Privacy Notice
Version 2026-08-14.1 · Madad
Who we are
Madad (“we”, “us”) operates this platform. For the purposes of the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described here, and you are the Data Principal.
What we collect, and why
We collect only what each purpose below actually needs. You choose the optional ones when you sign up, and you can change your mind at any time.
Create and operate my account
RequiredStore my name, email, phone and password so I can sign in, and contact me about my account.
Verify my identity and referral
RequiredLet the Madad admin team review my details and my referrer’s details to confirm I am a genuine member of the community before my account is approved.
Matrimony matching (optional)
OptionalUse my matrimony profile — including photos, age, education and community details — to suggest matches to other verified members, and to show my profile to them.
If you apply for financial aid or a scholarship, we additionally collect the details on that form — including income and supporting documents — solely to assess your application.
Where your data is stored, and who processes it
We do not run our own servers. 3 companies process data on our behalf, and we name them so you know exactly who holds what:
- Neon — Our database — your account, your profiles, your applications and your messages all live here. Held in the United States.
- Cloudflare — The website itself, and the storage holding the photographs, résumés and documents you upload. Held in data centres around the world, which can include locations outside India.
- Resend — The service that delivers our emails to you, such as sign-in codes and notifications. It necessarily handles your email address and the contents of the messages we send you. Held in the United States.
So: your personal data is processed outside India. Section 16 of the DPDP Act permits this, except to any country the Central Government restricts by notification. If a provider we use falls under such a restriction, we will move away from it. Each of these providers encrypts data in transit and at rest, and each is engaged on terms that allow them to process your data only to run this platform, not for their own purposes.
We do not sell your data, and we do not share it with advertisers. The only sharing that happens is the sharing you chose when you signed up — showing your matrimony profile to other verified members.
How long we keep it
We keep your data for as long as your account is active, and then only for the periods below. These are maximums, not targets — you can have your data deleted sooner at any time by using Delete my account, and we act on that immediately rather than waiting for a period to run out.
| What | How long |
|---|---|
| Expired password-reset codesThe one-time code sent when someone asks to reset their password. | Until it expires — 15 minutes — and cleared from the account on the next purge run |
| Expired email-verification linksThe token behind the "confirm your email address" link sent at signup. | Until it expires, then cleared on the next purge run |
| Job browsing recordsWhich member opened which job advertisement. | 90 days |
| Rejected signupsThe account of someone whose application to join was turned down: their name, email, phone, date of birth, referral details and, for an under-18 applicant, their parent or guardian’s details. | 6 months |
| Records from the portals the platform has closedEverything the jobs, marketplace and local-services portals collected: seeker and employer profiles, the résumés attached to them, job postings and applications, marketplace and services profiles, their listings and the requests made against them. | Until the Trust decides — NOT YET SETProvisional — we are still confirming this period. |
| Aid and scholarship decisionsThat an application was made, by whom, for how much, and what the admin decided. | 8 years from the end of the financial year — PROVISIONALProvisional — we are still confirming this period. |
| Enquiries and donation enquiriesMessages sent through the contact and donate forms, and how an admin answered them. | 3 years |
| Grievances and how they were answeredA complaint raised with the Grievance Officer: the complainant’s name, email and phone number, up to 5,000 characters describing what went wrong, which category it was filed under, and the answer the admin gave. | 3 years after the grievance is answered |
| Job applicationsAn application to a vacancy: the résumé attached to it, the covering letter, and the messages exchanged with the employer. | 12 months |
| Verification historyThe record that a named admin approved or rejected a named member, and when. Holds the member’s name and email even after their account is gone. | 3 years |
| Signup review notesWhat an admin wrote after ringing an applicant’s karyakar — the call outcome and any note, which frequently names and quotes a third party who never used this platform. | 2 years |
| Administrative activity logsThe admin’s internal notification log — new signup, new listing, new aid request — whose message text usually names the member concerned. Breach records are written to the same table and are NOT covered here; they are the entry below. | 12 months |
| Records of a personal data breachThe written record of a breach: what was exposed, how it came to light, who wrote it down, when the admin became aware, and the reporting deadlines that started running from that moment. | Kept — never deleted by a purge run |
| Consent recordsThe append-only trail of every consent granted, updated or withdrawn, with the version of the notice the person was shown at the time. | For as long as the account exists, and for 3 years after it is deleted |
| Consent evidence for deleted accountsThe consent trail of an account that has been deleted, copied out of consent_records at the moment of deletion so the cascade from users cannot destroy it. | 3 years from the date the account was deleted |
| Sign-in and security logEvery sign-in, failed sign-in, lockout, password change, password reset and forced sign-out — with the IP address and browser the request came from. | Not set yet — we are deciding how long to keep theseProvisional — we are still confirming this period. |
| The disposal registerOne row for every account this platform has destroyed: when, by whom, on what stated reason, what was destroyed, and what was retained under this schedule. | Kept indefinitely |
Schedule last reviewed 2026-08-04. We review it at least once a year and whenever we start collecting something new.
3 of the periods above are marked provisional. That means we have published our current working answer while we confirm it. We would rather show you a figure marked unconfirmed than a confident one we cannot yet stand behind. What is still open:
- Records from the portals the platform has closed — The Trust must decide the disposal date and authorise it. Until it does, this schedule says openly that data whose purpose has ended is still being held, which is the honest position and the one an auditor can act on — rather than a period nobody has agreed to, quietly published as though it were practice.
- Aid and scholarship decisions — The admin’s auditor must confirm the correct statutory period before this figure is relied on. Until they do it is published as provisional rather than stated as fact.
- Sign-in and security log — How long we keep the sign-in and security log. We need it long enough to investigate a break-in that is noticed late, and we do not want to hold years of records of when each member was at their computer. The admin is settling on a figure — the working answer is 12 months — and until it is settled nothing here is deleted, which we would rather tell you than imply a period we are not yet operating.
Deletions under this schedule are carried out by an admin reviewing the data, not by an automatic process. We prefer a person to check before anything is destroyed, because a deletion is not reversible.
Your rights
Under the DPDP Act you have the right to:
- Access a summary of the personal data we hold about you, and how we use it. You can do this yourself at any time: sign in, open Your Data & Account Settings from the menu on the portal page, and choose Download my data. The file covers every portal and lists the photographs and documents you uploaded.
- Have inaccurate or incomplete data corrected or updated.
- Have your data erased, subject to any legal obligation we have to retain it. You can delete an individual portal profile or your entire account from the same screen, and the photographs and documents you uploaded are deleted from our storage with it.
- Withdraw any optional consent at any time — it is as easy to withdraw as it was to give. Withdrawing does not affect processing that already happened.
- Nominate someone to exercise these rights on your behalf.
- Raise a grievance with us, and escalate it if you are not satisfied.
Children
Anyone aged 18 and over can sign up in the ordinary way. If you are under 18, the DPDP Act treats you as a child, and we may only handle your data with your parent or guardian’s consent. So we ask you for your parent or guardian’s name, relationship, email and phone number at signup, and a member of Madad speaks to that adult to confirm they agree before your account is approved. Nothing on your account is visible to other members until that has happened.
We do not create accounts for anyone under 13. We do not use a child’s data for advertising or for anything that tracks their behaviour. If you are a parent or guardian and you want your child’s account and data removed, tell us using the details below and we will do it.
If something goes wrong with your data
A personal data breach means your data being seen, copied, changed or destroyed by someone who should not have been able to. If that happens here, the law requires us to tell both you and the Data Protection Board of India, and there is no minimum size below which we may keep quiet about it.
We will contact you without delay — as soon as we know you are affected, not after we have finished working out what happened. We will tell you what was involved, what we have done about it, and what you can do. We report the full details to the Board within 72 hours of becoming aware.
One thing worth knowing in advance: we will never contact you to ask for your password, a one-time code, or a payment — not during an incident and not at any other time. Anyone who does is not us.
Grievance redressal
If you have a concern about how your data is handled — including anything in this notice — tell us through the grievance form. An admin reads it and replies to you within 30 days, which is the maximum the law allows us; in practice we aim to be much quicker.
We do not send an automatic acknowledgement. Instead, a reference number appears on the screen the moment your complaint is recorded — please write it down or photograph it before closing the page, because it is how you can ask us later what happened to it. We send no confirmation email on purpose: anyone at all can raise a grievance without signing in, which is deliberate, and it means an automatic reply could be aimed at an address the sender does not own. The next thing you hear from us is our answer, written by the admin who dealt with it.
If you raise it another way instead — by telephone, or directly with the contact below — nothing is sent to you automatically in that case either, so please ask whoever you speak to for your reference number and note it down. The 30-day deadline runs from when we receive your complaint, whichever way you send it.
If you are not satisfied with our response, you may complain to the Data Protection Board of India. We have deliberately not printed a postal address or web link for the Board here, because the correct route changes and a stale one would send your complaint nowhere — please look it up on the Board’s own official website, or ask us and we will find the current details for you.
Changes to this notice
If we change how we use your data, we will publish an updated notice with a new version number and ask you to review it. The version you agreed to is recorded against your account.