Privacy Policy

1. Who We Are

Mantid.ai (“Mantid”, “we”, “us”, or “our”) operates the mantid.ai website and the Mantid safety management platform (collectively, the “Service”). We are a B2B software company providing safety issue tracking and compliance tools for industrial teams.

For privacy questions, contact us at contact@mantid.ai.

2. Information We Collect

Account and organisational data

When you create an account or your organisation subscribes to Mantid, we collect information such as your name, work email address, job title, organisation name, and billing details. Each user within your organisation may also provide profile information during sign-up or within the app.

Usage data

We automatically collect information about how you interact with the Service, including pages visited, features used, actions taken (such as creating an issue or generating a report), timestamps, IP addresses, browser type, device identifiers, and referring URLs.

Content you submit

The Service allows users to upload photos, videos, and text when reporting safety issues and corrective actions. This content is stored on your behalf and is visible to members of your organisation according to their role permissions.

Cookies and similar technologies

We use cookies and similar tracking technologies to operate the Service, remember your preferences, and analyse usage patterns. See Section 6 for details.

3. How We Use Your Information

• Provide, operate, and improve the Service.
• Process transactions and send related billing communications.
• Send service notifications, security alerts, and support messages.
• Analyse aggregate usage patterns to improve product features (we do not sell or share individual usage data with third parties for marketing purposes).
• Comply with legal obligations and enforce our Terms of Service.
• Detect and prevent fraud, abuse, and security incidents.

4. How We Share Your Information

We do not sell your personal data. We share information only in the following circumstances:

• Service providers: We use third-party vendors (for example, cloud infrastructure, email delivery, and payment processors) who process data on our behalf under confidentiality agreements and are not permitted to use it for their own purposes.
• Within your organisation: Content and activity data is shared with other authenticated members of your organisation according to role-based access controls you configure.
• Legal requirements: We may disclose information if required by law, court order, or to protect the rights, property, or safety of Mantid, our users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of assets, data may be transferred as part of that transaction. We will notify affected users in advance.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting contact@mantid.ai. We will fulfil deletion requests within 30 days, except where we are required to retain data for legal or regulatory purposes.

6. Cookies

We use the following categories of cookies:

Most browsers allow you to refuse or delete cookies. Doing so may affect some features of the Service. For more information, see your browser's help documentation.

7. Security

We implement industry-standard security practices to protect your data, including encryption in transit (TLS) and at rest, strict access controls, and infrastructure-level isolation between organisations. Our infrastructure is operated on SOC 2-compliant cloud services. While we take security seriously, no system is perfectly secure and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights under applicable data protection law, including the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of your personal data.
• Object to or restrict processing of your personal data.
• Receive your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email contact@mantid.ai. We will respond within 30 days.

9. International Transfers

Mantid is operated from the United States. If you are accessing the Service from outside the United States, your information will be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) or other appropriate mechanisms when transferring personal data from the European Economic Area, United Kingdom, or Switzerland.

10. Children

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to the primary contact of your organisation or via a prominent notice in the Service at least 14 days before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

12. Contact

For any privacy questions or to exercise your rights: