1. Our commitment

ManücciFlow (a product of Manucci Group, United Kingdom) is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and, where applicable, the EU GDPR. We process personal data lawfully, fairly, and transparently.

2. Lawful basis for processing

Contract: Processing necessary to provide the ManücciFlow service you signed up for.
Legitimate interests: Security monitoring, fraud prevention, and product improvement.
Consent: Marketing communications, where you have explicitly opted in.
Legal obligation: Compliance with applicable financial and tax regulations.

3. Your rights

Under UK GDPR, you have the following rights. To exercise any of them, email privacy@manucci.ai. We respond within 30 days.

Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Correct inaccurate or incomplete data.
Right to erasure: Request deletion of your data ("right to be forgotten"), subject to legal retention requirements.
Right to restrict processing: Request that we limit how we use your data while a dispute is resolved.
Right to data portability: Receive your data in a machine-readable format.
Right to object: Object to processing based on legitimate interests, including direct marketing.
Rights related to automated decision-making: We do not make solely automated decisions that produce significant legal effects.

4. Data transfers

Your data is stored in EU/EEA data centres via Google Cloud (Firebase). Where data is transferred outside the EEA (e.g. to Plaid for bank connectivity in the US), we rely on Standard Contractual Clauses (SCCs) or equivalent adequacy mechanisms.

5. Data protection officer

We do not currently have a designated DPO as our processing does not meet the thresholds requiring one under UK GDPR Article 37. All data enquiries are handled by our privacy team at privacy@manucci.ai.

6. Supervisory authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk. If you are located in the EU, you may contact your local data protection authority.

7. Contact

Data protection enquiries: privacy@manucci.ai

GDPR Statement