Privacy Policy

We collect only what we need to run and improve the Service.

a) Information you give us

• Account: full name, username, email address, hashed password, role (fan / artist / mentor), optional profile image and bio.
• Content: songs, audio files, cover images, lyrics, YouTube links, bio-link entries, and any other content you upload.
• Bookings & messages: session preferences, booking dates and times, and messages you exchange with mentors or artists.
• Payment information: processed securely through Razorpay. We receive transaction IDs, status, and amounts — we never see or store your full card number, UPI PIN, CVV, or bank credentials.
• Communications: emails, support tickets, or feedback you send us.

b) Information collected automatically

• Usage data: song plays, likes, playlist votes, pages visited, time spent, actions taken.
• Device & log data: IP address, browser type, operating system, device identifiers, referral URLs, access timestamps.
• Cookies & local storage: session tokens (JWT), preferences, authentication state (see Section 7).

c) Information from third parties

• If you sign in with a social provider (e.g. Facebook, Google), we receive basic profile info permitted by your choices on that platform (name, email, public profile picture, platform user ID).
• If you share your M4manna profile on social networks, those networks may send us referral and attribution data.

• Directly from you when you sign up, upload, book a session, make a payment, or contact us.
• Automatically as you interact with the Service, via standard web technologies (cookies, local storage, server logs).
• From third-party providers you choose to connect (e.g. Facebook Login, YouTube embeds, payment gateways).

Each category of data serves a specific purpose:

• Provide the Service: create your account, publish your profile, stream music, process bookings and payments.
• Personalize: show relevant artists, recommend songs, remember preferences.
• Communicate: send booking confirmations, verification emails, service updates, and (with consent) occasional product announcements.
• Security & abuse prevention: detect fraud, protect against unauthorized access, enforce our Terms.
• Legal compliance: respond to lawful requests and meet tax, accounting and other regulatory obligations.
• Improve the Service: understand what works, fix bugs, build new features.

• Account data is stored in our MongoDB database.
• Passwords are stored as bcrypt hashes — never in plain text.
• Uploaded media (audio, images) is stored securely on our FTP media server.
• All traffic to the Service is served over HTTPS/TLS.
• Access to our production systems is restricted to authorized personnel with multi-factor authentication.
• Payments run through Razorpay (PCI-DSS compliant); we do not store sensitive card data on our servers.

No internet-connected system is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security. You can help by using a strong unique password.

We do not sell your personal data. We share information only in these limited cases:

• Service providers (sub-processors):
  • Razorpay — payment processing
  • Hostinger / HostingRaja — hosting and media file storage
  • cPanel SMTP (mail.m4manna.com) — transactional email delivery
  • Emergent — application deployment and infrastructure
  • Google (YouTube IFrame API) — only if you watch an embedded video
• With your consent: whenever you choose to connect your account to another platform or share content publicly.
• Public content: your username, display name, uploaded songs, bio links and public profile are visible to anyone who visits your profile.
• Legal: when required by law, subpoena, or to protect the rights, property, or safety of M4manna, our users, or the public.
• Business transfers: if M4manna is involved in a merger, acquisition, or asset sale, your data may be transferred — you'll be notified before this happens.

If you choose to use Facebook Login or any Facebook-based feature to access M4manna, we may receive the following information from Facebook, subject to your Facebook privacy settings:

• Your public profile (name, Facebook ID, profile picture)
• Your email address (if you grant that permission)
• Any additional data you explicitly agree to share

We use this data only to create and authenticate your M4manna account, pre-fill your profile, and provide you with a smoother sign-in experience. We do not post to Facebook on your behalf without a separate explicit action.

You can revoke M4manna's access to your Facebook data at any time by visiting your Facebook Apps and Websites settings. Revoking access does not automatically delete your M4manna account — see Section 10 for account deletion.

We use the following types of client-side storage:

• Essential: JWT auth tokens and session cookies to keep you logged in. The Service cannot function without these.
• Preferences: theme, volume, last-played song — stored in your browser's local storage.
• Analytics (if enabled): aggregated, anonymized usage metrics to understand feature adoption.

We do not use advertising cookies or cross-site tracking pixels. You can clear cookies and local storage at any time via your browser settings.

• Active accounts: we retain your data for as long as your account is active.
• Deleted accounts: account and uploaded content are permanently deleted within 30 days of your deletion request, except items we must keep for legal or financial reasons (e.g. tax records for completed transactions, which we may retain up to 7 years).
• Logs: server and security logs are retained for up to 90 days unless they are part of an active investigation.
• Backups: deleted data may persist in encrypted backups for up to 30 days before being purged.

Depending on where you live, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information (from your account Settings).
• Delete your account and associated personal data (see Section 10).
• Export a machine-readable copy of your data (data portability).
• Object to or restrict certain processing.
• Withdraw consent at any time for processing based on consent.
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email privacy@m4manna.com. We respond to verified requests within 30 days.

You can delete your M4manna account and all associated personal data in two ways:

1. Self-service: go to Settings → Account → Delete My Account and confirm. Your account is deactivated immediately and permanently deleted within 30 days.
2. Email request: send a message from the email on file to privacy@m4manna.com with the subject "Delete my account". We will verify your identity and complete the deletion within 30 days.

If you signed up with Facebook Login, you can additionally remove M4manna from your Facebook Apps settings. We will honor Facebook data-deletion callbacks for any Facebook-sourced data we hold.

M4manna is not directed to children under the age of 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us data, please contact us so we can remove it.

M4manna is operated from India. If you access the Service from outside India, your data may be transferred to, stored, and processed in India or in countries where our service providers operate. Where required, we use appropriate safeguards such as Standard Contractual Clauses.

We may update this Privacy Policy occasionally. When we make material changes we will notify you by email and/or a prominent notice on the Service before the change takes effect. The "Effective date" at the top of this page always reflects the latest revision.

Questions, requests, or complaints? Reach out to us at: