MantisOps, LLC ("MantisOps," "we," "us") designs, develops and licenses data and network protection software-as-a-service, including our products known as “Mantis360,” “MantisRMM” and “MantisNMS,” for which we provide integration, hosting, operational and reporting services (such products and services collectively, our “Services”). This Privacy Policy explains what data we collect in our business and through our products, the purposes of such collection and how we use and protect such data.
By accessing or using our Services, you consent to our data practices as described in this Policy. If you do not agree with our practices, please do not license or use our Services.
Categories of Personal Information Collected. In the past 12 months we have collected the following categories of personal information:
| Category | Examples |
|---|---|
| Identifiers | Name, postal or email address, company, internet protocol (IP) address, account data and other personal identifiers |
| State or Federal Records | Billing name and address, signature, telephone number, credit card or debit card number, identification or policy numbers or other payment information (via our payment processor — we do not store raw card data) |
| Commercial information | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies and subscription and transaction records |
| Professional or employment-related information | Name, job title, employer, business email address, business telephone number, professional profile URL (e.g. LinkedIn), and information about the employer such as industry, size and location |
| Internet/network activity | Browsing history, search history, information on a consumer's interaction with a website, application or advertisement and API request logs, authentication events and product usage data |
| Geolocation | Approximate physical location or movements |
| Sensitive Personal Information | Personal information that reveals account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password or credentials allowing access to an account or a consumer’s precise geolocation |
3.1 User Account Set-Up. A client or authorized user who subscribes to or accesses our Services must register an account and provide us with certain business information, including technical information about their network, computers, devices, online connectivity, data storage, physical and electronic storage and data and device configuration and security data.
3.2 Other Means of Data Collection. We also collect personal information by and through the following activities:
3.3 Product Usage Data. Our products collect the following data from your infrastructure to provide the Services:
(a) Mantis360 probe collects:
(b) MantisRMM agent collects:
(c) MantisNMS collector collects:
3.4 Fraud and Abuse Screening. When you register for an account or request a trial, we automatically evaluate the information submitted with your request — including your email address and its domain, the internet protocol (IP) address and approximate (country/region-level) location of your request, and the pattern and timing of recent sign-ups — to detect and prevent fraudulent, abusive or automated registrations and to protect our Services and our customers. We record the result of this evaluation (a risk indicator and the reasons for it) with your registration so that a member of our team can review it before an account is approved. Except for the geographic-eligibility rule described immediately below, we do not decline an account solely by automated means — a person reviews flagged registrations.
Geographic eligibility. Our Services are offered only to businesses located in the United States. Where the information submitted with your request indicates that you are located outside the United States, your registration may be declined automatically on that basis. This is an automated determination. If you believe it is in error, you may contact us at privacy@mantisops.net to request human review of, to express your point of view on, and to contest the decision.
Our websites set no cookies on a first visit, and we use no advertising, analytics or cross-site tracking cookies. When you sign in, we use cookies that are strictly necessary to provide the Services: to keep you signed in (portal_session, admin_session); for single sign-on across MantisRMM, Mantis360, MantisNMS and the Customer Portal (mantis_sso, which expires after 60 minutes of inactivity); to complete a two-factor or identity-provider sign-in (portal_mfa, mo_sso_flow); to remember that you signed out in this browser (mantis_signout); for a support session you granted (portal_support); and to remember the company you selected (active_company). We also keep your app session and a few preferences, such as theme, time zone and chat window position, in your browser’s local storage. Our sign-up, contact and sign-in forms use Cloudflare Turnstile to block automated abuse. Because these technologies are strictly necessary, we do not ask for consent; you can block or delete cookies in your browser settings, but you will not be able to sign in.
| Data Type | Purpose |
|---|---|
| Account data | Account management, billing, support |
| Network scan data | Displaying results in your Mantis360 dashboard |
| Agent metrics | Displaying in your MantisRMM dashboard, alerting |
| Network & monitoring data (SNMP/WMI/flow/syslog/traps) | Displaying in your MantisNMS dashboard, alerting, and network-topology mapping |
| Monitoring credentials | Authenticating to the devices you configure for monitoring; stored encrypted and not shared |
| Remote session data | Providing remote access; not recorded or stored |
| Log data | Debugging, security monitoring, abuse prevention |
| Registration / sign-up data (email and domain, request IP and approximate location, sign-up timing) | Screening sign-ups to detect and prevent fraud, abuse and automated registrations, and confirming eligibility for the Services |
| Business-contact information you provide to us | Business-to-business communications about our Services that you have asked for or that relate to your contact with us (for example after you request a demo, a free security scan or other information, or meet us at an event), and keeping records of those communications and of any request not to be contacted |
We do not sell or share your personal information. We do not sell our clients’ personal information, and we do not "share" their personal information for cross-context behavioral advertising or profiling as those terms are defined under applicable data protection laws. We use no advertising or third-party tracking technologies, including cookies, pixels or web beacons.
Sensitive Personal Information. We use sensitive personal information only as necessary to provide the Services you requested and for related security purposes — not to infer characteristics about you. We therefore do not use or disclose it in ways that trigger the right of opt-out.
Non-discrimination. We will not discriminate against you for exercising any of your data subject rights.
Our Services are subject to the security, availability and compliance controls maintained by Cloudflare in addition to the controls we implement at the application layer. Access to and use of the Services are therefore subject to Cloudflare’s terms and conditions referenced below, which are flowed down to and shall apply to you in the same manner as if you were the direct licensee of Cloudflare’s products and services:
(a) The Cloudflare Self-Serve Subscription Agreement found at:
https://www.cloudflare.com/terms/
(b) The Cloudflare Service-Specific Terms found at:
https://www.cloudflare.com/service-specific-terms/
(c) The Cloudflare Privacy Policy found at:
https://www.cloudflare.com/privacypolicy/
(d) The Cloudflare Data Processing Addendum found at:
https://www.cloudflare.com/cloudflare-customer-dpa/
| Data Type | Retention Period |
|---|---|
| Account data | Duration of subscription + 30 days after termination |
| Scan results, metrics, and monitoring history | For the duration of your subscription as rolling history; older detailed samples are periodically aggregated or purged per product. Deleted within 30 days after termination. |
| Log data | 90 days |
| Remote session frames | Not retained — streamed in real-time only |
| Business-contact information of prospective clients | Up to 24 months after our most recent communication with you, unless you become a client or ask us to delete it sooner. If you opt out or ask us to delete your information, we keep only the minimum needed (such as your email address) on a suppression list so that we do not contact you again. |
| Payment records | 7 years (tax/legal requirement) |
We use the following sub-processors who may process your data. This list mirrors the live list at
https://mantisops.net/legal/sub-processors:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Cloudflare, Inc. | Infrastructure (Workers, D1, R2), CDN, DDoS protection | https://www.cloudflare.com/privacypolicy/ |
| Stripe, Inc. | Subscription billing, payment processing | https://stripe.com/privacy |
| Resend | Transactional email delivery | https://resend.com/legal/privacy-policy |
| Microsoft (Graph API) | Administrative email send-as | https://privacy.microsoft.com/ |
| Quo (formerly OpenPhone) | Business phone / VoIP — sales and support calls, voicemail, SMS | https://www.quo.com/privacy |
| Anthropic, PBC | AI-assisted support — triaging support requests and drafting replies (processes the content of support tickets you send us) | https://www.anthropic.com/legal/privacy |
AI-assisted support. When you contact support, we may use a third-party artificial intelligence (“AI”) provider to help categorize and prioritize your request and to draft an appropriate reply. A MantisOps team member reviews every AI-drafted reply before it is sent — replies are never sent to you automatically by AI. Support content is processed only to assist our team and is not used to train the provider's models. This assistance does not facilitate or make automated decisions that produce significant, consequential or other legally protected effects about you.
If you are a resident of a country or state which has enacted a comprehensive data privacy law, you are granted some or all of the following rights (“data subject rights”) regarding your “Personal Information,” which is any information that can be used, alone or together with other information, to identify a natural person (a “data subject”). Personal Information does not include data that is anonymized, de-identified or encrypted.
If you are located in the European Union or United Kingdom:
Enterprise customers that require a formal Data Processing Agreement may request one at privacy@mantisops.net.
Data Subject Rights Defined. Your Data Subject Rights may include some or all of those set forth below in a particular instance or with regard to a particular activity. If you make a request to exercise any of these rights (a “Data Rights Request”), please complete and transmit the Data Rights Request Form located on the “Contact Us” page of our web site and linked at the end of this Policy.
(a) The Right of Access. You may have a right of access to the personal information we have collected from you and to verify that we are using your personal information in accordance with this Policy. Upon your request, after verification of your identity, we will confirm what personal information we have collected from or about you as required by applicable law, the purposes of our processing of such data and the categories of third-party recipients with whom we may have shared such data in accordance with this Policy and applicable law. We do not share personal information with third parties unless authorized herein or consented to by you.
(b) The Right of Correction. You have the right to have any personal information that we collected from you which is inaccurate be corrected or completed consistent with the purposes of our processing thereof.
(c) The Right of Deletion. In some circumstances you may have the right to request that we delete the personal information collected from or about you. This right has certain exceptions under applicable law. The circumstances that can require our deletion includes (i) the personal information is no longer necessary in relation to the purposes for which it was collected or processed; (ii) you withdraw consent to any consent-based processing such as marketing; and/or (iii) our continued processing of such personal information violates this Policy or applicable law. Exceptions to your right of deletion include when our retention and use of data is necessary for compliance with this Policy or applicable law or for our internal audit and reporting purposes.
(d) The Right to Data Portability. To the extent that the legal authority for our processing of your Personal Information is your consent or the processing is necessary for the performance of a contract with you, when such grounds no longer exist and no other retention exceptions apply, you may have the right to receive your personal information from us in a structured and commonly used machine-readable format. This right does not apply where it is outweighed by our other lawful needs or when the return of it would adversely affect the rights or interests of others.
(e) The Right to Withdraw Consent. To the extent that our processing of your personal information is based solely upon your consent, such as when you subscribe to communications from us but don’t otherwise do business with us, you have the right to withdraw such consent which will trigger the termination of our processing of your personal information. A withdrawal of your consent does not affect the lawfulness of any processing that we did based on your consent before your withdrawal of such consent.
(f) Right of Opt-In or Opt-Out. You may have a right to affirmatively consent (“Right of Opt-In”) to our collection and use of certain types of personal information or to our transfer of such data for certain purposes. The Right of Opt-In, when it applies, must be expressed in an affirmative, voluntary manner. In other circumstances, our collection, use and transfer of certain types of Personal Information is subject to a user’s right to opt-out of such processing by us (“Right of Opt-Out”). The exercise of the Right of Opt-Out generally requires the submission of an opt-out request form, though browsers and other electronic tools may permit universal opt-outs through “global privacy controls” or “universal opt-out mechanisms” under applicable law. You do not need to create an account with us to exercise your opt-out rights and we only use the data provided in an opt-out request to review and comply with the request.
(g) Right to Opt Out of Marketing Communications. You may opt out of receiving sales and marketing communications from us at any time by using the unsubscribe link in any such email or by emailing us at privacy@mantisops.net. We will honor your request promptly. Opting out does not affect communications we must send to clients about their accounts or the Services.
To exercise any of your Data Rights, complete and submit a Data Rights Request Form located HERE (the “DRR Form”) or you may make a request to us by emailing us at privacy@mantisops.net. Only you, or someone legally authorized to act on your behalf, may make a Data Rights Request relating to your personal information.
Users or their authorized agents which make a Data Rights Request must provide sufficient information for us to reasonably verify that the requester is the person about whom we collected personal information or is otherwise authorized to act for the data subject (“Verification Requirements”). Notwithstanding such verification process, the requester does not need to create an account with us in order to submit a Data Rights Request.
Our Verification Requirements may include (i) verification by a third party identity verification service, (ii) our matching of the requester’s identifying information with the personal information already maintained by us from prior transactions or otherwise, (iii) if the requester has a password protected account with us, by the identification of specific information held by us or by our service providers associated with that specific account, (iv) by execution of a signed document under penalty of perjury, or (v) by checking a form of government issued identification, which will be deleted following successful verification.
We will only use personal information provided in support of verification of a Data Rights Request to verify the requester's identity or authority and to review and comply with such request.
We will confirm receipt of a Data Rights Request within ten (10) business days of our receipt thereof, usually in the same manner in which the request is received. Our acknowledgement will provide information about how we will process the request.
We endeavor to substantively respond to a verifiable Data Rights Request within forty-five (45) calendar days of our receipt thereof. If we cannot verify the sender of the Data Rights Request within such 45-day period, we may be forced to deny the request. If we require more time (up to another 45 days) to respond to the Data Rights Request, we will notify the sender of the need for and reason for such extension in writing.
If a data subject has an account with us, we will deliver our written response to that account. If a user does not have an account with us, we will deliver our written response by mail or electronically if that option is available. If authorized by applicable law, any disclosures we provide will only cover the 12-month period preceding our receipt of the Data Rights Request. The response we provide will also explain the reasons that we cannot comply, in whole or in part, with a Data Rights Request if and as applicable.
We will not discriminate against you for exercising any of your Data Rights. Unless permitted by applicable law, we will not (i) deny you any purchase or acquisition of any goods or services, (ii) charge you different prices or rates for goods or services, including through granting discounts or other benefits or imposing penalties, (iii) provide you a different level or quality of goods or services or (iv) suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
Our Services, web site and platform are for commercial purposes only and are not intended for or directed to personal or household purposes or for use with or by minors under the age of 18. If we learn that a user is underage, we will promptly remove that user’s personal information from our databases and prevent them from using our Services, web site or platform.
We implement reasonable technical and organizational measures to protect your data, including:
Breach Notification. If we or any of our service providers or third party contractors become aware of a security incident affecting your personal information, we will notify you without undue delay, describing the nature of the incident, the data involved, the steps we are taking and any recommended actions, subject to law enforcement, audit and other contractual commitments.
We may update this Policy from time to time. When we make material changes, we will revise the “Last Updated” date above and, where appropriate or required, provide additional notice to Client administrators. Your continued use of the Services after an update takes effect constitutes your consent to the processing of data in accordance with the revised Policy.
13.1 This website is owned and operated by MantisOps, LLC
13.2 MantisOps, LLC is a South Carolina limited liability company. Our registered office is located at 6650 Rivers Ave., Suite 100, Charleston, SC 29406, and our phone number is (864) 800-1855
13.3 You can contact us:
(a) by using our website contact form posted at https://mantisops.net/contact;
(b) by telephone at the number set forth above or at any other contact number published on our web site; or
(c) by email to privacy@mantisops.net.
13.4 You may access a Data Rights Request Form through the following link: https://mantisops.net/data-request. We will promptly acknowledge receipt of such form and provide processing updates and responses in accordance with this Policy and applicable law.
← All legal documents