1. Hum kaun hain
Glasspot Ferrowright Engineering ka product hai: ek MSME (Udyam) registered business (UDYAM-RJ-28-0060965), Rajsamand, Rajasthan, India. Yeh policy Glasspot ki website, har event ke public page, aur committee app par laagu hoti hai.
Yeh policy India ke Digital Personal Data Protection Act, 2023 (DPDP Act) aur DPDP Rules, 2025 ke hisaab se likhi gayi hai. Ferrowright Engineering ki baaki services ke liye ferrowright.com/privacy dekhein.
2. Do tarah ka data, do alag zimmedaar
- Aapka account (naam, mobile, email, login): iske liye Ferrowright Engineering zimmedaar hai (Data Fiduciary).
- Event ka hisaab jo committee daalti hai (donors ke naam, pita ka naam, gaon, amount, kharche, bill, photos, UPI / bank details): iske liye woh committee / organiser zimmedaar hai jisne event banaya. Hum unki taraf se yeh data rakhte aur dikhate hain (Data Processor).
Committee ki zimmedaari hai ki donors ko pata ho ki unka naam aur amount event ke page par dikhega. Jo donor apna naam nahi dikhana chahte, unki entry gupt daan ke roop mein daali ja sakti hai: tab naam kahin nahi dikhta.
3. Hum kya data rakhte hain
Account banate samay:
- Naam, aur mobile number + 6 digit PIN. PIN hum scramble karke (hash) rakhte hain: hum bhi use padh nahi sakte.
- Google se login karein toh: Google ka diya naam, email aur Google account ID. Aapka Google password humein kabhi nahi milta.
- Aapki marzi se: photo, WhatsApp number, gaon / shahar, district.
- Account kab bana, aap aakhri baar kab aaye, aur aapne kis page se account banaya (jaise kisi event ki donor list).
- Kya aapne Ferrowright Engineering ko doosri services ke liye contact karne ki permission di (alag tick, pehle se unticked).
Committee members ke liye, iske alawa:
- Event mein aapka role (Owner / Admin / Collector) aur designation (jaise Sachiv).
- Aapne kaun si entry ya kharcha joda, badla ya cancel kiya: iska record (audit log) aapke naam ke saath rehta hai, taaki hisaab par bharosa rahe.
- Aapka phone number event ke public page par sirf aapki permission se dikhta hai, aur event khatam hote hi chhup jaata hai.
Committee jo event data daalti hai:
- Donor ka naam, pita ka naam, gaon, amount, saman, payment ka tarika, UTR number, note.
- Donor ka phone number (receipt bhejne ke liye): yeh kabhi public page par nahi dikhta, sirf committee ko.
- Kharche, bill ki photo, event ki photos, banner, programme, aur chanda lene ke QR / UPI / bank details (yeh donors ko dikhane ke liye hi hote hain).
Share card (sirf agar aap khud banayein):
- Donor apni receipt link se apna share card bana sakte hain. Card par aapka naam, gaon, event, aur aapki marzi se amount aur aapki photo lagti hai.
- Photo hum chhoti karke (720 px) rakhte hain aur usme se phone ki chhupi jaankari (location, phone model) hata dete hain. Photo sirf card par dikhti hai, alag se public nahi hoti.
- Card ka link jisko bhi aap bhejein, woh card dekh sakta hai. Receipt link se "Card hatayein" dabate hi card aur photo turant delete ho jaate hain.
Technical:
- Ek login cookie (neeche section 6 dekhein).
- Server ke logs: IP address, samay aur browser ki jaankari, suraksha aur galti dhoondhne ke liye.
- Bahut zyada login try rokne ke liye IP address kuch der memory mein rehta hai; yeh save nahi hota.
- Entry galat hai? form mein aap jo message aur contact dete hain.
Hum yeh record nahi karte ki aapne kaun se page dekhe, kya search kiya, ya kis donor ki entry kholi. Koi advertising ya analytics tracker nahi hai.
4. Data kis kaam aata hai
Aapki consent (account banate samay) se, ya DPDP Act ke Section 7 mein diye legitimate uses ke liye, sirf in kaamon mein:
- Aapko login karwana aur event ka poora hisaab dikhana.
- Committee ko chanda, kharcha aur hisaab milan ka kaam karne dena, aur donors ko receipt bhejna.
- Yeh samajhna ki Glasspot kitne log aur kahan se use kar rahe hain (kitne account bane, kis event se aaye), taaki service behtar ho.
- Galat use, spam aur dhokha rokna, aur suraksha.
- Kanoon ki zaroorat poori karna, ya kisi kanooni maamle mein apna paksh rakhna.
Hum aapka data bechte nahi, kiraye par nahi dete, aur ads ke liye use nahi karte. Ferrowright Engineering aapse doosri services ke baare mein sirf tabhi contact karega jab aapne uska alag box tick kiya ho.
5. Kaun dekh sakta hai
- Sab log: event ka summary (balance, kul collection, kharcha, gaon wise total), banner, date / jagah aur chanda dene ke details.
- Login kiye hue log: donors ki list, kharche aur bill, committee aur photos (event Public ya 'Sirf link wale' ho tab). Private event sirf committee dekh sakti hai.
- Committee: apne event ka poora data, donor ke phone number samet.
- Hamare service providers, sirf hamare kaam ke liye aur contract ke saath: Oracle Cloud Infrastructure (server aur storage), Google (Google se login chunne par, aur page ke fonts, jinke liye aapka browser Google Fonts se judta hai).
- WhatsApp, Telegram, Facebook: sirf tab, jab aap khud Share button se link bhejte hain. Unki apni privacy policy laagu hoti hai.
- Sarkar ya court: sirf jab kanoon ke hisaab se maanga jaaye.
Hamare kuch providers ka data India ke bahar bhi process ho sakta hai. Hum data sirf un deshon mein bhejte hain jinpar Bharat sarkar ne DPDP Act ke Section 16 ke tahat rok nahi lagayi hai.
7. Data kab tak rakhte hain
- Account: jab tak aap rakhein. Aap kabhi bhi delete karwa sakte hain (section 9). Agar 3 saal tak aap login nahi karte, aur kisi event ki committee mein nahi hain, toh account delete kar diya jaata hai.
- Event ka hisaab: jab tak committee event rakhti hai, kyunki hisaab ka record hi iska maksad hai. Committee event hatwana chahe toh 30 din mein hata diya jaata hai.
- Audit log (kisne kya badla): event ke saath hi rehta hai, aur event ke saath hi hatta hai.
- Server aur suraksha logs: kam se kam 1 saal, jaisa DPDP Rules, 2025 kehte hain; usse zyada sirf kisi jaanch ya kanooni maamle ke liye.
- Backup: delete kiya gaya data backups se 30 din mein hat jaata hai.
8. Suraksha
Poori site HTTPS par chalti hai, PIN hash karke rakha jaata hai, galat PIN ke zyada try par account kuch der lock hota hai, aur server tak pahunch sirf zaroori logon ko hai. Koi bhi system poori tarah safe nahi hota; agar kabhi data leak hota hai, toh hum DPDP Act ke hisaab se prabhavit logon aur Data Protection Board of India ko batayenge, aur CERT-In ko 6 ghante mein report karenge.
9. Aapke adhikar
DPDP Act ke tahat aap yeh kar sakte hain:
- Aapke baare mein hum kya data rakhte hain, uski jaankari maangna.
- Galat ya adhoora data theek karwana. Profile mein naam, photo, gaon aap khud badal sakte hain.
- Account aur data delete karwana.
- Consent waapas lena (jaise doosri services ke liye contact ki permission). Isse pehle hua kaam nahi badalta.
- Kisi aur ko nominate karna, jo aapki mrityu ya asamarthta mein yeh adhikar use kar sake.
- Shikayat karna: pehle humse, phir Data Protection Board of India mein.
Inke liye contact@ferrowright.com par email karein, subject: "Glasspot privacy request", aur apna registered mobile number ya email likhein. Pehchaan pakki karne ke liye hum kuch pooch sakte hain. Hum 30 din ke andar jawab dete hain.
Donor hain aur apni entry badalwani hai? Event page par "Entry galat hai?" dabayein, ya committee se baat karein. Committee jawab na de, toh humein email karein: hum committee tak baat pahunchayenge aur madad karenge.
10. Bachche
Glasspot par account sirf 18 saal ya usse bade log bana sakte hain. Agar aapko lagta hai ki kisi bachche ne account banaya hai, toh humein batayein: hum use delete kar denge.
11. Is policy mein badlav
Service ya kanoon badalne par yeh policy badal sakti hai. Upar likhi "Last update" date se pata chalega. Bade badlav hone par hum login ke baad app mein bata denge.
12. Sampark aur Grievance Officer
Privacy se jude sawaal, request ya shikayat ke liye hamare Grievance Officer se sampark karein (DPDP Act aur Information Technology Act, 2000 ke tahat):
Grievance Officer, Ferrowright Engineering
Rajsamand, Rajasthan, India
Email: contact@ferrowright.com
Hum 24 ghante mein shikayat milne ki pushti karte hain aur 30 din mein hal karte hain. Jawab se santusht na hon, toh aap Data Protection Board of India ja sakte hain.