Data & privacy

MANKAIND is an AI-powered engineering workspace connecting programme documentation, engineering work and built-in quality management. This privacy policy explains how we handle personal data when you visit our website, contact us or use the platform. Our Terms of Service address the use of the workspace, ownership of engineering content and the responsibilities of MANKAIND and your organisation.

1. Who we are and our role

MANKAIND operates mankaind.ai. We act as a data controller for website enquiries and the administration of our customer relationships. When we process personal data in your organisation’s programme records, we follow its documented instructions and the applicable customer agreement and data processing agreement (DPA). The DPA governs that processing; the descriptions in this notice do not expand our permitted use of your programme data. Confidential engineering content remains protected by the customer agreement even when it does not contain personal data.

For privacy questions or requests, contact info@mankaind.ai.

2. Your programme records and AI processing

Your engineering content belongs to you. MANKAIND stores programme documentation, design decisions, version history and approval records in its systems to provide the service under your instructions.

When you use AI features, your requests and the relevant programme context are processed by our LLM providers under zero data retention arrangements. These providers do not retain the prompts and outputs they process. Programme records remain stored in MANKAIND; zero retention applies to LLM-provider processing.

No model training. Customer engineering content and usage metadata are not used to train, fine-tune or improve AI models, including our own, or provided to LLM providers for those purposes.

3. Information we collect

• Enquiries: your name and email address; for demo requests, your industry, product type and a short product description, any proposed meeting time and time zone, and an optional target delivery date; for quality & security pack requests, your company, optional role and the review topics you select; along with other information you include in your enquiry. If you book a meeting time, we create an event in our Microsoft 365 calendar and send you a calendar invitation.
• Enquiry source: with each demo or pack request, the campaign labels in the link you followed (UTM parameters), the website that referred you, the page you arrived on and, if you choose to answer, how you heard about us.
• Account information: user and organisation details, assigned roles and information needed to administer your account.
• Customer content: engineering documents, requirements, design decisions, risk and verification records, AI requests and responses, and approval history.
• Usage and technical information: session activity, feature usage, IP address, browser and device information. Usage metadata excludes the contents of your engineering documents.

4. Why we process personal data

• Providing the service: managing accounts, storing programme records and carrying out the work you request, under the customer agreement and documented instructions.
• Responding to enquiries: arranging demos and answering business questions, based on our legitimate interest in responding to requests or taking steps towards a contract.
• Operating and securing the service: support, troubleshooting and security reviews, based on our legitimate interests in maintaining a reliable service and protecting users.
• Communications: answering your requests and communicating about MANKAIND. Optional marketing requires consent where applicable law requires it; you may object to direct marketing at any time.
• Legal obligations: meeting applicable recordkeeping requirements and responding to lawful requests.

Where processing relies on consent, you may withdraw it. Where processing relies on legitimate interests, you may object as described in Section 9.

5. Access and security

Role-based access control (RBAC) determines who can view, edit and approve programme records according to assigned permissions. We protect records with encryption in transit and at rest and conduct security reviews. No method of storage or transmission can guarantee absolute security.

6. Service providers and international transfers

We use providers for hosting, LLM processing and customer support. Providers processing personal data on our behalf do so under data processing terms and only as necessary to deliver their services. LLM providers are subject to the retention and training restrictions in Section 2. We may also disclose information when required by law.

MANKAIND hosts programme records in the EU and US. Before onboarding, we confirm the applicable hosting location, LLM providers and other subprocessors for your programme. Hosting and LLM processing locations should be reviewed separately. Contact us for the applicable processing information. When personal data is transferred outside the EU/EEA, we use applicable safeguards, such as the European Commission’s Standard Contractual Clauses where required. You can contact us for information about those safeguards.

7. Retention and deletion

• Programme records: retained in MANKAIND to provide the service and maintain the programme record. Retention, export and deletion, including backup handling, follow the applicable customer agreement, terms of service and legal requirements.
• LLM processing: zero retention by our LLM providers, separately from records stored in MANKAIND.
• Usage metadata: up to 26 months, to operate and improve the platform.
• Contact and enquiry data: 24 months from your last interaction.
• Account data: for your subscription’s duration, plus 12 months after termination.

Legal recordkeeping obligations may require specific information to be retained longer. Contact us about the retention and deletion arrangements for your programme.

8. Cookies and website measurement

The platform uses essential session and authentication technologies to operate its services. These are separate from advertising and website measurement.

The public website sets no cookies and stores nothing on your device. We measure website use with Plausible Analytics, an EU-hosted, cookieless service. It records aggregated page views and actions, such as opening the demo form or a question, without setting cookies or storing IP addresses, and counts unique visitors with an identifier that changes daily. We cannot identify individual visitors from these statistics.

The enquiry source described in Section 3 is sent only with a request you submit and is kept with that enquiry, so we can understand which channels bring enquiries. If you follow a link to an external website, such as LinkedIn, that website’s own privacy and cookie policies apply.

Hosting and security services may still process technical request information as described above. If we introduce advertising or other tracking that requires consent, we will provide the applicable notice and ask for your consent before loading it. You can manage stored cookies through your browser; blocking essential session technologies may affect platform functionality.

9. Your privacy rights

EU/EEA: subject to applicable conditions, you may request access, correction, deletion, restriction or portability of your personal data, object to processing, withdraw consent and lodge a complaint with a supervisory authority. Withdrawal does not affect processing that was lawful before consent was withdrawn.

California: where the CCPA applies, you may request access, deletion or correction, opt out of sale or sharing, limit certain uses of sensitive personal information, and exercise your rights without discrimination. We do not sell your programme documentation. Our current website-tracking practices are described in Section 8.

Send requests to info@mankaind.ai. We may need to verify your identity before disclosing or changing personal data. We respond within the applicable legal period: normally one month for GDPR requests, and 45 days for CCPA access, correction or deletion requests. We will explain any permitted extension within the initial response period.

If your request concerns personal data in an organisation’s programme, contact that organisation or us. Where we process data on its behalf, we assist the organisation in responding under the applicable data processing terms.

10. Business users

MANKAIND is a service for professional teams and is not intended for children under 18. Contact us if you believe a child has provided personal data through our services.

11. Changes and contact

We may update this policy as our services and data practices change. We will notify you of material changes by email or through the platform. The date above identifies the latest revision. For questions about this policy, contact info@mankaind.ai.