Privacy Policy
Effective Date: June 5, 2026 · Last Updated: June 5, 2026
2MAD ("we," "us," or "our") is operated by Madhumitha Lavakumar (transitioning to MADSAT Private Limited). This Privacy Policy explains how we collect, use, and protect your information when you use the 2MAD mobile and web application (the "Service").
By using 2MAD, you agree to this Privacy Policy.
1. Information We Collect
Account Information
- Phone number (for OTP authentication)
- Name, username, profile photo (optional)
- Email address (optional)
- Profession or creator category
Business Information
- Client names, contact details, and notes you add
- Invoice details, amounts, and payment status
- Brand deal information you track
- Earnings and expense data you log
- Digital products you list for sale
Payment Information
- We do not store your full card or bank details
- Payment processing is handled by Razorpay (PCI-DSS compliant)
- We store transaction IDs, payment status, and amounts
Usage Information
- App version, device type, and operating system
- Login times, feature usage, and crash logs
- IP address (for security and fraud prevention)
2. How We Use Your Information
- To provide and operate the 2MAD service
- To process payments and Pro subscriptions
- To send transactional notifications (payment received, invoice overdue, etc.)
- To improve the app and fix bugs
- To prevent fraud and abuse
- To comply with legal obligations
We do not sell your personal information. We do not use your business data to train AI models.
3. Who We Share Information With
- Supabase (database hosting) — stores your data securely
- Razorpay (payment processing) — for subscription and invoice payments
- Vercel / Railway (hosting infrastructure)
- Twilio (OTP SMS delivery)
- Firebase (push notifications, if enabled)
- Legal authorities — only when required by Indian law
We share only what is necessary for these services to function.
4. Data Storage and Security
- Data is stored on Supabase servers (regional servers in the EU/US)
- All connections use HTTPS encryption
- Passwords and tokens are hashed
- Row-level security ensures users can only access their own data
- We retain your data as long as your account is active
5. Your Rights
You have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Delete your account and all associated data
- Export your data (CSV export available in Pro plan)
- Withdraw consent at any time
To exercise these rights, email hello@2mad.app
6. Cookies and Tracking
The 2MAD web app uses essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.
7. Children's Privacy
2MAD is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us at hello@2mad.app and we will delete the account.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified in-app. Continued use of 2MAD after changes constitutes acceptance.
9. Contact
- Email: hello@2mad.app
- Operated by: Madhumitha Lavakumar
- Future entity: MADSAT Private Limited (incorporation in progress)
This policy is governed by the laws of India. Disputes are subject to the jurisdiction of courts in Chennai, Tamil Nadu.