Privacy Policy

[Organisation / committee name], [address], is the data controller. For any privacy question or request, contact [email / phone].

• Identity and contact data: your name and mobile number (and email, if you use one to sign in). Your mobile number is also used to create your internal login identifier.
• Verification data: where a one-time password (OTP) or similar verification step is used, we process the code and the delivery timestamp only to confirm that the number is yours. OTP codes are short-lived and are not used for marketing.
• Membership data: the groups and plans you request or belong to, your joined date and your join-request notes.
• Payment confirmation data: amounts due, amounts paid, payment dates, the UPI reference number you enter, your payment method note, uploaded payment screenshots or receipts, and the organiser's confirmation record. We do not receive or store your UPI PIN, bank credentials, card numbers or account balances.
• Usage data: basic technical logs needed to keep the service secure and working.

To run your membership: calculate dues and late fees, record bids, confirm payments, send reminders and notices, maintain your ledger, and resolve disputes. We also use it to meet the organiser's own accounting and record-keeping needs. We do not sell your data and do not use it for third-party advertising.

Database rules restrict a member to their own records. The organiser (Sanchalak) can see the records of the groups they run. An adviser can see only the members assigned to them, and only their plan and dues information — not their receipts. Uploaded receipts are stored in a private area and opened through short-lived links available to you and the organiser only.

If you opt in to the “most consistent payers” leaderboard, other members of your group see your first name and streak — nothing else. This is off by default and you can turn it off at any time.

Authentication, database and file storage are provided by Supabase, our hosting provider serves the website, and your own UPI app and bank handle the payment itself. Each processes data on our instructions or as an independent controller for their own service.

Membership, contribution and payment confirmation records are kept for the life of the group or plan and for [X] years afterwards, for accounting and dispute purposes. Verification codes are discarded within minutes. You can ask us to delete data we are not required to retain.

You can ask for a copy of your data, correction of anything inaccurate, deletion where we have no continuing obligation to keep it, or withdrawal of consent for optional features such as the leaderboard. Write to [email / phone] and we will respond within [X] days.

Access is protected by password-based authentication, database row-level security policies, private file storage with expiring links, and server-side checks for organiser-only actions. No system is perfectly secure; please use a strong, unique password and tell us immediately if you suspect your account has been accessed.

The service is not intended for anyone under 18 and we do not knowingly collect their data.

Updates will be posted here with a new “last updated” date and announced in the notice feed.