Privacy Policy

This Privacy Policy applies to:

• providers, institutes, businesses, owners, managers, and authorised staff using Mr.Manager;
• individuals whose information is added to the platform by a provider for service management purposes, including customers, students, members, participants, parents, guardians, or emergency contacts;
• visitors who access our website, request support, or otherwise interact with us.

For provider account information, business profile information, subscription details, support interactions, and platform usage information, Mr.Manager acts as the entity responsible for determining how and why such personal data is processed for the purpose of operating and securing the Services.

For customer, student, member, participant, attendance, schedule, service, billing, and related records that a provider uploads or manages on the platform for its own business purposes, the provider remains responsible for ensuring that it has the lawful right to collect, upload, use, and manage such data and for providing any required notices or obtaining any required consents under applicable law.

In such cases, Mr.Manager generally processes that data to provide the Services to the provider.

We may collect the following categories of personal data:

A. Provider Account and Business Information

This may include:

• full name;
• business or institute name;
• mobile number;
• email address;
• login credentials or authentication-related details;
• profile details;
• business address;
• subscription information;
• account status;
• billing or tax-related information, where applicable.

B. Service and Operational Data

This may include:

• service names;
• service model and configuration details;
• schedule and timing details;
• attendance and session records;
• reschedule, pause, renewal, termination, and extension settings;
• notes, remarks, status history, and service-related activity records;
• session progress and usage details.

C. Customer, Student, Member, or Participant Information Added by Providers

This may include:

• name;
• mobile number;
• email address;
• member or participant details;
• parent or guardian details, where relevant;
• service enrolment details;
• attendance history;
• payment and billing status;
• linked business records required for service delivery and record management.

D. Payment and Transaction Information

This may include:

• subscription payment details;
• invoice and receipt information;
• payment status;
• limited transaction metadata;
• payment confirmation details;
• related accounting or reconciliation records.

Mr.Manager does not intentionally store full card numbers, CVV values, or complete payment instrument credentials on its own servers unless explicitly stated otherwise.

E. Device, Technical, and Usage Information

This may include:

• IP address;
• browser type;
• device type;
• operating system;
• app or software version;
• usage logs;
• access timestamps;
• crash data;
• diagnostic logs;
• security logs;
• audit trails.

F. Support and Communication Information

This may include:

• support emails;
• contact messages;
• call or ticket details;
• feedback;
• complaints;
• grievance-related communications.

We collect personal data:

• directly from you when you create an account, subscribe, contact us, request support, or use the Services;
• when a provider adds or manages customer, student, member, participant, attendance, billing, or service records through the platform;
• automatically through platform usage, server logs, technical integrations, and security systems;
• from authorised payment partners or service providers that support the operation of the Services;
• during onboarding, demonstrations, customer support, or account verification processes.

We use personal data to:

• create, manage, and secure accounts;
• provide the Services and core platform functionality;
• manage services, schedules, sessions, attendance, billing, invoices, receipts, and notifications;
• support business workflows and record management;
• process subscription payments and maintain transaction records;
• verify and reconcile payments;
• provide customer support and respond to queries or complaints;
• improve platform stability, security, performance, and usability;
• monitor usage, prevent misuse, fraud, unauthorised access, or abuse;
• maintain audit logs, records, backups, and business continuity systems;
• comply with legal, regulatory, tax, accounting, contractual, or enforcement obligations;
• protect the rights, safety, security, and legitimate interests of Mr.Manager, providers, users, and other affected persons.

All personal data processed by Mr.Manager is stored and processed on servers located in India.

We maintain our platform's data storage and processing architecture in India for the current version of the Services.

Mr.Manager is designed so that provider data remains separated.

We do not:

• sell provider data or provider-managed customer data;
• rent provider data or provider-managed customer data;
• trade provider data or provider-managed customer data;
• disclose one provider's data to another provider for that other provider's own business use;
• allow one provider to access another provider's customer records, attendance records, service history, billing records, or business data without proper authorisation.

Access is restricted as follows:

• each provider may access only the data associated with that provider's own account, business, staff permissions, services, and authorised workflows;
• authorised staff under the same provider account may access data based on the permissions, roles, or workflows configured for that provider account;
• provider-managed customer data is not shared with unrelated providers, competitors, or unauthorised persons.

Exceptions

We may disclose data only where necessary:

• to operate and support the Services;
• to authorised infrastructure, hosting, communication, security, or payment service providers who assist us in running the platform;
• where the provider explicitly initiates a permitted sharing action;
• where required by law, regulation, legal process, or lawful government request;
• to protect rights, safety, platform integrity, or security.

We may share personal data only on a limited and need-to-know basis in the following situations:

A. With Service Providers Supporting Mr.Manager

We may use trusted third-party vendors to help operate the Services, such as:

• hosting and infrastructure providers;
• database and storage providers;
• notification and communication service providers;
• payment processing partners;
• analytics, logging, and security service providers;
• support and operational service providers.

These parties may access personal data only as necessary to perform services for us and are not permitted to use it for their own independent commercial purposes.

B. With Payment Partners

Where payments are processed through integrated payment systems, relevant payment and transaction information may be shared with authorised payment partners for payment processing, settlement, verification, fraud prevention, reconciliation, or legal compliance.

C. For Legal and Safety Reasons

We may disclose personal data if required to:

• comply with applicable law, regulation, legal process, court order, or lawful authority request;
• investigate fraud, abuse, unauthorised activity, or security incidents;
• enforce our Terms, contracts, or legal rights;
• protect our users, providers, customers, systems, or the public.

D. Corporate Transactions

If Mr.Manager undergoes a merger, restructuring, acquisition, investment, sale of assets, or similar corporate transaction, personal data may be transferred as part of that transaction, subject to applicable law and appropriate confidentiality protections.

Where a provider uploads, manages, or uses customer, student, member, participant, parent, or guardian data on the platform, the provider is responsible for:

• ensuring it has the lawful authority to collect and use such data;
• giving any required notices to such individuals;
• obtaining any required consent, authorisation, or permission under applicable law;
• ensuring that data entered into the platform is relevant, accurate, and lawfully obtained.

Mr.Manager does not independently verify whether every provider has obtained all notices or consents required under applicable law.

Mr.Manager is intended for use by adult provider-side users such as business owners, institutes, and authorised staff.

However, providers may use the platform to manage records relating to children or minors, such as students, members, or participants. In such cases:

• the provider is responsible for ensuring that it is legally permitted to collect, upload, and use such information;
• the provider must provide any required notices and obtain any required parental, guardian, or lawful authorisations under applicable law;
• Mr.Manager processes such data only for the purpose of providing the Services to the relevant provider.

Mr.Manager does not currently intend this provider-side rollout to be used by children to independently create and operate direct provider accounts for their own use.

Mr.Manager may facilitate subscription billing and related financial record management through the platform.

Where payment functionality is integrated, transactions may be processed by authorised third-party payment partners. We may receive limited transaction information, such as payment status, transaction references, timestamps, and reconciliation details, as necessary to operate the Services.

Invoices, bills, and receipts generated through the platform may reflect provider-managed service records and business workflows. Mr.Manager facilitates record management and platform functionality but is not automatically a party to the underlying provider-customer service relationship unless expressly stated otherwise.

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including for:

• account maintenance;
• service delivery;
• billing, tax, and accounting purposes;
• audit and security logging;
• fraud prevention;
• dispute handling;
• legal, regulatory, or contractual compliance;
• backup and business continuity purposes.

The actual retention period may vary depending on the type of data and the reason it was collected.

Where deletion is requested or data is no longer required, we may delete, erase, anonymise, or securely de-identify the data within a reasonable operational period, subject to:

• backup cycles;
• legal obligations;
• tax or accounting requirements;
• fraud-prevention needs;
• dispute-resolution or security requirements.

We use reasonable technical and organisational safeguards to protect personal data against unauthorised access, misuse, disclosure, alteration, destruction, or loss.

These measures may include:

• access controls;
• account authentication;
• internal permission restrictions;
• secure infrastructure practices;
• monitoring and logging;
• backups;
• role-based access controls;
• vendor oversight;
• security review processes.

However, no platform, storage system, network, or method of transmission can be guaranteed to be completely secure. Users are responsible for maintaining the confidentiality of their credentials and using the platform responsibly.

Our website or platform may use cookies, session storage, or similar technologies to:

• keep users logged in;
• improve usability and performance;
• remember preferences;
• understand usage patterns;
• support security and fraud-prevention functions.

You may be able to control certain cookie settings through your browser or device settings, but disabling them may affect platform functionality.

Subject to applicable law, you may have the right to:

• request access to personal data relating to you;
• request correction or updating of inaccurate or incomplete personal data;
• request deletion of personal data, where legally permissible;
• withdraw consent, where processing is based on consent;
• raise concerns or grievances regarding our handling of personal data.

Please note:

• some data may need to be retained for legal, tax, security, audit, fraud-prevention, or contractual reasons;
• where data has been uploaded or managed by a provider for the provider's own business relationship, some requests may need to be directed to the relevant provider first.

If you have any questions, requests, or grievances regarding this Privacy Policy or the way we process personal data, you may contact us at:

Please include enough information in your request for us to identify and process it properly.

The Services may contain links to or integrations with third-party websites, products, or services. Their handling of personal data is governed by their own terms and privacy policies. Mr.Manager is not responsible for the privacy practices of unrelated third parties.

We may update this Privacy Policy from time to time to reflect changes in our Services, legal requirements, business practices, or platform functionality.

When we do, we will update the Effective Date above. Continued use of the Services after such changes means you accept the updated Privacy Policy.