Privacy Policy

1. Introduction

At Sansthit, we consider the privacy and security of your data to be our highest priority. This Privacy Policy explains how we collect, use, process, and protect your personal information when you use our website and SaaS platform.

By registering your community, organization, or Samiti on Sansthit, or by interacting with public profiles hosted on our platform, you agree to the data practices described in this policy.

2. Role Designation: Controller vs. Processor

For the purposes of applicable data protection laws (including India's Digital Personal Data Protection Act, 2023):

• Data Controller: The registered Community Administrator (Samiti) is the Data Controller. They decide why and how the personal data of their members, donors, and devotees is collected.
• Data Processor: Sansthit acts as the Data Processor. We solely provide the software infrastructure to store, process, and organize the data as directed by the Community Administrator.

3. Information We Collect

We collect information in the following ways to provide a seamless SaaS experience:

• Account Information: When you register a community, we collect your name, email address, mobile number, organization details, and UPI IDs for receiving direct payments.
• Donor & Devotee Data: Administrators may input names, phone numbers, addresses, and donation amounts of their community members. Note: Sansthit does not claim ownership of this data.
• Transaction Data: We store UTRs (Unique Transaction References) and transaction statuses to generate audit reports and ledgers. We do not store your bank account passwords, CVV, or PINs.
• Automated Data: We automatically log device information, IP addresses, and browsing patterns to ensure platform security and prevent fraudulent access.

4. How We Use Your Information

Sansthit does not sell, rent, or lease your personal data or your community's donor lists to third-party marketing agencies. We use the collected data strictly to:

• Provide, operate, and maintain our community management software.
• Generate digital VIP passes, financial ledgers, and automated audit reports.
• Send SMS or Email notifications regarding account updates, OTPs for secure login, or payment verifications.
• Detect, prevent, and address technical issues or fraudulent activities on the platform.

5. Data Sharing and Disclosure

We may share your information only in the following specific circumstances:

• With Service Providers: We use trusted third-party cloud hosting providers (e.g., AWS, GCP) and SMS/Email gateways to run our platform. These providers are bound by strict confidentiality agreements.
• For Legal Compliance: We may disclose information if required to do so by law, court order, or government request (e.g., cooperating with law enforcement in cases of financial fraud).
• Public Profile Display: If a Community Administrator explicitly sets their ledger or top donors list to "Public" via the dashboard settings, that specific data will be visible to external visitors.

6. Data Security Measures

We implement enterprise-grade security measures to protect your information:

• All data transmitted between your browser and our servers is encrypted using Secure Socket Layer (SSL/TLS) technology.
• Passwords are hashed using advanced cryptographic algorithms.
• We maintain strict internal access controls; our staff cannot view your specific donor records unless required for a requested technical support ticket.

7. Data Retention and Deletion

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by Indian tax and IT laws.

If you choose to delete your Sansthit account, your community profile and associated data will be removed from active public view immediately. We provide a 30-day grace period to export your data, after which it is permanently and irreversibly purged from our database backups.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance user experience, remember your login sessions, and analyze platform traffic. You can instruct your browser to refuse all cookies; however, doing so may limit your ability to use certain features of the Sansthit dashboard.