Privacy Policy

A committee (“samithi”) that uses UtsavSamithi decides what it records about its donors and its spending. [TO BE COMPLETED] operates the software and stores that data on the committee’s behalf.

Each samithi can see only its own records. Committee data is not shared between samithis and is not sold or provided to advertisers.

Account and committee information, provided by committee members:

• Name, email address and mobile number of each committee member
• The role a member holds within the samithi
• Samithi name, area, city and contact details
• Preferred language

Donor information, entered by the committee when recording a donation:

• Donor name, and mobile number where provided
• Donation amount, date, type and payment method
• A payment reference, where the committee records one

A donor may be recorded as anonymous, in which case no name or number is stored against the donation.

Financial and operational records:

• Expenses, categories, vendor names and approval decisions
• Uploaded documents such as bills and receipt designs
• Receipts issued, each with its own number

A samithi may publish a transparency page showing its opening balance, total donations, total expenses and current balance.

Donor phone numbers, donor email addresses, payment references, uploaded documents, internal notes and audit records are never shown on a public page.

Subscription payments are processed by Razorpay. Card, UPI and banking credentials are entered on Razorpay’s own interface and are never seen or stored by UtsavSamithi. We retain the payment identifier, order identifier, amount, currency and status that Razorpay returns, so a subscription can be reconciled.

Razorpay processes that information under its own privacy policy, which is available on the Razorpay website.

Uploaded bills, receipts and receipt designs are stored in Supabase Storage. Access is granted through short-lived signed links issued only after a server-side permission check; the files are not publicly listable.

A session cookie identifies a signed-in user. A second cookie remembers the samithi currently being viewed, and another remembers the chosen language. No advertising or third-party tracking cookies are set.

Important financial changes are recorded in an audit trail with the person responsible and the time. Sign-in attempts and password-reset requests are rate limited. These records exist to protect the committee’s money and are retained with the committee’s other records.

Financial records are retained for as long as the samithi keeps its account, because a ledger is only useful if past years remain readable. If a subscription lapses, nothing is deleted — the samithi keeps read access to everything already recorded.

A committee administrator can correct records within the application. To request deletion of an account, of a samithi, or of a specific person’s information, write to [TO BE COMPLETED]. We will confirm the request with a committee administrator before acting on it, because deleting financial records affects the whole committee and not only the person asking.

Some records may be retained where a legal or accounting obligation requires it. We will say so if that applies to a particular request.

[TO BE COMPLETED]
[TO BE COMPLETED]
[TO BE COMPLETED]

This policy is governed by the laws applicable in [TO BE COMPLETED].