Privacy Policy

Last updated: 3 July 2026

This Privacy Policy explains what information MANIFEST (“we”, “us”) collects when you use manifest-ai.online (the “Service”), how we use it, and the choices you have.

1. Information we collect

• Account information: your username and/or email address and a hashed password. If you sign in with Google, we receive your basic Google profile (email, name, and a Google account identifier).
• Content you create: the worlds, scenes, assets, prompts, and projects you build or upload, plus any content you choose to publish to the community.
• Usage & technical data: credit usage, generation and rendering activity, log data, IP address, and basic device/browser information used to operate and secure the Service.
• Payment data: handled by Stripe. We do not store your full card details; we keep a Stripe customer reference and subscription status.

2. How we use information

• To provide, maintain, and improve the Service and your account;
• To run AI generation, rendering, credits, and billing;
• To display content you publish or share via a link;
• To secure the Service, prevent abuse, and enforce our Terms;
• To communicate with you about your account (e.g. verification codes, billing, support);
• To train and improve our own AI/ML models — including models that learn how users build and edit 3D scenes — using your prompts, editing actions, and generated content. You can turn this off at any time (see “AI model training” below); turning it off does not affect the rest of the Service.

2a. AI model training

To build our own AI features, we may use the data you generate while using the editor — your prompts, the manual and AI-assisted edits you make to a scene (the before/after of an operation), and the resulting scene code/assets — as training data for our own machine-learning models.

• Consent & control: You can enable or disable the use of your data for model training at any time from the editor’s privacy setting. When disabled, new editing activity is not written to our durable training corpus.
• Deletion: When you delete your account or use “delete my data,” your training records are deleted along with your projects and assets (see section 6).
• Minimisation: Do not enter personal or confidential information into prompts; prompt text is stored as you typed it.

3. AI processing

Prompts and inputs you submit to AI features are sent to the models and providers that power those features in order to generate your requested output. Do not submit information you consider confidential or sensitive in prompts. Some of these providers process data outside the UK/EEA, including in the United States and China (see section 4); by using an AI feature you instruct us to transfer the necessary inputs to that provider to fulfil your request.

4. Sharing & third parties

We share data only as needed to run the Service. Our AI/infrastructure sub-processors and the region where they process data include:

• Stripe (US/UK) — payment processing and subscription management;
• Google (US) — Google Sign-In, and Lyria / Gemini AI generation via OpenRouter;
• OpenRouter (US) — routing text, code, voice, and music generation requests to model providers;
• Tripo AI (US) — image/text-to-3D model generation;
• World Labs (US) — 3D world (Marble) generation;
• Blockade Labs (US) — AI skybox generation;
• Volcengine / Doubao “Seedance” (ByteDance) (China) — AI video generation. Prompts and any reference image you provide are sent to servers in China to produce the video.

Where a transfer leaves the UK/EEA, we rely on appropriate safeguards (such as Standard Contractual Clauses) and on the transfer being necessary to perform the service you requested. We do not sell your personal information.

5. Cookies & local storage

We use browser local storage to keep you signed in (session token) and remember preferences such as language. We do not use third-party advertising trackers.

6. Data retention

We keep account and content data while your account is active. You can delete projects at any time. You can also delete all of your data yourself from the editor (“delete my data”), which removes your projects, uploaded and generated assets, and your AI-training records from our servers. You can export a copy of your data first. You may also request deletion by email.

7. Your choices & rights

• Access, update, or delete your content from within the app;
• Turn the use of your data for AI model training on or off from the editor’s privacy setting;
• Export a copy of your data, or delete your data (including training records) from within the app;
• Cancel subscriptions from the Billing page;
• Request account/data deletion or a copy of your data by email.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.

8. Security

We use industry-standard measures (encryption in transit, hashed passwords, signed session tokens, access controls) to protect your data. No system is perfectly secure, but we work to keep your data safe.

9. Children

The Service is not directed to children under 13 (or the minimum digital-consent age where you live). We do not knowingly collect data from them.

10. Changes

We may update this Policy from time to time. Material changes will be posted here with an updated date.

11. Contact

Privacy questions or requests? Email manifestforcontact@gmail.com.

Terms of Service →