Madhuri Sangeetaloy — Privacy Policy

When you use the Madhuri Sangeetaloy app and website, we collect the following categories of personal and sensitive data:

• Payment information — we never store your card or bank details. Payments are processed by our payment gateway (Razorpay); we retain only a transaction reference, the amount, and the payment status.
• Learning activity — the courses you enrol in, mock-test attempts and scores, video and lesson progress, and doubts or questions you post.
• Account information — your name, email address, phone number (where provided), and a securely hashed password when you create an account.
• Usage analytics — aggregated, non-identifying measurements of how features are used, so we can improve the product.
• Device & technical data — device model, operating-system version, app version, crash and diagnostic logs, and a push-notification token (only if you allow notifications).

Madhuri Sangeetaloy processes your information only for these purposes:

• To process payments and issue invoices and receipts.
• To send you course-related notifications — only after you opt in.
• To create, secure and maintain your account.
• To detect and prevent fraud, abuse and policy violations.
• To meet our legal, tax and accounting obligations.
• To respond to your support requests and doubts.
• To deliver the courses, live classes, notes and mock tests you have access to.

Your data is never sold. We disclose the minimum necessary data only to the partners that power Madhuri Sangeetaloy:

• Firebase Cloud Messaging (Google) — to deliver push notifications — your device token only.
• Cloud infrastructure providers — such as Hetzner and Vercel, acting as data sub-processors under confidentiality agreements.
• Law enforcement or regulators — only where we are legally compelled by a valid order under Indian law.
• Razorpay — our payment processor, to take payments and issue refunds.

We share with them only what each one strictly needs, and nothing more.

Your data is retained while your account is active. You may delete your account whenever you wish — either through the in-app “Delete my account” control or by writing to [email protected]. Once requested, we erase your personal data within 30 days, apart from records we must keep for legal, tax or accounting purposes (usually up to 7 years).

Under the DPDP Act and Google Play’s policies, you have the right to:

• Access a copy of the personal data we hold about you.
• Delete your data, subject to legal retention requirements.
• Nominate another person to exercise these rights on your behalf, as provided under the DPDP Act.
• Withdraw consent for any non-essential processing at any time.
• Correct information that is inaccurate or out of date.

Write to us at [email protected] to use any of these rights; we reply within the legally required period.

We protect your data with industry-standard safeguards: bcrypt-hashed passwords, TLS 1.2+ encryption for all data in transit, and encrypted database backups. Our team performs routine security reviews and applies critical patches within 72 hours of disclosure.

Our service is intended for users aged 13 and above. If you are under 18, you must use the app and make any payment only with the consent of a parent or legal guardian. We do not knowingly collect data from children under 13; if we learn we have, we delete it promptly.

We may update this policy from time to time. For any significant change, we will give you in-app notice and revise the “Last updated” date above. Your continued use of Madhuri Sangeetaloy after the change indicates your acceptance of it.

Have a question, complaint or grievance about your privacy? Email us at [email protected]. We aim to acknowledge every grievance promptly and resolve it within the timelines set by the DPDP Act.