Data We Collect
| Data Type | Who Provides It | Why | Retention |
|---|---|---|---|
| Name, email, phone, org name | All users | Account creation, communication | Account duration + 2 years |
| Registration documents | NGOs | Trust Score verification | 5 years after last verification |
| Audited financial statements | NGOs | P03 scoring | 7 years (statutory) |
| Board member details | NGOs | P02 scoring, public profile | Account duration + 2 years |
| EOI messages | Funders | Connecting funders and NGOs | 3 years |
| Login activity logs | System | Security monitoring | 90 days |
What We Never Do
- Sell your data to any third party
- Share your documents with funders without explicit consent
- Use your data to train AI models without disclosure
- Send marketing communications from third parties
- Share personal contact details with funders
EOI privacy: When a funder sends you an EOI, their personal email is not disclosed. Communication goes through the PATVAAR dashboard until both parties choose to connect directly.
Your Rights Under DPDP Act 2023
- Right to access: Request a copy of all personal data we hold about you
- Right to correction: Correct inaccurate personal data
- Right to erasure: Request deletion subject to legal retention requirements
- Right to grievance redressal: File a complaint with our Data Protection Officer
- Right to nominate: Nominate another person to exercise your rights
To exercise these rights, email hello@patvaar.com with subject "DPDP Data Request - [Your Name]". We respond within 7 working days.
Data Fiduciary Registration
PATVAAR is in the process of registering as a Data Fiduciary under the DPDP Act 2023. Until registration is complete, we voluntarily adhere to the Act principles of purpose limitation, data minimisation, and storage restriction.
Status: DPDP Data Fiduciary registration - In Progress. Target: Q4 2026.