Skip to content

Privacy policy

Last updated: 18 September 2026

This policy explains how Manweba (“we”, “us”) processes personal data when you use our marketing website, project wizard, client portal, and operator console.

Data controller

  • Mantas Kryževičius, trading as Manweba (individual activity (individuali veikla) in Lithuania).
  • Contact for privacy requests: contact@manweba.com.
  • Location: Lithuania.

What we collect

  • Contact and brief details you submit via the wizard or contact form (name, email, phone, company, project answers).
  • Account data for invited clients and operators (email, name, organization membership).
  • Project collaboration content you choose to share (messages, files, invoice and contract metadata).
  • Payment-related metadata when you pay an invoice online (Stripe processes card details; we store invoice status and Stripe transaction identifiers, not card numbers).
  • Security and operations data: authentication session identifiers, optional admin IP allowlists, and auth/security audit logs that may include IP address and user-agent.
  • If you allow analytics: pseudonymous marketing page-view data (path, locale, referring site host, and random visitor/session identifiers). We do not store IP or user-agent for these page views.
  • Hosting and email infrastructure (for example Hostinger and Cloudflare) may process technical connection data needed to deliver the service.

Legal bases (GDPR Art. 6)

  • Contract / steps prior to contract — responding to inquiries, delivering projects, operating the portal, invoices, and meetings when you engage us.
  • Legitimate interests — securing accounts (sessions, audit logs, abuse prevention), operating essential site features (language preference), and improving our service in a way that does not override your rights.
  • Consent — optional marketing-site analytics (you may withdraw any time via Cookie policy preferences).
  • Legal obligation — retaining invoice and accounting records where Lithuanian law requires it.

How we use data

We use this data to respond to inquiries, deliver projects, operate the portal, send transactional email (invites, invoices, messages, security alerts), process invoice payments, schedule meetings when Calendar is connected, measure marketing-site traffic when you consent to analytics, and secure the service. We do not sell personal data and we do not use advertising trackers on the marketing site.

Processors and transfers

We use processors under our instructions, including: Hostinger (hosting, MySQL database, transactional email), Cloudflare (R2 file storage; may also process traffic as CDN/DNS where configured), Stripe (card checkout for invoices when enabled), and Google (Calendar API / Google Meet when an operator connects Calendar). Some processors may process data outside the EEA. Where that happens, we rely on appropriate safeguards such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses offered by those providers.

Cookies and similar technologies

We use essential session cookies on the portal and admin apps, language and consent preferences in browser storage on the marketing site, and optional first-party analytics storage only after you opt in. Details, storage keys, and preference controls are on the Cookie policy page.

Cookie policy

Retention

  • Project, account, message, and file data — while the engagement is active and for a reasonable period afterward for support and dispute handling.
  • Invoices and related accounting records — for the periods required by Lithuanian accounting and tax rules (typically up to 10 years for certain records).
  • Auth/security audit logs — for a limited operational period needed for security investigation.
  • Consent-gated marketing page views — up to about 26 months, then deleted; withdrawing consent stops new collection and clears analytics identifiers on your device, but does not automatically erase page views already stored on our servers.

Your rights

Under the GDPR you may request access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting earlier lawful processing. To exercise these rights, email contact@manweba.com. You also have the right to lodge a complaint with State Data Protection Inspectorate (VDAI) (https://vdai.lrv.lt) or another EU supervisory authority.

Children

Our services are aimed at businesses and professionals. We do not knowingly collect personal data from children.

Changes

We may update this policy. The “Last updated” date shows the current version.