Privacy policy

Softforge Digital LTD, a company registered in England and Wales under company number 16621737, operates MangaMade and is the controller of the personal data described here.

For anything in this policy, including access, correction, export or deletion, write to privacy@mangamade.com. If you are in the United Kingdom you may also complain to the Information Commissioner's Office; in the European Economic Area, to your national data protection authority.

• Account data: name, email address, password hash, interface language, workspace membership and role.
• Content you bring: series settings, premises, stories and chapter scripts, character descriptions, the reference images you upload, and your lettering edits.
• Content we make for you: model sheets, style anchors, generated panels, composed pages and exports.
• Usage data: credit ledger entries, generation tasks and their provider costs, and technical logs with IP address and user agent.
• Billing data: plan, subscription status, invoices and the customer identifier held by our payment provider. Card details never reach our servers.
• Analytics data, only if you accept analytics cookies: pages viewed and product events such as creating a series or exporting a chapter.
• Messages you send us by email.

We use your data to run the service: authenticate you, plan chapters, draw model sheets and panels, letter and compose pages, produce exports and share links, keep the credit ledger honest, send transactional email, prevent abuse, and meet our accounting duties.

We do not sell personal data, we do not use your stories, characters or pages to train our own models, and we do not send you marketing email you did not ask for.

Making a chapter means sending parts of your content to specialised providers, each under a data processing agreement or equivalent terms, and only for the task at hand:

• xAI: chapter planning, script edits and translations, and the moderation checks on series, casts and scripts.
• Kie, Poyo and fal: image generation for model sheets, style anchors and panels, from the panel description and the reference images it needs.
• Stripe: subscriptions, top-ups and invoices.
• Resend: verification, password reset and notification email.
• Google Analytics: product analytics, only after you accept analytics cookies.
• Hosting and storage: Vercel for the website, Hetzner for the application servers and the database, Cloudflare R2 for uploads, pages and exports.

The current list of sub-processors is available on request from privacy@mangamade.com.

Where the GDPR applies we rely on: performance of a contract for account, generation and billing data; legitimate interests for security and abuse prevention; legal obligation for invoices and tax records; and consent for analytics and wherever else we ask for it, which you can withdraw at any time.

Series, characters, chapters, the panel versions you generate, pages and exports stay until you delete them or close the workspace. Deleting a chapter, a series or a workspace also erases its stored files, usually within minutes. An export's download link expires after 24 hours, and a share link stops working as soon as you revoke it.

Credit ledger entries and invoices are kept for the period our accounting and tax rules require, even after an account is closed. Technical logs are kept for a short retention window, and database backups are overwritten on a rolling basis.

You can access and correct your profile in settings, export your data as JSON, and delete your account, which deletes its personal workspace and content.

Depending on where you live you may also have the right to restrict or object to processing, to portability, and to complain to your data protection authority. Write to privacy@mangamade.com and we answer within one month.

Several of our providers are located outside the United Kingdom and the European Economic Area. Where we transfer personal data we rely on the UK international data transfer agreement, the European Commission's standard contractual clauses or another valid transfer mechanism, and we assess each provider before we route content to it.

Traffic is encrypted in transit, secrets are held outside the code base, access to production data is limited to the people who need it, and passwords are stored hashed. Private images are served with signed, expiring URLs, and share links can be revoked.

No service is perfectly secure. If a breach affects you we notify you and the relevant authority as the law requires.

MangaMade is not intended for anyone under 16. We do not knowingly collect their data; write to privacy@mangamade.com if you believe a child has created an account.

We update this policy when the service changes. The date at the top of this page always reflects the current version, and material changes are announced by email or in the app.