Privacy Policy

Information we collect

When you donate, we collect the name, email address, telephone number, selected donation cause, and payment amount you provide. We record payment order IDs, payment status, and transaction references for reconciliation and donor support. This website does not collect your card details, bank credentials, or UPI PIN.

How we use it

We use donor information to process donations, verify payments, maintain financial records, prevent misuse, and respond to legitimate donation enquiries. Information may be shared with payment processors such as Razorpay where necessary to process a transaction.

Scholarship accounts and applications

Scholarship applicants or their parents/guardians use an email verification code to sign in. The application records school and roll number, date of birth, contact and family details, academic results, household income, declarations, and supporting certificates. This information is used to assess financial need and eligibility, request clarification, and administer scholarships. A parent or guardian must acknowledge an application for a student under 18.

Certificates are stored privately. Only the account that submitted an application and authorised Trust administrators can access its supporting documents. Submitted versions and review history are retained to document decisions. Removing a document from an editable application does not erase a previously submitted version of that evidence.

Public scholarship reporting

Public reports show totals by academic year, school and class. They do not show application forms, income, contact details, roll numbers or certificates. Recipient stories need separate consent for the exact public name and text, guardian permission for a student under 18, and admin review. Sharing a story is optional and does not affect a scholarship decision. Applicants can withdraw publication consent in their account; the story is then removed from the website.

Account and document services

The website uses its hosting provider for application records and private document storage, and Amazon Web Services SES to deliver verification codes. Applicant accounts and sessions are managed on the website’s server. These services receive the information needed to provide those functions. Please do not upload bank credentials, card details or unrelated identity documents.

Retention and protection

Transaction records are retained for accounting, audit, and applicable legal obligations. Access to the donation dashboard is restricted to authorized administrators. Applicant documents require account or authorised administrator access. Verification codes expire after ten minutes and are stored as keyed hashes; sessions use secure cookies and can be revoked by signing out. Submitted scholarship versions, supporting evidence and review history are retained for assessment, administration and audit. There is currently no automatic document-purge schedule. A privacy request is reviewed individually, including any records the Trust needs to retain.

Your choices

Use Help & privacy requests in your scholarship account to ask for access, corrections, deletion or an explanation of retained records. Your request and the Trust’s reply are private. Optional story consent can be withdrawn directly from the application and removes the story from public view.

Contact

MY AASHA TRUST: send a private help or privacy request. Sign in with your email code, send your request and return to the same page for the Trust’s reply.