Privacy Policy

Last updated: 18 May 2026

Manalice is a software licence management platform. This privacy policy explains what personal data we collect, how we use it, and the rights you have over your information. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and UK GDPR.

1. Information We Collect

When you use Manalice, we collect information you provide directly, such as your name, email address, company name, and job title when you request a demo or create an account. We also collect usage data such as login timestamps and feature interactions to improve our service.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our software licence management platform
  • Communicate with you about your account, demo requests, or support queries
  • Send you product updates and security notifications
  • Analyse usage patterns to improve the user experience
  • Comply with legal obligations and enforce our terms of service

3. Data Storage and Security

Your data is stored securely on AWS infrastructure in the us-east-1 region. We use encryption at rest (per-tenant KMS keys for S3, SSE for DynamoDB) and encryption in transit (TLS 1.2) to protect your information. We implement 7-layer tenant isolation to ensure your data is completely separated from other customers.

4. Data Sharing

We do not sell your personal information. We may share data with service providers who help us operate our platform:

  • AWS — cloud hosting, database, storage, and encryption services
  • Amazon Cognito — authentication and user management
  • Amazon SES — transactional email delivery

These providers are bound by data processing agreements and process data only on our instructions.

5. Cookies

We use essential cookies only. These cookies are strictly necessary for the site to function and cannot be switched off. They include session cookies and consent preferences. We do not use analytics, advertising, or tracking cookies.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Audit logs are retained for 365 days. When a tenant is offboarded, data is deleted in accordance with our retention policies. You may request deletion of your data at any time.

7. Your Rights

Under GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your personal data
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to processing of your data for certain purposes

To exercise these rights, contact us at privacy@manalice.com. We will respond within 30 days.

8. Contact

If you have questions about this privacy policy or want to exercise your data rights, contact us at privacy@manalice.com.