Skip to content

Legal information

Privacy Policy

A clear explanation of the information Shishtra Foundation handles when you visit, contact us, join a programme, or use an account.

Last updated 2026-09-28

About this policy

Who is responsible for your information?

The legal name provided for this policy is Shishtra Foundation.

Shishtra Foundation operates this website under the public-facing name Shistra Foundation. We are based in Prayagraj, Uttar Pradesh, India. This policy covers information handled through this website, its account features, and its programme, membership, event, contact, volunteer, partner, and support forms.

Information we handle

What information may be collected?

We receive information you choose to submit and basic information needed to operate an account.

Contact, volunteer, partner, support, and enquiry forms may ask for your name, email address, phone number, organisation, subject, programme interest, and message. Membership applications ask for your name and email address and may include an optional phone number, city, selected programme, and additional interests.

If you create or use an account, the service processes account and sign-in details such as your name, email address, account identifier, and session information. The site also records actions needed for its features, such as event registrations, saved items, notices you have read, and community posts you submit. The profile system can hold additional details such as state, postal code, address, or date of birth when those details are provided for programme administration; the current public membership form does not ask for all of these fields.

The current website does not take membership payments or ask you to enter card or bank details. Staff may upload images for public homepage content; those images are served publicly, so they should not contain personal information unless the people shown have agreed to that use.

How we use information

Why do we use it?

Information is used to run the services and programmes you ask to use.

We use submitted information to respond to enquiries, review membership and programme interest, coordinate events and activities, maintain accounts, provide requested features, moderate community posts, keep the site secure, and meet applicable record-keeping obligations. We do not use a separate advertising or analytics service in the current website code.

Children and young people

Participation from age 8

Participants aged 8–17 need parent or guardian consent.

The Foundation’s website and programmes are intended for people aged 8 and older. Anyone aged 8–17 must have permission from a parent or legal guardian before creating an account, submitting personal information, or participating through this website. A parent or guardian may contact us to ask about information relating to a child, request a correction or deletion where applicable, or withdraw permission. The website does not currently perform an independent age check, so parents and guardians should supervise a child’s use and submissions.

Service providers

Who may process information for us?

We use a small set of service providers to host the site, store records, and deliver sign-in and media features.

The app is hosted on Replit. Depending on the active deployment configuration, account and programme records are stored in Neon PostgreSQL or the app’s local development database. Cloudflare R2 stores public homepage images uploaded by authorised staff. Google or X may process sign-in information when you choose one of those sign-in options; those providers handle that information under their own privacy notices. Google Fonts is loaded from Google’s servers when pages use the site’s typefaces. The site uses Better Auth software to manage account sign-in and sessions. We do not currently have a payment processor, marketing email platform, advertising tracker, or separate analytics provider connected in the website code.

Public information

What is visible to other visitors?

Private account records are not intended to appear on public pages.

Authorised administrators can view membership records and form submissions to manage the Foundation’s activities. Community posts are reviewed before they are made public; posts approved for display can be read by other visitors. Public programme pages and homepage images are also visible to visitors. Do not include confidential information or another person’s personal information in a public post or image unless you have permission.

Cookies and security

How do sessions and security work?

The site uses necessary sign-in and session storage, not advertising cookies.

When you sign in, the site uses essential session cookies and, in the embedded development preview, limited browser session storage to keep the sign-in working. The current website code does not include analytics or advertising cookies. We use access controls and reasonable technical and organisational safeguards to protect information. No website or internet transmission can be guaranteed completely secure.

Retention and your requests

How long do we keep information?

We keep information for programme, account, security, and record-keeping needs.

We aim to keep information only for as long as it is needed for the purpose it was collected, to administer an account or programme, to meet applicable legal obligations, or to address disputes. The website does not currently publish fixed retention periods. You may contact us to request access to, correction of, or deletion of information, or to raise a privacy concern. We will review requests under applicable Indian law and may need to retain some records where the law permits or requires it.

Contact and updates

How to reach us

Send privacy questions and requests to our privacy contact.

Email shishtrafoundation@gmail.com or write to Shishtra Foundation, 125, Mutthiganj (Hatia), Prayagraj, Uttar Pradesh 211003, India. We may update this policy when the website or our practices change. The latest version will be published on this page.