Privacy & Cookie Policy

1. Who we are

Manta is a group-trip planning service operated by Manta Travel Pte. Ltd.. For any privacy question, or to exercise your rights, contact us at support@wemanta.com.

2. Information we collect

We collect only what we need to run the service:

• Account & profile: your email address (for magic-link sign-in), display name, and optional profile details you add (such as avatar, dietary notes, or travel preferences).
• Trip content: the trips, wishlists, plans, surveys, documents, journal entries, and messages you and your group create.
• Usage & analytics: first-party events about how the product is used (pages and screens viewed, features used), tied to an anonymous identifier — see “Cookies” and “Analytics & your choices” below.
• Device & log data: standard technical information such as IP address, browser/user-agent, and approximate country (from your network), used for security and to operate the site.

We do not sell your personal data, and we do not use advertising or cross-site tracking networks.

3. Cookies & similar technologies

We use a small number of first-party cookies and local storage. Essential ones are needed to run the site and remember your choices; analytics ones are non-essential and, in the EU/UK, are only set after you opt in.

You can change or withdraw your choice at any time from “Cookie preferences” in the footer (or in your account settings). Declining analytics never affects access to the service.

4. How we use information

• To provide and operate the service — create and manage trips, sign you in, and sync your group’s content.
• To keep the service secure and reliable, and to prevent abuse.
• To understand and improve how the product is used, through analytics (only with consent where required) - see “Analytics & your choices”.
• To communicate with you about your trips and account (for example, magic-link sign-in emails).
• To send you marketing or product-update emails, where you have opted in - you can unsubscribe at any time (see “Marketing communications”).

5. Analytics & your choices

We collect analytics first-party: your browser sends events to our own servers, using an identifier we set ourselves, and no analytics vendor’s code runs on your device.

We then share a copy of those events with Mixpanel, our product-analytics provider, so we can understand how the product is used and improve it. Mixpanel receives the events and an anonymous identifier. It does not receive your name or your email address. Mixpanel processes the data in the United States on our behalf, under a data-processing agreement and appropriate transfer safeguards.

We never sell your data, and we do not share it with advertising networks.

If you are in the EU, UK, or EEA, we do not set analytics cookies or collect analytics events until you accept them. Elsewhere, analytics are on by default and you can opt out at any time. Either way, your choice is remembered and you can change it whenever you like via “Cookie preferences”.

If you decline analytics, we do not share your events with Mixpanel.

6. Marketing communications

We send marketing emails (such as product updates and launch news) only to people who have opted in. Where consent is unclear, we confirm your email address first (double opt-in) before adding you to a marketing list.

Every marketing email includes an unsubscribe link and supports one-click unsubscribe, and you can withdraw your consent at any time. When you unsubscribe - or if your address bounces or reports a message as spam - we add you to a suppression list and stop sending you marketing across all of our lists. We keep a record of the consent wording you agreed to and when.

Transactional messages - such as magic-link sign-in, invitations, and notifications about your trips and account - are part of using the service and are not marketing; you receive these while you have an account, regardless of your marketing choices.

7. Legal bases & notices (GDPR / PDPA)

Where the EU/UK GDPR applies, we rely on: performance of a contract (to provide the service), your consent (for non-essential analytics cookies and for marketing emails), and our legitimate interests (to secure and improve the service), as appropriate.

Where Singapore’s PDPA applies, this policy serves as notice of the purposes for which we collect, use, and disclose personal data, and we collect it with your consent (including deemed consent where permitted by law).

8. How we share information

We share personal data only as needed to run the service:

• With your trip group — content you add to a trip is visible to the people you share that trip with, according to the trip’s visibility settings.
• With service providers (such as cloud hosting and email delivery) that process data on our behalf under appropriate safeguards.
• With Mixpanel, our product-analytics provider, which receives your analytics events and an anonymous identifier (never your name or email address) so we can understand how the product is used. We do not share these events if you have declined analytics.
• Where required by law, or to protect the rights, safety, and security of our users and the service.

9. International transfers

We operate from Singapore and use reputable cloud providers that may process data in other countries. Where personal data is transferred across borders, we take steps to ensure it remains protected, using appropriate safeguards where required.

In particular, our product-analytics provider (Mixpanel) processes analytics events in the United States. We rely on standard contractual clauses for that transfer.

10. Data retention

We keep personal data for as long as your account is active or as needed to provide the service, and thereafter only as long as necessary to meet legal, security, or legitimate-business needs. You can ask us to delete your account and associated personal data.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent.

To exercise any of these, contact support@wemanta.com. You may also have the right to complain to your local data-protection authority.

12. Security

We use technical and organisational measures — including encryption in transit, access controls, and authentication — to protect personal data. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.

13. Children

Manta is not directed to children, and we do not knowingly collect personal data from children without appropriate consent. Trips that involve minors are subject to additional safeguards as we roll them out. If you believe a child has provided us personal data without consent, contact us and we will take appropriate steps.

14. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you.

15. Contact us

Questions about this policy or your personal data? Email support@wemanta.com.