Privacy Policy

Manthan is a retrospective collection platform built on the principle of genuine anonymity. This privacy policy explains how we collect, use, and protect your data. We're committed to transparency — if something isn't clear, contact us at support@craskey.com.

For retrospective contributors: When you submit retrospectives anonymously through a Manthan board, we do not collect or store identifying information about you. Your retrospective is stored separately from any identifying data.

• Device fingerprinting: We use FingerprintJS to create a non-persistent device fingerprint. This helps us prevent spam and duplicate submissions, not to identify you. The fingerprint cannot be reversed to identify an individual.

• No IP logging: We do not store your IP address with your feedback.

• No account required: Anonymous contributors don't need to create an account or provide an email.

• What stays anonymous: Board admins can see the retrospective content, votes, and read status — but never the source.

• Service delivery: To operate the platform, process retrospective submissions, and show analytics to board owners.

• Security & abuse prevention: Device fingerprinting prevents spam, duplicate submissions, and platform abuse.

• Communication: To send you authentication emails, service updates, and support responses.

• Analytics: To understand how users interact with Manthan and improve our product.

• Legal compliance: To comply with laws, regulations, and valid legal requests.

• Where: Your data is stored on Supabase, which uses secure AWS facilities in the US and EU.

• Encryption: Data in transit is encrypted via HTTPS/TLS. We use Supabase's built-in encryption for sensitive fields.

• Access control: Only you (board admins) can access your organization's data. Manthan staff can only access data for debugging with explicit permission.

• Retention: Anonymous retrospectives are retained as long as your board exists. After account deletion, data is deleted within 30 days.

• Security practices: We perform regular security audits and follow industry best practices. Supabase is SOC 2 certified.

We do not sell your data. We share data only with:

• Supabase (Backend): Stores your data. Their privacy policy

• Groq (AI moderation): We send retrospective text (without attribution) to Groq's API to check for inappropriate content. Groq's privacy policy

• FingerprintJS: Device fingerprinting service. Their privacy policy

• Razorpay (Payments): If you upgrade to a paid plan, your payment is processed by Razorpay. We never see card details.

• Legal requests: We comply with valid court orders and government requests.

• Access: You can request a copy of your account data.

• Deletion: You can delete your workspace and all associated data at any time.

• Correction: You can update your profile information.

• Data portability: You can request an export of your boards and retrospective data.

• Opt-out: You can disable non-essential cookies and analytics.

To exercise these rights, email support@craskey.com.

• Authentication: We use session cookies to keep you logged in.

• Analytics: We use analytics (e.g., basic page view tracking) to understand usage patterns.

• Device fingerprint: FingerprintJS stores a fingerprint in your browser (client-side only, not tracked across sites).

If you're in the EU, your data may be stored in US or EU data centers. By using Manthan, you consent to this processing. We comply with standard contractual clauses required under GDPR.

Manthan is not intended for children under 13. We do not knowingly collect data from users under 13. If we become aware of such collection, we will delete it immediately.

We may update this policy as our platform evolves. We will notify you of material changes via email. Your continued use of Manthan means you accept the updated policy.

Questions or concerns about privacy? Reach out: