Privacy Policy

Gachi Foundation respects your privacy. This policy explains what we collect on this website, why we collect it, how long we keep it, and the rights you have under the Digital Personal Data Protection Act, 2023 and other applicable Indian law. It covers the foundation website, donations, and Fundwright licence purchases. It does not cover proposals you write inside Fundwright on your own computer — those stay on your machine.

Effective 23 September 2026. Version 2.1. Read with our Terms of Use and Donation & Refund Policy.

Who is responsible

Gachi Foundation is the data fiduciary for personal data collected through this website. Correspondence: Dumgi Baramasia, Gopikandar, Dumka — 814103, Jharkhand, India. Email: gachifoundation@gmail.com. Phone: +91-9304137579.

We collect only what we need to run the site, acknowledge support, issue receipts and GST invoices, send a Fundwright licence file, and meet tax, company and banking law. We do not sell or rent personal data.

What we collect

You give us. Name, email, phone, postal address and message text from the contact form or email. For a donation: payer name, amount, date, mode of payment, transaction reference, and PAN where you want an 80G certificate or where the law requires it (including gifts of ₹50,000 or more). For a Fundwright purchase: billing name, email, plan, payment reference, GST details if you ask for a tax invoice, and the email address that should receive licence.lic.

Your device gives us. Standard server logs (IP address, browser, pages viewed, approximate time) and, if enabled, anonymous or pseudonymous analytics of page visits. We use these to keep the site up, fix errors and understand which pages are useful. We do not use them to build a marketing profile for sale.

We do not collect on this site. Card numbers, UPI PINs, OTPs or internet-banking passwords. Payments for donations go through your own bank or UPI app to the official account on the Bank Details page. Fundwright checkout, if offered online, is handled by the payment provider shown at that step — not stored in our web forms.

Fundwright and your laptop

Fundwright is built to run offline. Proposals, budgets, logos, templates and the local database live on your computer. After you have received your licence file, the app does not need to call our servers to write, cost, brand, export or use the on-device AI enhancement. We do not host your draft proposals.

What we do hold for Fundwright is the minimum needed to sell and support a licence: who paid, which plan, the email the file was sent to, invoice records, and support messages you send us. If you write from the purchase address and ask us to re-issue licence.lic, we will use that email to send the file again.

You are responsible for backing up the local database and for any personal data of third parties (staff, beneficiaries, funders) that you type into a proposal. Do not put special-category or unnecessary personal data into a proposal if a generic description would do.

Why we use the data

We use personal data to: respond to messages; process and receipt donations, including 80G certificates and the prescribed donation statement to the Income-tax Department; process Fundwright orders, GST invoices and licence files; diagnose site problems; meet company, tax, FCRA (if it later applies), accounting and audit duties; and send programme or product updates only if you have asked for them or they are a necessary part of a purchase (for example, “your licence file is attached”).

Legal bases under the DPDP Act are your consent (forms, optional updates) and certain legitimate uses the Act allows — in particular, performance of a request you made, compliance with law, and employment or contractual purposes where they apply.

When we share it

We share personal data only where needed:

• Payment systems, banks and UPI providers, to complete a donation or a Fundwright purchase.
• The Income-tax Department, for 80G reporting of qualifying donations.
• GST and accounting tools, for invoices on Fundwright sales.
• Email delivery, so a receipt or licence.lic can reach you.
• Our professional advisers (chartered accountant, auditor, lawyer) under confidentiality.
• Regulators, courts or police when Indian law requires it.

We do not sell donor or customer lists. We do not use your data to train public AI models. The AI model shipped inside Fundwright runs on your machine.

How long we keep it

Contact messages: as long as needed to answer you, then a short archive. Marketing or early-list mail: until you ask to be removed. Donation and 80G records, Fundwright invoices and licence-issue logs: for the statutory retention period under company and tax law, generally eight years from the end of the relevant year, or longer if a dispute or audit is open. Server logs: a short operational period. When the purpose and the law no longer require the data, we delete or irreversibly anonymise it.

How we protect it

The site is served over a secure connection and is protected against common web attacks (CSRF, XSS, clickjacking). Access to donation and licence records is limited to people who need it for receipts, accounts or support. No method of transmission or storage is perfectly secure; if we become aware of a breach that is likely to affect you, we will notify you and the Data Protection Board of India as the DPDP Act requires.

Cookies and analytics

Essential cookies or similar tools may be used so the site can run (for example, security tokens). If we use optional analytics, they are for aggregated visit counts, not for selling advertising. You can block cookies in your browser; the site may then lose some functions.

Children

This site and Fundwright are directed at adults - donors, NGOs, consultants and agencies. We do not knowingly collect personal data from a child under 18 without a parent or guardian as the DPDP Act requires. Programme photographs or stories of children, if published, are handled with consent of a parent or guardian and with dignity. Do not send us a child’s PAN or other identifiers unless a lawful process requires it.

Your rights

Subject to the DPDP Act and statutory record-keeping, you may ask us to: give you a copy of the personal data we hold about you; correct it; erase it where the purpose is over and the law does not require us to keep it; withdraw consent for optional updates; and complain if you believe we have misused it. Write to gachifoundation@gmail.com. We aim to answer within one working day and to complete a straightforward request within a reasonable period. You may also approach the Data Protection Board of India.

We cannot delete a donation record or a GST invoice that tax or company law still requires us to keep. We cannot see or erase Fundwright files that exist only on your laptop.

International access

Our operations and primary records are in India. If you write to us from outside India, your message is received and stored here. We do not currently accept foreign contributions. Do not send a donation from a foreign source without reading the Donation & Refund Policy.

Changes

We may update this policy when the law, our registrations (80G particulars, FCRA, CSR-1) or our tools change. The version on this page is the current one. If a change materially affects how we use data we already hold, we will say so on this page and, where practical, by email.

Contact

Privacy requests, donation-receipt queries and Fundwright licence-file requests: gachifoundation@gmail.com.