Manten

Privacy Policy

Last updated: July 5, 2026

Manten ("Manten", "we", "us", or "our") is a service operated by HỘ KINH DOANH ÁI CHÂU, a household business (Hộ kinh doanh) registered in Vietnam (representative: PHAN THỊ ÁI CHÂU; business address: Ho Chi Minh City (Thành phố Hồ Chí Minh), Vietnam). This Privacy Policy explains what information we process, how we use it, and the choices you have.

Manten helps businesses respond to online customer reviews. We detect the language of a review, translate it, generate a draft reply using artificial intelligence, and notify the business owner so they can review, edit, and approve the reply before it is published.

1. Information We Process

Review data: the text and star rating of customer reviews, the reviewer's public display name where it is shown, and the translations and reply drafts we derive from them. Reviews may be written in any language.

Business and owner account data: your business and location details, your mobile phone number (used to send approval notifications), your preferred interface language, and the account identifier you sign in with (your Google account, or your email address for a sign-in link).

Connected-service credentials: when an owner connects Google Business Profile or a notification channel such as Zalo, we store the access and refresh tokens needed to operate that connection. These are encrypted at rest and never exposed to the browser.

Technical and usage data: standard server and access logs (such as IP address, device, and browser information) generated when you use the service, primarily through our hosting provider.

Cookies and similar technologies: we use only essential cookies and similar storage — to keep you signed in, to secure sign-in and connection flows (such as OAuth state), and to remember your language preference. We do not use advertising cookies or third-party analytics cookies.

2. How We Use Information

To detect the language of a review and translate it for the business owner.

To generate a draft reply using artificial intelligence.

To deliver approval notifications to the business owner.

To operate, secure, debug, and improve the service.

3. Artificial Intelligence Processing

To generate translations, summaries, and reply drafts, we send the review text, its star rating, and the reply text being translated or summarized (such as an AI-generated draft, a reply you edit, or an existing reply) to Anthropic's Claude API — the minimum needed for this purpose. We do not separately send the reviewer's name, email address, location, or other identifiers to the AI provider. However, if the review text itself contains personal data written by the reviewer (for example a name, phone number, or booking details), that data is processed by the AI provider as part of the text.

Under Anthropic's standard commercial API terms, data sent through the API is not used to train its models and is retained by Anthropic only for a limited period.

4. Google User Data and Limited Use

When a business owner connects their Google Business Profile, we access review data through Google APIs solely to provide and improve the features of Manten described in this policy.

Our operators may access review content only for limited operational purposes — onboarding a business, investigating a mis-linked profile, providing support, or responding to a security issue. We do not access this data for any other purpose.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, we do not use it for advertising, and we do not transfer it to others except as necessary to provide or improve user-facing features, with your consent, or as required by law or for security.

A reply is never published to Google automatically. The business owner must review and approve each reply before it is posted. Replies to negative or low-rated reviews always require explicit human approval.

Once an owner connects their account, we retrieve reviews through the Google Business Profile API. For demonstration, onboarding, or support purposes, some reviews may instead be entered manually for a business.

5. Notifications

We use the business owner's contact details to send notifications containing a link to review and approve a reply. Today these are delivered by SMS through Twilio, by Zalo (ZNS), and by LINE; WhatsApp support is planned. We will enable, for each owner, the channel that reaches them best. A notification contains only minimal information — the business name, the star rating, and a link to the approval page — and never the review text; it is never an automatic-publish action.

You can opt out of notifications at any time by contacting us at the address below.

6. Data Sharing and Disclosure

We do not sell your personal data.

We share data with the third-party sub-processors described in this policy only to operate the service. We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service.

7. International Data Transfers

Manten is operated from Vietnam. The sub-processors listed in this policy may process data on servers located outside Vietnam, including in the United States, Singapore, and Japan. The data transferred is limited to the categories described in section 1, and only to the extent each provider needs it for the purposes described in this policy — hosting and database infrastructure, AI translation and reply drafting, owner notifications, and owner sign-in.

These transfers are protected by contractual and technical safeguards: we share the minimum data necessary under each provider's data-processing terms, data is encrypted in transit (TLS), and credentials are encrypted at rest. Where Vietnamese law requires specific steps for a cross-border transfer — such as obtaining your consent, preparing transfer impact assessment dossiers, or notifying the competent authority — we comply with those requirements.

8. Data Retention

To operate the service, show owners their review history, and avoid processing the same review twice, Manten stores the data it derives to run the service — the AI-generated and owner-edited reply drafts and the approval and posting status — together with your business and account records in its own database. Each business's data is isolated at the database level so that one business cannot access another's (see Security).

Review content obtained from Google — such as review text, star ratings, and reviewer display names — and the translations we derive from it are kept only for the limited time needed to prepare and post a reply, and in any case for no more than 30 calendar days. After that they are deleted and re-fetched or regenerated from Google if needed again, rather than retained long-term. What we keep long-term is limited to the review's Google identifier (so we do not process it twice), the approval and posting status, the reply you approved, the non-verbatim summaries we generate from review content and their translations, and records we need for audit or legal purposes.

Retention periods differ by category of data: (a) review content obtained from Google and its translations — only for the limited time needed to prepare and post a reply, as described above; (b) reply drafts, approved replies, approval and posting status, review identifiers, and non-verbatim review summaries and their translations — for as long as your account is active, so we can show your reply history and avoid double-processing; (c) business and owner account data, including notification contact details and connected-service tokens — for as long as your account is active (tokens are deleted when a connection is removed); (d) notification delivery records — up to 12 months, for troubleshooting and abuse prevention; (e) server and access logs — short periods under our hosting provider's policies; (f) billing and accounting records — for the period required by law.

When your account is closed, we delete or anonymize your data within 90 days, except records we are required to keep by law. You can also ask us to delete your data at any time, and we will do so where we are not legally required to keep it. Data handled by our sub-processors is retained in accordance with their respective policies.

9. Security

We protect data in transit using encryption (TLS). API keys and credentials are stored in server-side secret management and are never exposed to the browser. Access tokens for connected services (such as Google and Zalo) are stored encrypted at rest.

Data belonging to different businesses is separated at the database level using PostgreSQL Row-Level Security, so one business's data cannot be read or modified through another business's access.

Negative or low-rated reviews are never auto-published; human approval is mandatory, and approval links use short-lived signed tokens. Phone numbers are masked in our operational logs.

10. Your Rights

Depending on your location, you may have the right to access, correct, or delete the personal data we hold about you, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

If you are in Vietnam, you have the rights provided by Vietnamese personal data protection law, including the rights to be informed about processing; to give and withdraw consent; to access and correct your data; to request deletion; to restrict or object to processing; to request the provision of your data; to complain and claim damages; and to self-protect your data. Withdrawing consent does not affect processing already carried out, but may mean we can no longer provide some or all of the service.

To exercise any of these rights or to lodge a complaint, contact us at manten.app.vietnam@gmail.com (see Contact Us). We will respond within the time limits required by applicable law. If you are not satisfied with our response, you may lodge a complaint with the competent Vietnamese authority.

11. Children's Privacy

Manten is a business tool and is not directed to children. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date reflects the latest version. For material changes — such as processing your personal data for new purposes, sharing it with new categories of recipients, or new cross-border transfers — we will notify you in advance and, where required by applicable law (including Vietnamese personal data protection law), obtain your consent before the change applies to you. Other changes will be communicated through the service where appropriate.

Third-Party Sub-processors

We share the minimum data necessary with the following service providers. For each, we note its role, the data shared, and where processing may take place. Connected platforms (such as Google, Zalo, LINE, and WhatsApp) also process your data as independent services under their own terms.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at manten.app.vietnam@gmail.com.

Operator: HỘ KINH DOANH ÁI CHÂU, a household business (Hộ kinh doanh) registered in Vietnam (representative: PHAN THỊ ÁI CHÂU; business address: Ho Chi Minh City (Thành phố Hồ Chí Minh), Vietnam). Governing law and jurisdiction: the laws and courts of Vietnam.