Privacy Policy

1. Introduction

This policy explains how Manasati (operated by Deerah Tech) collects, uses, and protects your data when you use the platform.

2. Information We Collect

Account data: your email and password (stored hashed/encrypted by our auth provider). Profile data you provide: name, bio, country, avatar, profile type, and links.

Automatically collected: we store a hashed (SHA-256) version of your IP address to count profile views and rate-limit the contact form — we never store the raw IP.

Signing in with Google: we use only your email address, to create and identify the account. Your Manasati profile details — name, bio, avatar, and everything else — are entered by you on the manage page and are not taken from your Google account. We never see your Google password.

Manager invitations: if you invite someone to manage your page, we store the email address you entered so we can deliver the invitation and connect it to their account if they register. That address may belong to someone who does not yet have an account with us. It is visible only to you as the page owner and to the invited person, and it is not used for any other purpose or shared with anyone.

3. How We Use Your Data

To operate the platform, authenticate you, display your public page, provide profile owners with view counts, and send essential account emails (email confirmation, password reset, receipts).

4. Cookies & Local Storage

We use essential (strictly necessary) cookies to manage your sign-in session securely. We also use your browser’s local storage to remember preferences such as language and light/dark theme. We do not use tracking, advertising, or third-party cookies.

5. Sharing & Third Parties

We do not sell your data. We rely on trusted service providers to run the platform: Supabase (hosting, database, authentication) and Postmark (email delivery). Your data is processed under those providers’ policies.

Subscription payments are processed by Tap Payments, a licensed payment service provider. Your card details are entered directly with Tap inside a secure frame of theirs; they never pass through our servers and we never store card numbers — we keep only the transaction reference, the card brand, the last four digits and your subscription status. Tap’s processing of your data is governed by their own privacy policy.

6. Data Retention & Deletion

We keep your data while your account is active. When you delete your account, your data is permanently removed. We retain a limited record of the deletion (email, reason, date) for operational and anti-abuse purposes.

Manager invitations: an invitation and the address it holds are deleted immediately if the page owner cancels it. All related invitations are deleted when the inviting page or the invited person’s account is deleted.

7. Security

We apply security measures including encryption in transit, database row-level security, and IP hashing. No system can guarantee absolute security.

8. Your Rights

You can access and edit your data from the manage page and delete your account at any time. For privacy-related requests, contact us via the Support page.

9. Children’s Privacy

The platform is not directed to children, and we do not knowingly collect their data.

10. Changes to This Policy

We may update this policy from time to time and will post the revised version on this page.

11. Contact

For any privacy questions, contact us via the Support page.