Privacy Policy
How Madad and Ghoncha Online Services collect, use, and protect your information.
1. What we collect
Account data (name, email, preferred language), campaign content you publish, donation records (amount, message, optional email), and technical data needed to run the service (IP address, device type). Identity documents are collected only from organizers for verification.
2. How we use it
To operate campaigns and donations, verify organizer identity, send transactional emails (receipts, reset links, campaign notifications), prevent fraud, and meet legal obligations. We do not sell your data and we do not use it for third-party advertising.
3. Payments
Card or wallet details are handled by HesabPay and never touch Madad's servers. We store the donation amount, status, and a payment reference returned by HesabPay.
4. Identity documents
KYC documents are stored encrypted in a restricted bucket, are visible only to authorized compliance reviewers, and are never shown publicly. They are retained only as long as the law and fraud-prevention require.
5. What is public
Published campaigns (title, story, photos, amounts raised), organizer display names, and non-anonymous donor names with their messages are public. Choose “anonymous” at donation time to keep your name off the campaign page.
6. Sharing
We share data only with the processors that run the service — HesabPay for payments, our hosting providers for infrastructure — and with authorities when the law genuinely requires it.
7. Security and retention
Secrets and identity documents are encrypted at rest; passwords are stored as modern memory-hard hashes (argon2id); access is logged. Donation records are kept for accounting; you may request deletion of your account and personal data at any time.
8. Your rights and contact
You can access, correct, or delete your personal data, and object to processing, by writing to info@ghoncha.com. We answer within 30 days.