Data protection
Privacy policy
What we hold, why, for how long, and what you can ask us to do with it — including the one thing we cannot delete on request.
This document is a draft
It states the platform's intended position and has not yet been reviewed by a lawyer. Contact details and response commitments are not final. It is published now so the terms of the product are visible before it takes real money, not because it is settled.
Where your data lives
Everything is stored in India, in a Bangalore region. This is a compliance requirement, not a hosting preference, and it applies to the database, uploaded documents and backups alike.
What we hold, and why
| Category | What it includes | Why |
|---|---|---|
| Donor identity | Name, email, mobile number | Confirming the donation, sending the receipt, answering you |
| Tax details | PAN and postal address, only if you supply them | Issuing an 80G certificate and filing the annual statement |
| Payment records | Amount, method, gateway reference, status | The financial record. We never see or store your card or UPI credentials |
| Organisation documents | Registration certificate, PAN, bank proof, 80G certificate | Verification. Stored privately, released only to a reviewer, every read logged |
| Beneficiary content | Photographs and stories published by an organisation | Uploaded by the organisation, which is responsible for having consent |
| Visit counts | Which public page was opened, on which day, from which kind of site (search, WhatsApp, …) and on a phone or a computer — added to a daily total | Knowing which pages and channels bring donors. No cookie, no IP address and nothing else about you is kept, so a count cannot be traced to anyone |
| Analytics | Page views and funnel steps, tied to a random key | Only if you agreed to it before October 2026. We no longer ask, so for everyone else it is off |
What we never do
- We do not sell personal data, and we do not share it for anyone else's marketing.
- We do not run analytics that follow you, or load third-party trackers, unless you said yes to them; the anonymous visit counts above are all that run otherwise. If you did say yes,
Privacy choices
at the foot of every page takes it back in one click. - We never log a PAN, bank details or the contents of an uploaded document, including in error reports. Redaction happens where the report is created, not afterwards.
- We never display an organisation's PAN or bank details publicly, and never email you a receipt as an attachment — it carries your PAN, and email is not an authenticated channel. You download it after signing in.
How long we keep things
- Financial and tax records — for the statutory period. These cannot be deleted on request; see below.
- Verification documents — while the organisation is on the platform, and for the statutory period afterwards.
- Analytics events — for a limited window, and never joined back to your name.
- Marketing and update preferences — until you change them.
Erasure, and the limit on it
You can ask us to access, correct or erase your data, and a beneficiary can ask us to take down content that shows them.
We cannot erase a completed financial transaction. A donation record, its ledger entries and any receipt issued against it are records we are legally required to retain. What we can do is remove or anonymise the optional data attached to them — your contact details, your marketing preferences, your presence on a public supporter list. We will tell you exactly which parts we kept and why, rather than quietly doing less than you asked.
Submit a request — no account needed. We verify identity before disclosing, correcting or erasing anything, acknowledge within 3 working days and respond within 30 days.
Anonymity when you give
Ticking Keep me off the public donor list
removes your name from the campaign page. It does not remove you from our records, because a donation still has to be receipted and reconciled — and it does not hide you from the organisation you supported.
Contact
Write to ujalahopefoundation.in@gmail.com, or use the data-rights form. Ujala Hope is contactable at 309, Tower A, Eleven Bay, Gurgaon, Haryana(122001).