Privacy Policy
Last updated August 2026.
Support a Causeis a fundraising platform. This policy explains what personal data we collect, why, who we share it with, how long we keep it, and the rights you have under India's Digital Personal Data Protection Act, 2023(the “DPDP Act”).
Contributions are received by CommuniTree, which is the entity responsible for this data (the Data Fiduciary) and issues your receipts — see our Terms & Conditions.
If you are under 18, or are giving data about someone under 18, read our Children's Data Policy — it adds protections and governs where the two overlap.
What we collect, and why
| You are a… | We collect | Purpose |
|---|---|---|
| Donor | Name, email, optional message; the contribution amount and payment references. If you ask for an 80G-style receipt, PAN and address. | Process the payment, send your receipt, show the project's progress, and meet tax and accounting rules. |
| Project creator | Your name, contact email, and the project details you enter. | Review, publish, and run your project; contact you about it. |
| Fundraiser | Name, display name, email, optional phone, optional photo/video and short bio. | Create and show your fundraiser page after review. See the Children's Data Policy if you are under 18. |
| Account holder | Email, optional phone, name, and a password (stored only as a secure one-way hash). | Sign you in and let you manage your projects, fundraiser page, and receipts. |
| Visitor | A newsletter email if you subscribe; a report or comment if you leave one; a technical log of the request (including IP address) for security. | Send updates you asked for, act on reports, keep the platform secure and prevent abuse. |
We ask only for what a purpose needs. We do not sell or rent your data, and we run no behavioural tracking, profiling, targeted advertising, or advertising cookies — the site carries none.
Payments
Card, UPI, netbanking, and wallet details are entered into and processed directly by our payment gateway, Razorpay, under its own security and privacy terms. Those details never pass through or get stored on our servers — we receive only the payment references needed to confirm and reconcile your contribution.
Who we share data with
We share personal data only with the service providers that make the platform work, each acting on our instructions:
- Razorpay — payment processing.
- Resend — sending transactional email (receipts, confirmations, account emails).
- Our hosting and storage providers — running the site and storing uploaded images and video securely.
A fundraiser or project you choose to share is, by design, shown publicly. Donor names appear in a project's activity unless you contribute anonymously. We disclose data to authorities only where the law requires it.
How long we keep it
We keep personal data only as long as its purpose needs. Contribution and receipt records are retained as long as tax and accounting law requires. Account, project, and fundraiser data is kept while your account is active and for a reasonable period after. Uploaded images and video have their location metadata stripped on upload, and are removed when a page is taken down or on request. When data is no longer needed, we delete it.
Children's data
Some projects involve people under 18 — a young fundraiser, or a child who is the beneficiary of a cause. We treat anyone under 18 as a child, process their data only with a parent or guardian's consent, never track or profile them, and remove their data on request. The full rules are in our Children's Data Policy.
Your rights
Under the DPDP Act you have the right to:
- Access a summary of the data we hold about you and how we use it.
- Correct, complete, or update your data.
- Erase your data where we no longer need it for a lawful purpose.
- Withdraw consent at any time, as easily as you gave it.
- Nominate another person to exercise your rights if you die or become incapacitated.
- Grievance redressal — a prompt answer from us to any concern.
To exercise any of these, email support@supportacause.co.in. We respond within the timelines the DPDP Act sets.
Grievances
Raise any privacy or data grievance with us at support@supportacause.co.in and we will route it to the person responsible. If you are not satisfied with our response, you may complain to the Data Protection Board of India. Full contact details are on our Contact page.
Changes
We may update this policy as the platform or the law changes. The date at the top shows the latest version; material changes will be highlighted on the site.