Privacy Policy

The short version

• You can search and use a conversation without an account, and without giving us your name or email.
• We don’t sell data, show ads, use advertising or analytics trackers, or send marketing to readers.
• A review is published under the display name you choose, never your email address.
• Where we need to tell visitors apart, for limits and abuse checks, we store a hash of the IP address instead of the address itself.
• You can have your account, its conversations and its reviews deleted by writing to us.

1. What we store, and why

When you browse and search.

We log the searches people run (the words, and a hash of the IP address) to improve results and to spot abuse. Our servers and CDN keep standard access logs, which record IP addresses and browser details, for security and troubleshooting.

When you use a conversation.

We store the conversation itself (what you wrote, Manzia’s replies, and the steps) and any files you upload to it, so it can continue and you can come back to it. When Manzia hands you off to an Agent we record which Agent, when, and a hash of your IP address. That record is what lets you review the Agent later. Your browser keeps the key that reopens the conversation; we store only a hash of that key.

When you share a tab.

A picture of the tab is taken only when it changes the answer. An AI model reads it once, and it is deleted in the same turn. Storage removes anything left over within a day. The conversation records only that a step was watched. What Manzia can and can’t see has the details.

When an Agent posts a review for you.

The Agent’s vendor sends us your rating, review and display name, an identifier the vendor uses for you, and the session’s id and start time. We don’t receive your name or email from the vendor. We store only a salted hash of the vendor’s identifier, which lets us recognise a second review from you as a follow-up. We cannot tell who you are from it. If the vendor sends your email address, we do not store it.

When you have a Manzia account.

• The account is your email address. We use it to sign you in with a one-time code, keep your conversations with you, and tell you when a review is published, declined, or replied to (replies only if you asked).
• Your saved conversations and their files are kept as described above, and a list of the Agents you opened from them.
• A review posted from your account is stored with your account’s id and email address, the conversation it came from, and when you opened the Agent. Only the rating, text, display name and date are ever shown publicly.
• For the first 24 hours of an account we use its age to decide that its reviews are checked by a person.

When you request reviews on an Agent.

We store your email address so we can send the confirmation code, and a hash of it so one person counts once. We also store the reason you gave, if any, and a hash of your IP address. If you ticked “Email me when it starts taking reviews”, we keep the address until we have sent that one email, then delete it. If you didn’t, we delete it as soon as you confirm. The code itself is stored only as a hash and is deleted once used.

When you vote a review helpful or flag one.

We store a hash of your IP address with the vote or flag, so abuse can be traced. A vote also stores a one-way fingerprint, built from your browser, network and a random id kept in your browser, so one person counts once. A flag also stores the reason and any detail you wrote.

When you contact us.

The contact form emails your message to our team. The site itself stores nothing from it.

When you are a vendor.

We store your name and work email, your organization’s details (legal and display name, website, country) and team, the Agents you claim with the evidence you give, the profiles you publish, your API keys (as hashes) and your usage. Payments are handled by Stripe, which receives your email and organization id; Manzia never sees card details.

About an Agent’s publisher.

Manzia lists Agents from public sources. We may email the publisher of an unclaimed Agent, using a business address it publishes, to tell it that people want to review its Agent. Every such email has an opt-out, and we honour it.

2. AI processing

Manzia uses AI models (Anthropic’s Claude, run in Amazon Bedrock) to understand your request, write steps and answers, read a shared tab’s picture, draft and check reviews, find personal data in reviews so it can be masked, and summarise an Agent’s reviews. Amazon Bedrock does not use what we send it to train models. Decisions on reviews follow fixed rules, a review the models are unsure about goes to a person, and you can ask a person to look again at any decision by writing to info@manzia.com.

3. Who processes it for us

• Amazon Web Services (United States): hosting, storage, databases, email delivery, and AI models through Amazon Bedrock.
• Stripe: vendor subscriptions and payments.
• YouTube: only if you press play on a tutorial video. Until then nothing loads from YouTube except the preview image, which is requested without telling YouTube which page you were on.

We share data with no one else, except where the law requires it.

4. Cookies and browser storage

• Sign-in cookies, set only when you sign in: mz_auth holds a sign-in in progress for 10 minutes; mz_reader keeps you signed in for up to 30 days. Both are encrypted, and the page’s scripts cannot read them.
• Browser storage keeps the keys to your conversations on this device, which reviews you marked helpful, the comparison you are building, and the last email address you typed into a review request, so you don’t retype it. It stays in your browser and you can clear it at any time.

There are no advertising, analytics or third-party tracking cookies.

5. How long we keep it

• A conversation kept only on a device: 90 days from when it started, with its files.
• A conversation saved to your account: until you delete it in My workflows, or delete your account.
• A shared tab’s picture: deleted in the turn it was taken for; at most one day.
• Reviews: while they are published. A declined review is kept as a moderation record.
• A review request: one year. The email address goes sooner, as described above.
• Sign-in codes: 10 minutes.
• Server, CDN and event logs: up to 90 days.
• Audit records of moderation decisions and of emails we sent: 7 years, in storage that cannot be altered. They hold hashed identifiers; the address behind a hash is erased on request.
• Vendor accounts: while the account is open, and afterwards as long as the law requires us to keep billing records.

6. Deleting your account

There is no delete button; deletion is a request. Write to info@manzia.com from the address on the account and ask for it to be deleted. We may ask you to confirm before we act. Deletion erases:

• the account and its email address, so you can no longer sign in with it;
• every conversation saved to it, with its transcript, files and pictures;
• the record of which Agents you opened from them;
• the reviews you posted from it. They come off the site, stop counting toward any rating, and the email address stored with them is erased.

We keep a record that the account was deleted, and the moderation records of its reviews, which are evidence about the reviews, not your account. A conversation you never saved to the account stays only on the device you used and expires on its own after 90 days. To withdraw a review an Agent posted for you, write to us as well. Because we never knew who you were, tell us the Agent and roughly when, and we’ll find it with the vendor’s help.

7. Your rights

Depending on where you live, you may have the right to see the data we hold about you, correct it, delete it, object to or restrict how we use it, or receive a copy of it. Write to info@manzia.com and we will answer within 30 days. You can also complain to your local data protection authority.

8. Security

Data is encrypted in transit and at rest. Access inside Manzia is limited to the services and staff that need it, and the staff console uses separate accounts with two-factor sign-in.

Changes

• October 2, 2026. First published.A review no longer needs a one-time link from the vendor and a code emailed to you. An Agent posts them for you during a session, or you post them from a Manzia account at the end of a Manzia conversation, so this policy describes what each of those stores. It replaces the “Privacy & Terms” placeholder.