Privacy Policy

MantraBrain (“MantraBrain”, “we”, “us”) builds and sells WordPress plugins and themes, including Sikshya LMS, Yatra, Ultimate Watermark, Lumtera and Easy Invoice, and the Nivorly app for Mac. MantraBrain is based in Nepal and is the controller of the personal information described in this policy.

This policy applies to mantrabrain.com and its subdomains (including store.mantrabrain.com, docs.mantrabrain.com and our product and demo sites), to product websites we run, such as wpyatra.com and matrixaddons.com, unless that site shows its own policy, and to our products. You can reach us about privacy at mantrabrain@gmail.com.

The Nivorly app and nivorly.com are covered by the Nivorly privacy policy. Purchases made through our store are also covered here.

Information you give us

• Account and order details: your name, email address, billing address and country, company name and tax ID if you add them, the products and plans you buy, and your order history.
• Support and contact messages: what you send through our contact forms, live chat, email or forums, including any files or screenshots you attach and details about your website.
• Newsletter: your email address and name if you subscribe.
• Feedback: reviews, survey answers and feature requests you choose to send.

Information collected automatically

• Visit statistics: pages viewed, referring page, browser and device type and approximate country. We use WP Statistics, which runs on our own server; it is not shared with an analytics company.
• Security logs: IP address, browser and request details, kept by our firewall (Wordfence) to block attacks and abuse.
• Cookies: described in Cookies below.

Information our products send

• License checks and updates (Pro products): when you activate a license or your site checks for updates, it sends your license key, your site’s address, the product and its version. Update checks may also include your WordPress and PHP versions so we can offer a compatible update.
• Nivorly license checks: the Mac app sends your license key and a machine name when it confirms a license. Recordings stay on your Mac; the app has no account and uploads nothing.
• Starter sites and demo imports: your site downloads demo files from our servers. Like any web request this reveals your server’s IP address; we do not link it to you.
• Nothing else by default: our free plugins and themes do not send us personal data. If a product can connect to an outside service (for example a payment gateway, Google AdSense or an AI provider you set up), that connection runs from your site directly to that service, only after you turn it on, and the product’s readme or documentation says which service is used.

Information from others

Our payment providers tell us whether a payment succeeded, along with the billing details needed for the order. They do not give us your full card number.

If you are in the European Economic Area or the United Kingdom, the law requires a legal basis for each use. Ours are:

We do not use your information for automated decisions that have legal or similarly significant effects on you.

Our products run on your WordPress site. Anything they store there, such as students and course progress in Sikshya LMS, bookings and travelers in Yatra, clients and invoices in Easy Invoice, or scan results in Lumtera, stays in your database. You control it and you are its controller. MantraBrain does not receive, host or process it.

If you share such data with us in a support request, for example in a screenshot, an export or temporary access to your site, we use it only to solve that request and delete it when the request is closed.

Please do not put real personal data into our public demo or trial sites. They are temporary and are deleted automatically.

We do not sell or rent personal information, and we do not share it for advertising. We share only what each service needs to do its job for us:

• Payments: FastSpring, which acts as the authorized reseller and merchant of record for orders it processes, and PayPal. Each handles your payment under its own privacy policy.
• Live chat: Crisp, which carries chat conversations on our sites.
• Forms and spam protection: WPForms stores form messages on our server; Google reCAPTCHA or Cloudflare Turnstile checks that a form is sent by a person.
• Email: the email delivery service that sends our receipts and replies, and Mailchimp for the newsletter if you subscribe.
• Hosting and security: the companies that host our servers and back them up, and Wordfence for firewall protection.
• Profile images: Gravatar may show an image linked to your email address in comments or your account.
• Legal reasons: authorities or advisers when the law requires it, to protect our rights or users, or as part of a merger or sale of the business, in which case this policy continues to apply.

We are based in Nepal and some of our service providers are in the United States, the European Union and other countries. When personal information from the EEA or the UK is sent to a country without an adequacy decision, we rely on safeguards such as the European Commission’s Standard Contractual Clauses offered by those providers.

• Account, order and license records: for as long as your account is open, then as long as tax and accounting law requires (usually up to seven years after the last order).
• Support conversations: up to three years after the last message, so we can help if the problem comes back.
• Newsletter: until you unsubscribe.
• Visit statistics and security logs: up to twelve months.
• Site access you give us for support: deleted when the request is closed.

Cookies are small files your browser stores for a website. We use:

• Essential cookies: to keep you signed in, remember your cart and complete checkout securely.
• Preference cookies: to remember choices such as a dismissed notice.
• Chat cookies: Crisp uses a cookie so a conversation continues from page to page.
• Spam protection: reCAPTCHA or Turnstile may set cookies when a form is shown.
• Videos: our product videos load from YouTube (youtube-nocookie.com) only when you press play; YouTube may then set cookies under its own privacy policy.

We do not use advertising or cross-site tracking cookies. You can block or delete cookies in your browser settings; the store and chat will not work fully without essential cookies.

Depending on where you live, you can ask us to:

• tell you what personal information we hold and give you a copy;
• correct information that is wrong;
• delete your information, unless we must keep it by law (for example tax records);
• limit or object to how we use it, including for direct marketing;
• send your information to you or another company in a common format;
• withdraw consent you have given, such as for the newsletter.

To make a request, email mantrabrain@gmail.com from the address on your account. We reply within 30 days and may ask you to confirm your identity. We will not treat you differently for using these rights. If you are in the EEA or UK, you can also complain to your local data protection authority.

California residents: we do not sell or share personal information for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act. You have the rights to know, delete and correct described above.

We use HTTPS on all our sites, a firewall, limited staff access, strong passwords and regular backups. Payment details are handled by our payment providers, not stored by us. No system is perfectly secure; if a breach affects your personal information, we will tell you and the authorities as the law requires.

Our websites and store are meant for adults running websites. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

We update this policy when our products or services change. The date at the top shows the latest version. If a change is significant, we will say so on this page and email customers with an active account.

Questions or requests about privacy: mantrabrain@gmail.com, or use our contact form. See also our Terms and Conditions and Refund Policy (opens in a new tab).