Privacy Policy

1. Chanda Is Software, Not a Donation Processor

Chanda helps mandals record donation and vargani collections and generate receipts. Donors pay the mandal directly, in cash or by UPI/bank transfer the mandal arranges itself.

Chanda does not collect donation money, hold donation money, settle or transfer money, or process card/UPI payments itself.

2. Information Chanda Handles

• Mandal information: mandal name, Marathi name, slug, logo, active status.
• Admin, user, and member information: name, phone number, password (stored as a one-way hash, never in plain text), role, active status.
• Donor and collection information: donor name, amount, payment mode (cash or UPI), receipt number, collecting user, date, and any later edits with the edit reason.
• Expense and accounting information: expense item, amount, note, uploaded bill photo, and the recording user.
• Uploaded files: bill photos, mandal logos, and profile photos, stored as compressed images.
• Authentication and security information: password hashes and session tokens used to keep you signed in.

3. Why This Information Is Used

• Create and manage mandal accounts
• Authenticate users and control access by role
• Record and display donation and expense entries
• Generate digital receipts
• Let a user share a receipt through WhatsApp or another app they choose
• Generate PDF exports and reports
• Keep audit context: who recorded or edited an entry, and why

4. Mandal Responsibility for Donor Information

The mandal decides what donor information it collects, and is responsible for the accuracy of donor names, amounts, and payment details entered into Chanda, and for confirming that donations were actually received.

5. Who Can Access Information

Access is controlled by role within a mandal: Mandal Admin, Treasurer, Volunteer, and Viewer, as configured by that mandal's own admin.

A mandal's data is never visible to another mandal's users. Core3 Innovations staff may access data only to provide support or maintain the service.

6. Third-Party Service Providers

Chanda's data is stored using Cloudflare (Workers and D1 database) for application hosting and storage.

We do not use a separate payment gateway, a third-party WhatsApp messaging API, or a separate analytics or tracking service inside the app.

7. WhatsApp and Receipt Sharing

When a user chooses to share a receipt on WhatsApp, this opens WhatsApp (or the device's native share sheet) with the receipt file.

Chanda does not send this message on the user's behalf through any backend service, and does not receive delivery or read confirmation from WhatsApp.

8. Cookies and Local Storage

Chanda does not use cookies or third-party advertising or analytics trackers.

The app stores a small amount of information directly in your browser's local storage: your login session, language preference, any donation/expense entries recorded while offline until they sync, and your profile photo. This stays on your device and is not sent to us except when the app syncs it as part of normal use.

9. Data Security

Passwords are hashed with PBKDF2, a one-way method; we cannot recover your actual password.

Each mandal's records are isolated from every other mandal at the database level. Traffic to Chanda is served over HTTPS.

10. Data Retention

We retain a mandal's records for as long as the mandal's account is active, so treasurers and admins can refer back to past donation and expense history. A mandal admin can request deletion of specific records or the full account, as described below.

11. Access, Correction, and Deletion Requests

Mandal users can correct their own entries; edits are recorded with a reason and shown in the edit history.

For account-level requests — reviewing, correcting, exporting, or deleting a mandal's data — contact your mandal admin, or write to info@core3innovations.com.

12. Account Termination

Accounts may be suspended or deactivated by a mandal admin (for a user) or by us (for a mandal, per the Terms and Conditions).

Some record history may be retained where needed for legal, audit, or dispute purposes even after an account is deactivated.

13. Children and Minors

Chanda is intended for use by adult mandal administrators, treasurers, and volunteers managing an organisation's records. It is not directed at children, and mandals should not enter identifying information about minors beyond what is necessary for a receipt.

14. Indian Privacy and Data Protection Law

Core3 Innovations aims to handle personal data in line with applicable Indian data protection law, including the Digital Personal Data Protection Act, 2023, as and when its provisions come into force and apply to a service of this kind.

15. Changes to This Policy

We may update this Privacy Policy as Chanda changes. The "Last updated" date at the top of this page changes whenever this policy is revised.