Privacy Notice
What personal data we collect, why, where it stays, and how you stay in control.
Last updated 2026-11-03
Draft. To be reviewed by a lawyer before launch.
Who is responsible for your data
Manan Verse, a proprietorship of Rekha Basudevan is the Data Fiduciary for your personal data under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. Address: TO_FILL: postal address in India.
For any privacy question or request, write to our Grievance Officer, Rekha Basudevan, at grievance@mananverse.com.
This notice asks for your consent. Please read it before you agree. You can read it in Hindi or English.
What we collect and why
- Email address (or mobile number, once phone sign-in opens): to log you in with a one-time code and send booking messages. We never use it for marketing without asking you separately.
- Language preference: to show the site and hold the session in your language.
- Your age confirmation and the time you gave consent: to check you are an adult and to keep proof of consent.
- The reason you write for the session (up to 1000 characters): so the counsellor can prepare for your session.
- Booking details (service, date, time, video or voice only, booking ID): to run your booking.
- Payment status (paid, free or refunded, and the payment reference): to confirm and refund payments.
- Counsellor notes and your 3-step action plan: to guide you and give you a written plan.
- IP address and technical logs: to keep the site safe, stop spam and fix errors.
Card, UPI and bank details are entered on Razorpay's secure page. We never see or store them.
Darpan runs entirely in your browser. Nothing you enter in Darpan is sent to us or stored by us.
Legal basis
We process your data on the basis of your consent, given when you sign up and book.
In a few cases the law allows us to process data without fresh consent, for example to keep tax records, to follow a court or legal order, or to respond to a medical emergency.
We do not send you marketing messages unless you separately agree to them.
Where your data is kept and how it is protected
Your data is stored only in India, in Azure Central India (Pune).
It is encrypted at rest and in transit (HTTPS). Your reason, counsellor notes and action plan are encrypted a second time inside our app.
Only the counsellor assigned to your booking can see your reason and notes. Sessions are never recorded.
Booking emails to our counsellor carry only a booking ID and a secure link. They contain no email address, no phone number, no name and no reason text. Emails to you carry only your login code, or a booking ID, a time and a link.
Who helps us (processors)
We share only what each service needs to do its job. We never share your reason text with any of them.
- Razorpay: payments and refunds.
- MSG91: login codes and booking messages by SMS, only once phone sign-in opens. Not used today.
- Microsoft Azure: hosting, database and booking emails.
- Cloudflare Turnstile: a check that you are a person and not a bot.
- Google Meet: the video or voice call for your session. We send Google no booking details, only a request for a new meeting link. When you join, your counsellor sees the name on your Google account. Google carries the live call on its own servers, which may be outside India. Nothing is recorded.
We do not sell your data.
How long we keep it
- Your reason, counsellor notes and action plan are deleted 30 days after your last session.
- If you delete your account, we delete your data within 30 days.
- Booking and payment records are kept for as long as tax law requires, without your reason text.
- Security logs are kept only as long as needed to protect the site.
Your rights
- Access: ask what data we hold about you and how we use it.
- Correction: ask us to fix or complete wrong data.
- Erasure: ask us to delete your data, or delete your account yourself.
- Grievance redressal: complain to our Grievance Officer and get a reply.
- Nominate: name a person who can use these rights for you if you die or cannot act.
- Withdraw consent: stop at any time, as easily as you gave it.
If you withdraw consent, we stop using your data and delete it, except records the law makes us keep. We will no longer be able to run your bookings, and any upcoming booking will be cancelled under our Refund and Cancellation Policy.
To use any right, write to grievance@mananverse.com from your registered number's account, or use the account settings. We will reply within 30 days.
Children
Manan Verse is only for people aged 18 and above. We do not knowingly collect data of children. If we learn that a child has signed up, we will delete their data.
If something goes wrong
If there is a data breach, we will inform you and the Data Protection Board of India as the law requires, and tell you what we are doing about it.
If you are not satisfied with our reply to your complaint, you can complain to the Data Protection Board of India after using our grievance process.
Changes to this notice
We may update this notice. If a change affects how we use your data, we will tell you and ask for consent again where needed. Last updated: 2026-11-03.