MadMantra

Privacy Policy

Last updated: July 2026

1. Information We Collect

We collect your email address, name, and Google account information when you sign up. We also collect company data, task results, emails sent/received, and analytics data generated by AI agents operating on your behalf.

2. How We Use Your Information

  • To provide and improve the Platform
  • To operate AI agents on your behalf
  • To send transactional emails (welcome, summaries, magic links)
  • To process payments via Stripe
  • To generate anonymized cross-company learnings (your data is never shared identifiably)

3. Data Sharing

We do not sell your personal data. We share data only with service providers necessary to operate the Platform: Stripe (payments), Resend (email), Neon (database), Render (hosting), and Anthropic (AI processing).

4. Google User Data and Limited Use

This section explains how MadMantra accesses, uses, stores, and protects data from your Google Account, and applies specifically to Gmail data accessed through Google's APIs.

What we access. Connecting your Gmail account is optional; MadMantra works without it. When you choose to connect it, we request only these Google OAuth scopes:

  • Send email on your behalf (gmail.send) — used solely to send the outreach and follow-up emails you have reviewed and approved, from your own Gmail account, so recipients receive them from you.
  • View your email messages and settings (gmail.readonly) — used solely to detect and read replies to the messages MadMantra sent on your behalf, so we can show those replies to you in MadMantra and automatically stop follow-ups to anyone who has responded.

How we use it. We use this Gmail data only to provide the user-facing features above. We identify replies by matching incoming messages to the email threads MadMantra sent on your behalf; we do not index or retain your broader mailbox. For matched replies only, we store limited information — sender, subject, a short snippet, and the message/thread identifiers — to display the reply and update your pipeline.

What we do not do. We do not:

  • use your Gmail data for advertising, or sell or rent it to anyone;
  • use your Gmail content to develop, improve, or train generalized or artificial-intelligence/machine-learning models;
  • allow humans to read your email, except (a) with your explicit consent for specific messages, (b) where necessary for security (e.g., investigating abuse), (c) to comply with applicable law, or (d) where the data is aggregated and anonymized for internal operations; or
  • transfer your Gmail data to others, except as needed to provide these features (e.g., infrastructure and email-delivery providers acting on our behalf), to comply with law, or in connection with a merger or acquisition with notice to you.

How we store and protect it. Your Google OAuth tokens are encrypted at rest using AES-256-GCM and transmitted only over encrypted (TLS) connections. You can disconnect your Google Account at any time within MadMantra or at myaccount.google.com/permissions; doing so immediately revokes our access and deletes the associated tokens.

Limited Use. MadMantra's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Cross-Company Learning

We extract anonymized, generalizable insights from agent executions across all companies. These learnings never contain company names, personal information, or identifying details. They are used to improve agent performance for all users.

6. Data Retention

Your data is retained as long as your account is active, including agent execution logs and any documents the AI agents produced for you. Upon account deletion, all data is permanently removed within 30 days. You may export your company data (code, documents, memory) at any time by contacting us.

7. Security

We use encryption at rest and in transit. Each company's data is isolated at the database level. Agent sandboxes are isolated with resource limits. We use passwordless authentication (no passwords stored).

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting hello@madmantra.com.

9. Contact

MadMantra is operated by Ilu Space Oy (Finland). For privacy inquiries: hello@madmantra.com