Privacy Policy

Brahmanda Dhyana Tapovanam Trust ("the Trust", "we", "us") operates the website at www.brahmandadhyana.org. We are committed to handling your personal information transparently and only for the purposes described in this Privacy Policy.

When you create an account, enrol in an event or donate, we collect:

• Identity & contact: name, phone number, email address, date of birth, gender.
• Address: city, state, pincode, country.
• Emergency contact: a name, relationship and phone number you provide.
• Health & dietary preferences: only if you choose to share them (e.g. dietary restrictions for retreats).
• Payment metadata: Razorpay order/payment IDs, currency, amount, status. We do not store full card numbers or CVV.
• Technical data: IP address, browser/device type, pages visited, approximate location (country-level via the request header).
• Account activity: events you have enrolled in or completed, yukti progress, notification preferences, last-login timestamp.

• Verifying your phone number via SMS one-time-passwords (OTP).
• Confirming eligibility for events (age, prerequisites, gender if specified, etc.).
• Processing payments and issuing receipts.
• Sending you transactional emails (event confirmations, reminders, payment receipts).
• Sending optional notifications (new events, programme updates) per your preferences.
• Improving the Site, troubleshooting issues, and preventing abuse / fraud.
• Complying with applicable legal and tax obligations.

We rely on the following service providers to deliver the Site. Each handles your data only under their respective privacy and security commitments:

• Google Firebase Authentication — phone OTP verification and Google sign-in.
• Razorpay Software Private Limited — payment processing (cards, UPI, netbanking, international cards, PayPal).
• Resend (Resend Inc.) — transactional email delivery.
• MongoDB Atlas — database hosting.
• Vercel Inc. — web hosting and edge-compute.
• Cloudflare — DNS, CDN and DDoS protection.
• Google reCAPTCHA Enterprise — abuse prevention on the OTP flow.

We use cookies and browser storage to keep you signed in, remember your preferences and protect against abuse. Strictly necessary cookies (e.g. the session cookie, reCAPTCHA tokens) cannot be disabled. You may clear these at any time from your browser settings; doing so will log you out.

We retain your account information for as long as your account is active and as needed to provide ongoing services. Payment and donation records are retained as required by Indian tax and accounting law (typically 7 years). You may request deletion of your personal information at any time (see Section 7), subject to these statutory retention obligations.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data via your profile page.
• Request deletion of your account and associated personal data.
• Opt out of marketing / non-essential notifications from your dashboard.
• Withdraw consent for data processing where consent is the legal basis.

To exercise any of these rights, please email info@brahmandadhyana.org. We will respond within a reasonable time, typically within 30 days.

The Site is not directed at children under the age of 9. Participation in the Trust's programs by minors must be initiated by a parent or legal guardian who accepts these Terms and this Privacy Policy on the child's behalf. If you believe we have inadvertently collected information from a child without appropriate consent, please contact us so we can delete it.

Some of our service providers (e.g. Vercel, MongoDB Atlas, Cloudflare, Resend) operate infrastructure outside India. By using the Site you consent to your personal data being transferred to and processed in those jurisdictions, which may have different data-protection rules than your home country. We require each processor to maintain appropriate security and privacy safeguards.

We take reasonable technical and organisational measures to protect your data, including TLS encryption in transit, hashed credentials, role-based access in the admin panel and two-factor authentication for administrators. No internet transmission is ever 100% secure, so we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated by email or by a prominent notice on the Site.

For any privacy questions or requests, please write to info@brahmandadhyana.org or call +91-9014592268.