Your privacy at Manasatak

Scope of the Policy and Responsibilities of the Parties

This policy explains the handling of data when using Manasatak on manasatak.com and management, subscription and support accounts. The communication channel for privacy requests is supportmanasatak.com.

Manasatak manage account, billing and security data in direct relation to their users. As for the customer data that entrepreneurs add to their stores, academies and services, the entrepreneur determines the purposes of their use and settings, and Manasatak provide the technical tools to process them according to the service and powers. Each project must demonstrate its identity and policies to its customers; This policy does not replace it.

Data that reaches us and its sources

Data you provide directly: name, mail, account data, project and product content, lessons, photos, files, settings, support requests, and communications you send through the Service.

Transaction Data: Order IDs, invoices, subscriptions, payment and refunds, collection status and payment provider references. Orders for physical products may include delivery address and telephone, and academies may include registration, progress, testing, and reservations.

Technical data: contact address, order timing, response status, session and browser information, errors, and events necessary for security. Data may be received from the project owner, payment provider, mail or a member authorized to complete a transaction for you. Do not upload other people’s data without proper authority or basis.

Purposes and Foundations on which we rely

We process data necessary for account creation, service operation, order execution, billing, storage and support, to execute the contractual relationship or steps you request before. We process records necessary to meet legal and accounting obligations and binding requests.

We use limited data to protect accounts, prevent fraud and disruption, manage disputes and improve operation based on legitimate interest where permitted by law and after taking into account the rights of individuals. Where permission is required, such as certain marketing messages or optional tracking technologies, processing is based on consent that can be withdrawn; Withdrawing them does not invalidate the legitimacy of the previous processing.

We do not sell personal data, nor do we use project files in independent advertising materials without permission. Agreeing to the Terms is not consenting to receiving marketing messages that are not required for the Service.

Payment, Storage and Service Providers

Manasatak billing uses Stripe for payment processing and subscriptions. Stripe may receive the necessary contact, billing and process data, and also process data for its organizational and security purposes in accordance with its policy. Manasatak do not store the full card number or verification code in their database.

The media uploaded to Cloudflare R2 is saved, and Cloudflare is used to connect and protect the site and some mail services. These services process content or records necessary for the performance of their functions. Public display files may be available via their link; Private content uses limited-time access controls and links depending on its functionality.

Support, hosting and backup operators may access data necessary for service maintenance as per validity and need. If the entrepreneur connects a payment provider, mail or additional tools, those entities may receive their customer data according to their settings and policies. See the official links of the providers below this page.

When do we disclose data to another party?

We share the necessary limit with authorized parties: such as the project owner and his team for the operations they manage, the providers of structure, payment and mail, and who the user authorizes. Membership in a project does not confer general validity on the projects of others.

We may disclose data when a legally binding request is made or to protect the rights and safety of people and prevent fraud or proven harm, subject to necessity and law. If the ownership or operation of the Service changes, the data are subject to appropriate safeguards and notice or approval when required; This does not mean that they can be used for any new purpose without foundation.

Sessions, cookies and storage in the browser

The service uses session and storage mechanisms in the browser to log in, renew and remember when you choose, and save some preferences and working status. Protection and payment services may use cookies that are necessary for the performance of their functions. Deleting location data may log you out or erase your preferences.

Previews save basket, requests, notes, and progress locally in sessionStorage, and can be zeroed from re-experience. Templates use metadata; Do not enter real passwords or sensitive information during the preview.

An entrepreneur may activate their own analytics or marketing tools. It shall disclose them and obtain consent when necessary, and shall not load optional tools prior to such consent in cases required by law. The publication of this policy does not constitute an automatic technical approval system for every integration added by the entrepreneur.

Mail and Notifications

You may receive messages necessary for account, transaction, security or support. Optional marketing is subject to approval or legal basis, and can be unsubscribed via the medium described in the message or contact support. The necessary messages may remain to complete the service.

Individual project client mail: does not use Manasatak settings automatically, and remains inactive until the project owner has set up its provider and chooses to activate it. The entrepreneur is responsible for the accuracy of the contact lists and the authority to send messages, and it is not permissible to upload purchased lists or to correspond with people without an appropriate basis.

Processing outside your country

Data may be processed via infrastructure or payment providers operating in different countries than the user’s country. The processing location may vary depending on the service, provider and settings; This policy does not promise to host all data in a specific country.

Where the law imposes conditions for international carriage, the appropriate mechanism and safeguards, such as approved contractual obligations or other permitted mechanisms, shall apply. You can request information about providers and arrangements related to your data through support. We do not claim that simply using a known provider automatically fulfills all compliance requirements.

Retention, closure and deletion

We adopt the need, purpose and legal obligations to determine the duration of retention. The project operating data shall be kept for as long as necessary for the service and the account, and the billing references and operations shall be kept for the period required by accounting, fraud prevention or disputes and applicable rules. The need for technical records and support requests is reviewed by purpose and data sensitivity.

Cancellation of renewal is not equal to deletion of account. Account closure or data deletion can be requested after identity and validity verification. We may retain a limited limit if this is required by law or to protect a right or to address a dispute, and explain why a particular category cannot be deleted when it is necessary.

Temporary copies within backups may continue until they are replaced or the retention cycle has expired; Do not use as normal running data after the deletion is approved, and requests for deletion are taken into account when restoring. Delete a file that does not remove copies that were previously downloaded by an authorized party or indexed by a third party when it was public.

Data Protection

The service uses HTTPS, session verification, account and project permissions, and controls for private files, service keys, and backups. Administrative access is as much as operational need. Private links are limited in duration, but they do not prevent an authorized user from copying content they can view.

There is no way to guarantee absolute security. Maintain your account and devices and report incidents without sending passwords or keys in your support message. When a data incident occurs, its effects are assessed and response and reporting actions are taken by the parties or competent authorities where legally required.

Access, correction, deletion and objection requests

Depending on applicable law and circumstances, your rights may include accessing, correcting and deleting your data, restricting its processing, objecting to its transmission, and withdrawing consent. You can edit the data available in your account, and send other requests to supportmanasatak.com with the account email, the relevant domain, and the order description.

We verify identity and validity by proportionate means prior to disclosure or change, and do not require a full card number or password. Requests will be processed within the applicable legal periods, with an explanation of any extension or exclusion allowed. If the data belongs to a client-run project, we may forward the request to the project owner or cooperate with him/her as authorized.

A request for deletion does not cancel existing financial obligations or delete the rights of other people. You may lodge a complaint with the relevant regulator if data protection laws grant you this right; Communicating with support does not eliminate this option.

Minors and Sensitive Data

Project Management and Reseller accounts are intended for those who have contractual capacity. If an academic provides content to minors, they must verify age requirements and parental consent where necessary, publish appropriate disclosures and minimize the data they collect.

Do not use the Platform to collect health or biometric data, highly sensitive documents or complete card data without proper legal and technical arrangements and express agreement. If you think a child’s data or sensitive data has been uploaded without validity, write to support to evaluate and handle it.

Policy Update and Communication

We display the date of last update at the top of the page, explain material changes in an appropriate manner, and ask for new consent if the purpose changes enough. Updating the policy does not allow the use of outdated data for an incompatible purpose without a legal basis.

Support channel and official privacy requests: supportmanasatak.com. Name your manasatak.com domain or project scope and type of request, and avoid attaching data that we don’t need for verification and follow-up.