Privacy Policy
Effective: 4 July 2026 · mindmoneymagic.com ("we", "us")
We collect as little as we can get away with, and we'll tell you exactly what and why. This policy is written to comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act).
1. What we collect, and why
| Data | When | Why |
|---|---|---|
| Your email address | When you sign in with a magic link or join the membership | To create your account, sign you in (we use passwordless login — we never store a password), and send you the emails you've asked for |
| Membership details (plan, status, renewal date) | When you subscribe | To know what to unlock for you |
| Your progress in member tools (e.g. build-along day, saved reflections) | As you use the members area | So your dashboard remembers where you are. Private reflections are visible only to your account |
| Payment confirmation (never your card/UPI details) | When you pay | Payments are processed entirely by Razorpay. We receive only confirmation of the payment, the plan, and the date your access runs to — never your card number, UPI PIN, or bank credentials |
We do not run advertising trackers or sell your data. We currently use no analytics cookies. Your login session is kept in your browser's local storage by our authentication provider.
2. Who processes it for us
- Supabase — authentication and database, hosted in the AWS Mumbai (ap-south-1) region.
- Amazon Web Services (SES, EC2) — website hosting and transactional email, Mumbai region.
- Razorpay — payment processing (UPI, cards, netbanking).
Each processes data under its own privacy terms, only to provide the service described. We deliberately chose India-region hosting for all three, so your account data is stored in India.
No third-party fonts, CDNs, or trackers. Every asset this site loads — typefaces and code libraries included — is served from our own server. Opening a page, or signing in, does not hand your IP address to Google, to a content-delivery network, or to anyone else. We run no advertising trackers and no analytics cookies.
3. How long we keep it
Your account data is kept while your account exists. If you ask us to delete your account, we remove your personal data within 30 days, except records we must retain for tax, accounting, or legal compliance (e.g. payment invoices).
4. Your rights
Under the DPDP Act you may request access to, correction of, or erasure of your personal data, withdraw consent, or nominate someone to exercise these rights for you. Email hello@mindmoneymagic.com from your registered address and we'll act on it. You may also complain to the Data Protection Board of India if you believe we've failed you.
5. Children
Our services are intended for adults (18+). We do not knowingly collect data from children.
6. Changes
If this policy changes materially, we'll note the new effective date here and, for significant changes, tell members by email.
7. Contact
Privacy questions: hello@mindmoneymagic.com.