Manthan

Privacy Policy

This policy explains what information Manthan ("we", "us") collects when you use manthan.sirune.tech, how it's used, and who it's shared with. Manthan is operated by SiRune.

Information we collect

We collect the following categories of information:

• Account information: your name and email address, via Google/Keycloak single sign-on. We never see or store your password — authentication is handled entirely by our identity provider.
• Content you upload: documents (PDFs, slide decks, Word files, text) you upload to generate flashcards, and the cards/decks generated from them.
• Usage data: which features you use, how many AI generations you've consumed against your plan's quota, and basic device/browser information collected automatically for security and abuse prevention.
• Payment information: if you subscribe to a paid plan, payments are processed entirely by Razorpay. We never receive or store your card number, UPI ID, or other payment credentials — we only receive confirmation that a payment succeeded, its amount, and your subscription status.

How we use your information

• To provide the core service: generating, storing, and displaying your flashcards and decks.
• To authenticate you and keep your account secure.
• To process subscription payments and enforce plan quotas.
• To detect and prevent abuse, fraud, or violations of our Terms of Service.
• To send you service-related communications (e.g. payment receipts, security notices).

We do not sell your personal information or uploaded content to third parties, and we do not use your uploaded documents to train any AI model beyond what's needed to generate your own flashcards in that session.

Third-party service providers

We share the minimum data necessary with the following providers to operate Manthan:

• Razorpay — payment processing for subscriptions. Governed by Razorpay's own privacy policy.
• Keycloak / Google Sign-In — authentication.
• Amazon Web Services — hosting for our backend and database.
• Google Cloud Platform — hosting for our frontend.
• PostHog — product analytics and session recording, hosted in the European Union. Governed by PostHog's own privacy policy. See Analytics and session recording below.

Data retention and deletion

We retain your account, decks, and cards for as long as your account is active. You can delete individual decks at any time from within the app. To request full account deletion, contact us at the email below — we'll delete your account data within 30 days, except where we're required to retain payment records for legal/tax purposes.

Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information. Contact us at the email below to exercise any of these rights.

Analytics and session recording

We use PostHog to understand how Manthan is actually used — which pages people visit, where they arrive from, and where they get stuck. PostHog is configured to store this data in the European Union, and it is served through our own domain rather than loaded from a third-party host, so no data is shared with any advertising network.

This includes session recording: a reconstruction of your interactions with the interface — clicks, scrolling, and navigation — that we can replay to diagnose usability problems. Because your decks contain your own material, we mask it before anything leaves your browser:

• Your card and deck content is masked. Card titles, card bodies, deck names, and the Create Cards chat transcript are replaced with placeholder blocks in recordings. We can see that you opened a card; we cannot read what it said.
• Everything you type is masked. All text inputs — including document upload, pasted text, and the chat composer — are masked, so the source material you feed into Manthan is never captured.
• Uploaded files are never recorded. Recording captures the interface, not your documents.

None of this starts until you agree to it. On your first visit we ask, and analytics and session recording stay switched off — nothing is recorded and no analytics cookies are set — unless you choose Accept. Choosing Decline keeps them off permanently.

We also treat a browser Do Not Track signal as a decline, without asking. To change a choice you've already made, clear this site's stored data in your browser and you'll be asked again, or contact us at the email below.

Cookies

We use strictly-necessary cookies/local storage for authentication (your login session) and basic preferences (e.g. theme), plus analytics cookies set by PostHog to recognise returning visits and group them into sessions (see above). We don't use advertising cookies, and we don't share cookie data with advertising networks. Razorpay's checkout may set its own cookies while processing a payment — see their privacy policy for details.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact us

Questions about this policy, or requests regarding your data, can be sent to admin@sirune.tech.

← Back to Manthan