CHARITEY

Legal Documentation

Privacy Policy

Effective Date: 1 July 2025 | Last Updated: 1 July 2025

1. Privacy Policy

1.1 Introduction

Charitey (referred to herein as 'we', 'us', 'our', or 'the Platform') is a digital social impact platform registered and operating under the laws of India. We are committed to protecting the privacy, confidentiality, and security of personal information entrusted to us by our users, including donors, non-governmental organisations (NGOs), volunteers, and website visitors. This Privacy Policy explains in detail how Charitey collects, processes, stores, shares, and protects personal data when you use our website (charitey.org) and any future mobile applications or related digital services (collectively, 'the Platform'). By registering on or using the Platform, you acknowledge that you have read and understood this Privacy Policy. This policy is compliant with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and draws from internationally recognised data protection principles. Where future regulations are enacted, this policy will be updated accordingly.

1.2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

  • 'Personal Data' means any information relating to an identified or identifiable natural person, directly or indirectly, including name, contact details, identification numbers, or online identifiers.
  • 'Processing' means any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
  • 'Data Principal' means the individual to whom personal data relates — the user of the Platform.
  • 'Data Fiduciary' means Charitey, the entity that determines the purpose and means of processing personal data.
  • 'Consent' means a freely given, specific, informed, and unambiguous indication of agreement by a Data Principal.
  • 'NGO' means a non-governmental organisation, non-profit, charitable trust, registered society, or similar entity.
  • 'Donor' means an individual or organisation who donates goods, resources, or time through the Platform.
  • 'Volunteer' means an individual who offers time, skills, or services through the Platform.
  • 'Third Party' means any entity other than Charitey or the Data Principal.
  • 'Platform' means the Charitey website and any future mobile applications or digital services.

1.3 Scope of This Policy

This Privacy Policy applies to:

  • All individuals who register an account on Charitey.
  • NGOs and charitable organisations that apply for verification on the Platform.
  • Individual and corporate donors who use the Platform to contribute resources.
  • Volunteers who register to offer time and services.
  • All visitors to the Charitey website, regardless of whether they register.
  • Any person who contacts Charitey via email, form submissions, or support channels.
  • This policy does not apply to third-party websites linked from the Platform. Charitey is not responsible for the privacy practices of external sites.

1.4 Information We Collect

1.4.1 Personal Information

When you create an account or engage with the Platform, we may collect the following personal information:

  • Full name and display name.
  • Email address and mobile number.
  • Date of birth (for age verification purposes where applicable).
  • Gender (optional, for personalisation).
  • Physical address or city and state of residence.
  • Profile photograph (optional).
  • Government-issued identification documents, where required for verification.

1.4.2 NGO Verification Information

NGOs applying for verified status on the Platform are required to submit:

  • Organisation name, registration number, and type (trust, society, Section 8 company, etc.).
  • Certificate of registration issued by the relevant government authority.
  • FCRA registration details, if applicable.

80G and 12A tax exemption certificates, if available.

Bank account details for the purpose of receiving in-kind logistics coordination (not financial transfers through the Platform).

Contact details of authorised representatives and trustees.

Organisation's operational scope, mission statement, and beneficiary profile.

Photographs and documentation of past activities.

1.4.3 Volunteer Information

Volunteers registering on the Platform may provide:

  • Name, contact details, and location.
  • Skills, qualifications, and areas of interest.
  • Availability and preferred engagement type.
  • Emergency contact information (optional).
  • Identity verification documents for certain roles.

1.4.4 Donor Information

Donors providing resources through the Platform may share:

  • Name and contact information.
  • Type, quantity, and condition of items being donated.
  • Preferred NGO or cause category.
  • Pickup address or drop-off preferences.
  • Corporate affiliation, if applicable.

1.5 Account Registration Data

During account registration, Charitey collects information necessary to create and maintain a secure account, including login credentials (stored in encrypted form), authentication details, account activity logs, and preferences. You may register as an individual donor, volunteer, or NGO representative. Each account type collects information appropriate to that role.

1.6 Technical and Device Information

When you visit the Platform, our servers and analytics systems may automatically collect technical data, including:

  • IP address and approximate geolocation derived from it.
  • Device type, operating system, and browser version.
  • Screen resolution and hardware identifiers.
  • Referral URL and exit URLs.
  • Pages visited, time spent, and interaction patterns.
  • Error logs and crash reports.
  • This information is used to maintain the security, performance, and functionality of the Platform and does not by itself identify you personally in most cases.

1.7 Cookies and Tracking Technologies

Charitey uses cookies and similar technologies (such as local storage and session identifiers) to enhance your experience. Please refer to our Cookie Policy (Section 4 of this document suite) for full details. In summary, we use:

  • Essential cookies required for the Platform to function.
  • Functional cookies that remember your preferences.
  • Analytics cookies to understand how users engage with the Platform.
  • Future marketing cookies, which will be introduced only with your explicit consent.
  • You may manage cookie preferences through your browser settings or via any consent mechanism we provide on the Platform.

1.8 Location Services

The Platform may request access to your approximate location in order to:

  • Match donors with geographically relevant NGOs.
  • Display volunteer opportunities near your area.
  • Facilitate logistics for resource pickup and delivery.

Location data is not shared with third parties without your consent and is processed only for purposes directly related to your use of the Platform. Location access via mobile applications (when introduced) will require explicit in-app permission.

1.9 Communications Data

When you contact Charitey through email, grievance forms, or other communication channels, we retain records of that correspondence, including the content of messages, your contact details, and timestamps, to enable us to respond to your enquiry and improve our service. We may also send you transactional emails such as account creation confirmations, verification status updates, and activity notifications. Marketing communications will only be sent where you have provided explicit consent.

1.10 User-Generated Content

Content you submit to the Platform — including donation listings, resource requests, NGO profiles, photographs of goods, and comments — is stored by Charitey and may be displayed publicly on the Platform. You retain ownership of the content you create but grant Charitey a non-exclusive, royalty-free licence to display and use such content within the scope of Platform operations. You are responsible for ensuring that content you upload does not infringe third-party rights.

1.11 Information from Third Parties

We may receive information about you from third-party sources such as:

  • Social login providers, if you choose to sign in using a third-party account (e.g., Google).
  • Partner NGOs who may refer volunteers or donors to the Platform.
  • Government or public databases used to verify NGO registration details.
  • Analytics providers who may supplement our data with demographic insights.
  • Such third-party data is handled in accordance with this Privacy Policy and applicable data protection laws.

1.12 Legal Basis for Processing

Charitey processes personal data on the following legal bases:

  • Consent: Where you have given explicit consent for a specific processing purpose.
  • Contractual Necessity: Where processing is necessary to fulfil our obligations to you as a Platform user.
  • Legal Obligation: Where processing is required by law, such as responding to government or court orders.

Legitimate Interest: Where Charitey has a genuine and proportionate interest in processing your data, for example to prevent fraud, maintain platform security, and improve services — provided that our interests do not override your fundamental rights.

Public Interest: Where processing serves the broader social mission of facilitating charitable activities.

1.13 How We Use Your Information

Charitey uses the information it collects for the following purposes:

  • To create and manage your user account.
  • To verify the identity and legitimacy of NGOs registered on the Platform.
  • To facilitate connections between donors, NGOs, and volunteers.
  • To communicate platform updates, notifications, and relevant opportunities.
  • To process donation listings and resource requests.
  • To improve the usability, security, and features of the Platform.
  • To detect and prevent fraudulent, abusive, or illegal activity.
  • To comply with applicable laws and regulatory requirements.
  • To generate anonymised or aggregated statistical reports on Platform usage and social impact.
  • To respond to your support queries and grievances.

1.13.1 AI Processing

Charitey may in the future introduce AI-powered features, such as recommendation engines for matching donors with NGOs, automated moderation tools, or natural language processing for content review. Where such features are introduced, we will update this Privacy Policy to describe how AI systems process your data, your right to object to automated decision-making, and how to request human review of any automated decisions that affect you. No AI processing of personal data will be introduced without adequate notice and, where required, renewed consent.

1.14 Data Sharing

1.14.1 Third-Party Service Providers

Charitey may share personal data with trusted third-party service providers who assist us in operating the Platform. These may include:

  • Cloud infrastructure and hosting providers.
  • Email delivery and communication services.
  • Analytics and performance monitoring tools.
  • Fraud detection and identity verification services.
  • Customer support software providers.
  • All third-party processors are required to handle your data in accordance with applicable data protection laws and are bound by contractual obligations to maintain confidentiality and security.

1.14.2 Payment Providers

Charitey does not currently process financial transactions. The Platform facilitates the donation of physical goods and resources, not monetary transfers. Should financial donation features be introduced in the future, we will partner with licensed payment gateway providers and will update this Privacy Policy to reflect how payment-related personal data is processed, stored, and shared. Payment processing will comply with applicable RBI guidelines and PCI-DSS standards.

1.14.3 Government and Legal Requests

Charitey will disclose personal data to government authorities, courts, or law enforcement agencies where required by law, court order, or lawful authority. We will endeavour to notify affected users of such requests where legally permissible. We will not voluntarily share personal data with government agencies beyond what is legally required.

1.14.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, personal data held by Charitey may be transferred to the successor entity, subject to the same or equivalent privacy protections. Users will be notified of any such transfer prior to its completion.

1.15 Security Measures

1.15.1 Encryption

All data transmitted between your browser or device and our servers is encrypted using industry-standard Transport Layer Security (TLS). Sensitive data, including passwords and identity documents, is encrypted at rest using strong encryption algorithms. We do not store passwords in plaintext.

1.15.2 Authentication

Charitey employs secure authentication practices, including hashed password storage, optional multi-factor authentication, and session management controls. Accounts are locked after repeated failed login attempts to prevent unauthorised access.

1.15.3 Access Controls

Access to personal data within Charitey is restricted on a need-to-know basis. Internal team members are granted access only to the data necessary to perform their designated functions. We conduct periodic reviews of access permissions.

1.16 Data Retention

Charitey retains personal data for as long as is necessary to fulfil the purpose for which it was collected or as required by law. Specifically:

  • Active account data is retained for the duration of your account registration.
  • NGO verification documents are retained for the period of verification and for a reasonable period thereafter.
  • Communications data is retained for up to three years from the date of correspondence.
  • Analytics and technical data may be retained in anonymised form indefinitely.
  • Data associated with closed accounts is removed within 90 days, subject to legal retention requirements.
  • You may request deletion of your account and associated personal data at any time. Please refer to Section 1.17 for user rights.

1.17 User Rights

Under applicable Indian data protection law and our own commitment to user privacy, you have the following rights:

  • Right to Access: You may request a copy of the personal data we hold about you.
  • Right to Correction: You may request correction of inaccurate or incomplete personal data.
  • Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.
  • Right to Data Portability: You may request your personal data in a commonly used, machine-readable format.
  • Right to Grievance Redressal: You may file a complaint with our designated Grievance Officer.

1.17.1 Data Access Requests

To exercise any of the above rights, please submit a written request to our Grievance Officer at privacy@charitey.org. We will respond to all verified requests within 30 days. We may require you to verify your identity before processing your request.

1.17.2 Account Deletion

You may delete your account at any time via your account settings or by submitting a request to support@charitey.org. Account deletion will result in the removal of your profile, personal information, and user-generated content, except where retention is required by law or for the resolution of ongoing disputes. See our Data Deletion Policy in Section 6 for full details.

1.18 Children's Privacy

The Charitey Platform is not intended for use by individuals under the age of 18 years. We do not knowingly collect personal data from minors. If we become aware that personal data has been collected from a person under 18 without appropriate consent, we will promptly delete such data. Parents or guardians who believe their child's data has been collected without consent should contact us immediately at privacy@charitey.org.

1.19 International Data Transfers

Charitey's primary data processing operations are conducted within India. However, certain third-party service providers (such as cloud hosting and analytics services) may process data in other jurisdictions. Where data is transferred internationally, we ensure adequate safeguards are in place through contractual data protection clauses and ensuring that recipients adhere to data protection standards comparable to those required under Indian law.

1.20 Marketing Communications

Charitey will not send marketing communications without your explicit prior consent. Where you have opted in to receive updates, newsletters, or platform announcements, you may withdraw that consent at any time by:

  • Using the unsubscribe link included in every marketing email.
  • Updating your communication preferences in your account settings.
  • Contacting us directly at support@charitey.org.

1.21 Push Notifications

The Charitey mobile application (when launched) may request permission to send push notifications regarding donation matches, volunteer opportunities, and platform updates. You may grant or revoke push notification permissions at any time through your device settings. Push notifications will not be used for marketing purposes without explicit consent.

1.22 Changes to This Policy

Charitey reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, services, or applicable law. We will notify you of material changes by posting a notice on the Platform and, where appropriate, by email. Continued use of the Platform following the publication of changes constitutes acceptance of the revised policy. We encourage you to review this policy periodically.

1.23 Governing Law

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and its amendments, and any regulations issued thereunder. Disputes arising from this policy shall be subject to the jurisdiction of competent courts located in [City, State], India.

1.24 Contact Details

Grievance Officer: grievance@charitey.org Privacy Enquiries: privacy@charitey.org General Support: support@charitey.org Postal Address: [Registered Address, City, State, PIN Code], India

1.25 Consent

By using the Charitey Platform, creating an account, or submitting information through our forms, you confirm that you have read and understood this Privacy Policy and that you consent to the collection, processing, and use of your personal data as described herein. Where applicable, we will seek your specific consent for processing activities that require it, and you retain the right to withdraw such consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.