Privacy notice
Last updated: 14 November 2026
This notice explains how ManualReady handles personal data when you use manualready.com.
Who is responsible
ManualReady is operated by PT Handeliv Cipta Niaga, Pakuwon Tower (Tunjungan Plaza 6), Lt. 22 OT 18, Jl. Embong Malang No. 21–31, Surabaya 60261, Indonesia. We are the controller of the personal data described here. Contact: hello@handeliv.io.
What we collect and why
| Data | Why we use it | Legal basis (GDPR) |
|---|---|---|
| Your email address | To link your check to you and to limit free checks to one per email. We store it as a salted hash, not in plain text. | Contract (Art. 6(1)(b)) and legitimate interest in preventing abuse (Art. 6(1)(f)) |
| Documents you upload (manuals, declarations, nameplate photos) | To check them against Regulation (EU) 2023/1230 and write your report | Contract (Art. 6(1)(b)) |
| Your report and supplier letter | To show you the result through your private link | Contract (Art. 6(1)(b)) |
| A one-way code derived from your IP address | To limit free checks per network. We do not store your IP address. | Legitimate interest in preventing abuse (Art. 6(1)(f)) |
| Payment and billing details | Handled by Lemon Squeezy as merchant of record. We receive your name, email, country and order, never your card details. | Contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)) |
Please do not upload documents that contain personal data you do not need us to see, such as signatures of private individuals or personal phone numbers.
How the check works (use of AI)
Your documents are read by an AI model (Claude, provided by Anthropic) that extracts facts from them. Our own rules, not the AI, decide whether each requirement is met. The AI also drafts the supplier letter. We do not use your documents to train AI models, and Anthropic does not train on data sent through its commercial API.
Who processes data for us
| Provider | Role | Location |
|---|---|---|
| Supabase | Database and file storage | EU (Ireland) |
| Anthropic | AI processing of uploaded documents | United States |
| Cloudflare | Website hosting and security | Global network |
| Lemon Squeezy | Payments, as merchant of record (its own controller for payment data) | United States |
Where data leaves the EU, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision.
How long we keep data
- Uploaded files: deleted automatically 30 days after upload.
- Reports and supplier letters: 24 months, then deleted.
- Email hash and IP code: 12 months.
- Billing records: as long as tax law requires.
Your rights
You can ask us to access, correct, delete or export your data, or object to its use. Email hello@handeliv.io from the address you used. You can also complain to the data protection authority in your country.
Changes
If we change this notice, we will update the date at the top.