Privacy Policy
Last updated: [DATE] · Sahyog Foundation
Sahyog Foundation ("Sahyog", "we", "us") operates this donation platform. This policy explains what personal data we collect, why, and the choices you have. It applies to donors, fundraisers, partner NGOs, and anyone who visits sahyog.info.
1. Information We Collect
From donors: name, email, phone number, donation amount, and — where applicable — PAN (for 80G tax receipts) and company details (for CSR donations). We do not collect or store full payment card or bank details; these are handled directly by our payment processor, Razorpay.
From fundraisers and NGOs: identity documents (PAN, Aadhaar), bank account details, and registration certificates (80G, 12A), collected for KYC verification and payout processing.
Automatically: IP address, browser type, and usage data via standard web analytics, used to keep the platform secure and improve the experience.
2. How We Use Your Information
We use your data to: process donations and issue 80G tax receipts; verify fundraiser and NGO identity before releasing funds; communicate donation confirmations and updates via email/WhatsApp; comply with Indian tax and financial regulations; and prevent fraud.
3. Sharing With Third Parties
We share data only as needed to operate the platform:
- Razorpay / Cashfree — payment processing and payouts
- Supabase — database and secure document storage
- Vercel — application hosting
- Email/WhatsApp providers — sending receipts and notifications
We do not sell personal data to third parties for marketing purposes.
4. Data Retention
Donation and receipt records are retained as required under Indian tax law (typically 8 years for 80G-related records). KYC documents are retained for as long as your fundraiser account is active, plus the statutory retention period thereafter.
5. Your Rights
Under the Digital Personal Data Protection Act, 2023, you have the right to access, correct, or request deletion of your personal data (subject to our statutory retention obligations for financial records). To exercise these rights, contact us using the details below.
6. Security
We use industry-standard measures — encrypted connections, role-based access control, and database-level security policies — to protect your data. No system is completely secure, and we cannot guarantee absolute security.
7. Grievance Officer
As required under the Information Technology Rules, 2021, complaints or concerns about this policy can be directed to:
[GRIEVANCE OFFICER NAME]
Email: [GRIEVANCE OFFICER EMAIL]
Sahyog Foundation, [REGISTERED ADDRESS]
8. Changes to This Policy
We may update this policy from time to time. Material changes will be notified on this page with an updated "Last updated" date.
9. Contact Us
Questions about this policy? Reach us at [CONTACT EMAIL].