked for it. Every email has an unsubscribe link.
- To take payment, prevent abuse, fix problems and meet legal duties.
For people in the UK or EU, our legal bases are: performing our contract with you, your consent (marketing emails), and our legitimate interest in keeping the service secure and improving it.
4. Who we share it with
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We use these service providers, each under contract and only for the purpose shown:
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Website hosting | USA |
| Supabase | Database, sign-in, server functions | USA |
| Brevo | Sending email, mailing lists | EU (France) |
| Cloudflare | DNS and email forwarding | USA / global |
| Anthropic | AI drafting | USA |
| Stripe (when billing starts) | Payments | USA |
| Meta and Google | Only when a restaurant connects its own pages or reviews | USA |
We may also disclose information if the law requires it, or as part of a sale or merger of the business (we would tell you).
5. Cookies
manjanohq.com does not use advertising cookies. The admin dashboard stores a sign-in session in your browser so you stay signed in. If we add analytics, we will update this policy and ask for consent where the law requires it.
6. How long we keep it
- Trial sign-ups that never become customers: up to 12 months, then deleted.
- Customer accounts: for the life of the account, then 30 days for export, then deleted. Backups roll off within a further 30 days.
- Billing records: as long as tax law requires (usually 7 years).
- Marketing list: until you unsubscribe.
7. Security
Data is encrypted in transit. Access to the database is limited by row-level rules and admin sign-in. Secret keys are kept in our hosting providers' settings, not in code. No system is perfectly secure; if a breach affects your data we will tell you without undue delay.
8. Your rights
You can ask us to show, correct, delete or export your personal information, or to stop marketing emails. Email hello@manjanohq.com. We answer within 30 days.
- California residents: you have the rights to know, delete, correct and not be discriminated against for using them. We do not sell or share personal information.
- UK and EU residents: you also have the rights to object, to restrict processing, to withdraw consent, and to complain to your local data protection authority.
- Everywhere else: we honour the same requests wherever you live.
9. Transfers outside your country
We are based in the USA and most of our providers are too. If you are outside the USA, your data is transferred there. Where the law requires it, we rely on the EU Standard Contractual Clauses, the UK Addendum, or an equivalent safeguard.
10. Changes
We post updates here and change the date above. For material changes we email account holders.
11. Contact
Oliver Chibwe, operating as Manjano · Lake St Louis, Missouri, USA · hello@manjanohq.com