MantriCEM is built on a simple principle: your data belongs to you. This policy explains exactly what we collect, how we use it, and what we will never do with it. It is governed by the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act).
Operated by
TarkHQ LLP103, Saanvi Residency, Anugraha Layout,
B Narayanapura, Mahadevapura,
Bengaluru, Karnataka 560016, India
GST: 29ABAFT3522H1Z8
hello@mantricem.com
1. What data we collect
Account information
When you sign up, we collect your name, email address, and a hashed password. If you sign in with Google, we receive your name and email from Google's OAuth service. We do not receive your Google password.
Business data
Everything you enter into MantriCEM — contacts, invoices, expenses, deals, campaigns, projects, and team records — is stored securely and belongs entirely to you. We process it solely to provide the service.
Usage data
We collect anonymous, aggregated analytics about which features are used (e.g. page views, feature click counts) to improve the product. This data is never tied to your identity or shared externally.
Payment data
Payments are processed by Razorpay (for Indian customers) and Stripe (for international customers). We do not store your card details, UPI credentials, or net banking information. We receive only a payment confirmation and transaction reference.
Device and technical data
We collect your IP address, browser type, and device type to secure your account and diagnose technical issues. This data is retained for 90 days.
2. How we use your data
- →To provide, operate, and maintain the MantriCEM service
- →To send transactional emails — invoices to your clients, payment confirmations and receipts to you
- →To send product announcements and feature updates (you can unsubscribe at any time)
- →To power AI features: your business data is sent to OpenAI solely to generate the requested output — it is never used to train OpenAI's models per our Data Processing Agreement
- →To improve the product using aggregate, anonymised usage analytics
- →To provide customer support when you contact us
- →To detect and prevent fraud and abuse
3. What we will never do
- ✓Sell your data to anyone, ever
- ✓Share your business data with advertisers or data brokers
- ✓Use your business data to train AI models (ours or third parties')
- ✓Read your private business records unless you explicitly grant access for a support request
- ✓Contact your customers without your instruction
4. Third-party services
MantriCEM uses the following third-party services to operate. Each is bound by its own privacy policy and Data Processing Agreement with us:
5. Data storage and security
Your data is stored on Supabase-managed PostgreSQL databases with servers in India and Singapore. All data is encrypted at rest (AES-256) and in transit (TLS 1.3).
Each workspace is completely isolated. We enforce row-level security at the database layer — your data cannot be accessed by other workspaces or by our internal tools without authentication.
We take regular automated backups and follow industry-standard security practices including access controls, audit logging, and dependency scanning.
6. Your rights under the DPDP Act 2023
Right to access
You can view all data held about your account from within the application. For data not visible in-app, email us at hello@mantricem.com.
Right to correction
You can update your account information and all business records at any time from within the app.
Right to erasure
You can delete your account from the Settings page or by emailing us. We will delete all your data within 30 days. Some data may be retained longer if required by Indian law (e.g. GST transaction records for 6 years).
Right to portability
You can export your data in CSV and PDF formats from within the app at any time.
Right to grievance redressal
If you have a concern about how we handle your data, email hello@mantricem.com. We will respond within 7 business days.
7. Cookies
We use cookies only for:
- →Authentication: keeping you logged in securely (session cookies)
- →Preferences: remembering your in-app settings
We do not use advertising cookies, retargeting pixels, or third-party tracking scripts.
8. Data retention
We retain your data for as long as your account is active. After account deletion, your data is available for export for 30 days, then permanently deleted. Anonymised, aggregated usage statistics are retained indefinitely.
9. Changes to this policy
If we make material changes to this policy, we will notify you by email at least 14 days before they take effect and update the date at the top of this page.
10. Contact
For privacy questions, data requests, or to exercise your rights under the DPDP Act, contact us at hello@mantricem.com.
MantriCEM is operated by TarkHQ LLP, Bengaluru, Karnataka, India.
Governed by the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.