Privacy Policy

Manawaroa provides software development consulting. This policy describes what personal information we collect, how we use it, and how to contact us about it. It covers our website at https://manawaroa.io and our work with clients.

We collect information in four ways:

• Email you send us: your name, email address, and whatever you include in the message, such as a description of your project
• Engagement records: the contact details, business information, and project details in statements of work, proposals, and our working correspondence
• Billing information: the name, email address, billing address, and payment status on invoices, which are created and processed through Stripe
• Server logs: when you visit the website, our hosting provider may record your IP address, browser user agent, the pages requested, and the time of the request, as described below

Our website does not have user accounts, contact forms, or comment features. It does not set tracking cookies and does not use analytics or advertising services. We do not use third-party tracking pixels or social media widgets.

We never see or store your full card number, security code, or bank account details. Stripe handles payment details directly.

We use the information above to respond to you, to scope and perform your engagement, to send and collect invoices, to keep the records the law requires, and to protect our rights if there is a dispute.

We do not use your information for marketing lists and we do not send newsletters.

Invoices are issued and paid through Stripe, Inc. When you pay an invoice, Stripe collects your payment details under its own privacy policy, available at https://stripe.com/privacy. Stripe shares with us only what we need to confirm payment, such as the card brand, the last four digits, and the payment status.

Our website is hosted by Vercel. Like most hosting providers, Vercel may record standard server logs when you visit, including your IP address, browser user agent, the pages requested, and the time of the request. These logs exist for security and reliability, such as detecting abuse and diagnosing outages. We do not use them to identify or profile visitors. Vercel's handling of this data is described in its privacy policy.

We do not sell personal information, and we do not share it with advertisers or data brokers.

We share information only with service providers that help us operate, which today means Stripe for invoicing and payments, Vercel for website hosting, our email provider for correspondence, and AI tools used during engagements under the limits in our Responsible AI statement. Those AI tools do not train on what we send them, and your business data goes to them only when your statement of work approves it. We may also disclose information when the law requires it or to protect our legal rights.

If Manawaroa is acquired or merges with another business, client records may transfer to the successor under the same protections.

We keep records only as long as needed to provide the services, meet legal and tax obligations, and resolve disputes.

Email inquiries that do not lead to an engagement are deleted once they are no longer needed. Engagement records are kept while the engagement is active and afterward for as long as we need them to support the work and meet our contractual obligations. Invoices and payment records are kept for as long as tax and accounting rules require.

You can ask us at any time what personal information we hold about you, ask us to correct it, or ask us to delete it. Email privacy@manawaroa.io from the address we have on file, or tell us how to verify that the request is yours.

We respond within 10 business days. We will delete what we can, but we may need to keep invoices and other records that the law requires us to retain, and we will tell you if that applies.

Depending on where you live, you may have additional rights under local privacy law. We will honor those rights where they apply.

We take reasonable steps to protect client information against unauthorized access, loss, and misuse. No system is perfectly secure, but if a breach affects your information we will tell you promptly and as applicable law requires.

Our services are for businesses and adults. We do not knowingly collect information from anyone under 16. If you believe a minor has sent us personal information, email us and we will delete it.

We may update this policy from time to time. The effective date at the top shows when it last changed. If a change materially affects how we handle information from current clients, we will email them before it takes effect.

Privacy questions and requests: email privacy@manawaroa.io.