Privacy Policy

This page explains what information MRR.lol collects, why, and what we do — and don't do — with it. MRR.lol is a product of Hara Infotech Pvt Ltd (harait.com), and "we," "us," and "our" below refer to Hara Infotech Pvt Ltd. We've tried to write it in plain language rather than legal boilerplate; if anything is unclear, email cs@mrr.lol and ask.

Information we collect

Account information

When you sign up, we collect your name, email address, and a password (which we only ever store hashed — we can't see or recover it). If you sign up or log in with X instead, we store your X user ID and username rather than a password.

Company & listing information

Anything you enter when you list a company: its name, website, category, description, and the MRR figures you self-report or that we calculate from a connected provider.

Revenue verification credentials

If you connect Stripe, Dodo Payments, Polar, or Lemon Squeezy to verify your MRR, we store the restricted API key you provide. It's encrypted at rest (AES-256-GCM), only decrypted in memory for the moment we're actually calling the provider's API, and never written to logs. You can disconnect a provider at any time, which removes our ability to use that key going forward.

Payment information

If you claim a leaderboard spot, your payment is handled directly by Razorpay — we never see or store your card number. We keep a record of the payment itself (amount, currency, status, and a reference ID) so we can show you your payment history and resolve any issues.

Usage information

We keep aggregate counters — how many times a company's profile has been viewed, how many times its website link has been clicked — to power the "most viewed" leaderboard sort and founder analytics. These are simple counts, not a log of who viewed what: we don't track individual visitors across the site or across the web, and we don't use third-party analytics or advertising trackers.

Support messages

If you contact support, we keep the name, email, and message you provide so we can respond and keep a record of the conversation.

Cookies

We use one cookie: a session cookie that keeps you logged in. That's it — no advertising cookies, no third-party tracking pixels, no cross-site cookies.

How we use this information

• To run your account and display your company's listing and profile
• To calculate and periodically refresh your verified MRR from a connected provider
• To process rank-claim payments and keep your payment history accurate
• To send transactional emails — welcome, verification results, payment confirmations, support replies, and similar account-related notices
• To detect and prevent abuse (fake listings, fraudulent MRR claims, and the like)

We don't use your information for advertising, and we don't sell or rent it to anyone.

Who we share information with

We only share information with the third parties needed to provide the features you actually use:

• Your connected revenue provider (Stripe, Dodo Payments, Polar, or Lemon Squeezy) — only if you connect one, and only to read subscription data using the key you provided.
• Razorpay — to process rank-claim payments.
• X (Twitter) — only if you use "Log in with X", to authenticate you.
• Our email delivery service — to send the transactional emails described above.

We don't share your information with data brokers, ad networks, or anyone else outside of what's needed to run the features above.

What's public

Your company's listing (name, URL, category, description, MRR figures, and verification status) is public by design — that's the point of a public leaderboard. Your account email and password are never shown publicly.

Data retention & deletion

We keep your account and listing data for as long as your account is active. If you'd like your account and associated data deleted, email cs@mrr.lol and we'll take care of it, aside from records we're required to keep for legal, tax, or fraud-prevention reasons (like a history of past payments).

Security

Passwords are hashed, never stored in plain text. Revenue-provider API keys are encrypted at rest. The site is served over HTTPS. No system is perfectly secure, but we treat your credentials and keys the same way we'd want ours treated.

Children's privacy

MRR.lol isn't directed at children, and we don't knowingly collect information from anyone under 13.

Changes to this policy

If we make a meaningful change to this policy, we'll update the "Last updated" date at the top of this page. We'd encourage checking back occasionally rather than assuming nothing's changed.

Contact

Questions about this policy or your data: cs@mrr.lol.