Privacy Policy
Effective Date: June 22, 2025
Last Updated: June 22, 2025
At Manthra ("we," "our," or "us"), a product of Covalence Systems Inc., a cybersecurity company incorporated in New Jersey, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website protection service and platform.
1. Information We Collect
1.1 Account Information
What we collect:
- Email address (required for account creation)
- Encrypted password
- Account creation date and last login
- Service tier (free or premium)
Why we collect it: To provide account access, authentication, and service delivery.
1.2 Usage and Activity Data
What we collect:
- Protection script generation and configuration
- Dashboard access and feature usage
- API requests and responses
- Login attempts and security events
Why we collect it: To improve our service, provide support, and monitor for abuse.
1.3 Technical Information
What we collect:
- IP addresses
- Browser type and version
- Device information
- Access timestamps
Why we collect it: For security monitoring, fraud prevention, and service optimization.
1.4 Protected Website Data
What we collect:
- Domain names you configure for protection
- Protection configuration settings
- Security event logs (when violations are detected)
Why we collect it: To provide protection services and monitor effectiveness.
2. Information Collected by Protection Scripts
When your website visitors access pages protected by Manthra, our protection scripts may collect limited technical information:
End-User Data (Your Website Visitors):
- Browser characteristics and capabilities
- Window and screen dimensions
- JavaScript execution timing
- Developer tools detection events
- Domain validation results
Purpose: This data is processed locally in the browser for real-time protection and is not transmitted to our servers unless a security violation is detected.
3. How We Use Your Information
We use the information we collect to:
- Provide Service: Deliver protection scripts and security monitoring
- Account Management: Authenticate users and manage subscriptions
- Security: Detect and prevent abuse, fraud, and unauthorized access
- Support: Respond to inquiries and provide technical assistance
- Improvement: Analyze usage patterns to enhance our service
- Communication: Send important service updates and security notifications
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
4.1 Service Providers
We may share information with trusted service providers who assist us in operating our platform:
- Database Hosting: MongoDB Atlas for secure data storage
- Payment Processing: Stripe or similar for premium subscriptions
- Email Services: For account notifications and support
- Analytics: For service improvement and security monitoring
4.2 Legal Requirements
We may disclose information when required by law or to protect our rights, property, or safety, or that of others.
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets involving Covalence Systems Inc. or Manthra, your information may be transferred as part of that transaction.
5. Data Security
We implement appropriate technical and organizational measures to protect your information:
- Encryption: All data is encrypted in transit and at rest
- Access Controls: Strict access limitations and authentication requirements
- Monitoring: Continuous security monitoring and incident response
- Regular Audits: Periodic security assessments and updates
6. Data Retention
We retain your information for as long as necessary to provide our services:
- Account Data: Retained while your account is active and for 90 days after deletion
- Usage Logs: Retained for 12 months for security and improvement purposes
- Security Events: Retained for 24 months for fraud prevention
- Payment Data: Retained as required by law and payment processors
7. Your Rights and Choices
7.1 Access and Portability
You have the right to access and download your personal data. Contact us to request a copy of your information.
7.2 Correction
You can update your account information through your dashboard or by contacting us.
7.3 Deletion
You can delete your account at any time through your dashboard. This will permanently remove your personal data within 90 days.
7.4 Opt-Out
You can opt out of non-essential communications through your account settings or by following unsubscribe links in emails.
8. Cookies and Tracking
We use cookies and similar technologies to:
- Authentication: Maintain your login session securely
- Preferences: Remember your settings and configurations
- Analytics: Understand how our service is used
- Security: Detect and prevent abuse
You can control cookies through your browser settings, but this may affect service functionality.
9. Third-Party Services
Our service integrates with third-party providers:
- MongoDB Atlas: Database hosting with their privacy policy
- Payment Processors: For premium subscriptions with their privacy policies
These services have their own privacy policies and practices.
10. International Data Transfers
Your information may be processed and stored in countries other than your own. We ensure appropriate safeguards are in place for international transfers.
11. Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.
12. California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising privacy rights
13. European Union Rights
If you are in the EU, you have rights under the General Data Protection Regulation (GDPR):
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or through our service. The "Last Updated" date at the top indicates when the policy was last revised.
15. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Your Privacy Matters: We are committed to transparency and protecting your privacy. This policy applies to both the Manthra platform and the protection services we provide for your websites.