Privacy Policy

Overview

Manifest ("we", "us", "our") is an open source LLM routing platform. We are committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how we handle it.

Our architecture

Manifest is designed with privacy as a core principle. The routing engine analyzes query complexity entirely on your machine and does not send the content of your prompts or responses to our servers, with one exception: the optional Autofix feature, described below, sends failing requests to our hosted repair service when you enable it.

• Local version: All routing and request data stays on your machine. Two narrow flows reach Manifest, both described below: an anonymous daily usage report you can turn off, and, only if you enable it, Autofix.
• Cloud version: Uses a blind proxy that forwards requests to LLM providers without reading their content. We collect only metadata (token counts, model used, cost, timestamps).

Data we collect

Account data

When you create a Manifest account, we collect your email address and display name to provide and manage your account.

Usage telemetry (cloud version only)

When using the cloud version, we collect metadata about your LLM requests using the OpenTelemetry standard:

• Token counts (input and output)
• Model and provider used
• Request cost
• Timestamps and latency
• Routing decisions (which tier was selected)

We do not collect the content of your prompts, responses, or any data processed by the LLM as part of this telemetry. The only flow that carries request content is Autofix, described below.

Autofix data (optional, cloud and self-hosted)

Autofix is toggled per agent. When it is enabled and a request fails with a repairable error, Manifest sends the failed request, including its message content, together with the provider's error response to the hosted Autofix service so it can diagnose the failure and return a corrected request. Provider authorization credentials (API keys, OAuth tokens) are never sent. Self-hosted deployments identify themselves with an anonymous install identifier. This data is used to repair the failing request and improve repair quality; you can turn Autofix off at any time per agent, or globally with the AUTOFIX_GLOBAL_ENABLED environment variable.

Anonymous usage telemetry (self-hosted)

Self-hosted deployments running in production send one aggregate usage report per 24 hours: an anonymous random install identifier, the Manifest version, request counts by provider and tier, token and cost totals, agent counts by platform, and the operating system and architecture. It never contains prompts, responses, model names, emails, API keys, or IP-level identifiers. Disable it by setting MANIFEST_TELEMETRY_DISABLED=1; it is also disabled automatically outside production. The full field list is in the self-hosted documentation.

Website analytics

We use Vercel Analytics to collect anonymous, aggregated website usage data (page views, referrers). No personal identifiers are tracked.

Advertising measurement (Reddit Pixel)

We run ads on Reddit and use the Reddit Pixel on this website to measure whether those ads work. The pixel loads a script from Reddit and reports a page visit event when you browse manifest.build. Reddit receives your IP address, user agent, the page you visited, and its own cookie identifiers, and processes this data as an independent controller under the Reddit Privacy Policy.

We do not send Reddit your email address, phone number, or any account data, and the pixel exists only on this marketing website. It is never present in the Manifest application or in traffic proxied through Manifest. You can limit ad measurement through your Reddit ad settings or by blocking the pixel with standard browser tools.

How we use your data

• To provide and maintain the Manifest service
• To display your cost and usage dashboards
• To improve routing accuracy and performance
• To communicate service updates (if you opt in)

Data sharing

We do not sell your data. We do not share your data with third parties except:

• LLM providers (Anthropic, OpenAI, etc.) receive only the requests you explicitly route through them
• Infrastructure providers (hosting, databases) process data on our behalf under strict confidentiality agreements

Data retention

Telemetry data is retained for 90 days by default. Account data is retained until you delete your account. You can request data deletion at any time.

Security

All data in transit is encrypted via TLS. Account credentials are hashed. The blind proxy architecture means we cannot access your prompt content even if our systems were compromised.

Your rights

You have the right to:

• Access the data we hold about you
• Request correction or deletion of your data
• Export your telemetry data
• Use the fully local version with zero data sent to Manifest

Open source

Manifest is open source. You can inspect exactly how data is handled in our GitHub repository.

Contact

For privacy questions or data requests, reach out on our Discord or open an issue on GitHub.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date.