Privacy Policy

This policy explains how CoFellow ("CoFellow", "we") handles your personal data under the Digital Personal Data Protection Act, 2023. We collect only what we need to run the platform safely.

1. What we collect

• Account: name, email address, password (stored only as a secure hash).
• Volunteer profile: photo, phone number, date of birth, gender, city, bio, skills, languages, social links and an emergency contact.
• Identity document: the government ID you upload for verification.
• Host profile: organisation details, location, photos, GST number and business documents.
• Activity: applications, messages, reviews, support tickets and the date you were last active.

2. Why we use it

• To create your account and let hosts and volunteers find and contact each other.
• To verify identities and keep the community safe, including reviewing reported chats.
• To send emails you need: verification codes, application updates and messages.
• To meet legal obligations and respond to lawful requests from authorities.

We do not sell your data and we do not use it for third-party advertising.

3. Who can see what

• Hosts see the profile of volunteers who apply to them, but never the identity document.
• Identity and business documents are stored privately and are visible only to you and CoFellow admins.
• Messages are visible only to the two people in the chat, and to admins when a chat is reported.
• We use service providers to run CoFellow (hosting, database, file storage and email). They process data only on our instructions.

4. How long we keep it

We keep your data while your account is active. When you delete your account, your profile, documents, applications, messages and reviews are deleted, except records we must keep by law.

5. Your rights

• See and correct your data from your profile and settings.
• Delete your account from Settings, which erases your data as described above.
• Withdraw consent by deleting your account; this does not affect processing that already happened.
• Raise a complaint with our grievance officer, and then with the Data Protection Board of India.

6. Security

Passwords are hashed, connections use HTTPS, identity documents are kept out of public storage, and access to admin tools is restricted. No system is perfectly secure, so please use a strong, unique password.

7. Grievance officer

Email: shubamsaini.sain10@gmail.com

We reply to grievances within 30 days.