Your information should work for you.
This policy explains what personal data Fundraze collects, why, who processes it for us, how long we keep it and the rights you have under the Digital Personal Data Protection Act, 2023 (DPDP Act).
Consent
We process your personal data with your consent, which you give when you create an account, back a campaign, sign up for the newsletter or upload documents, and for the legitimate uses the DPDP Act allows, such as keeping payment records required by law. You can withdraw consent at any time; this does not affect what was done before.
What we collect
Account details (name, email, password stored only as a secure hash, optional mobile number); your public profile; campaigns you create; pledges and donations; delivery addresses you give for rewards; verification documents (identity, address, bank and organisation papers) from founders and fundraisers; messages, comments and reports; and basic technical data (IP address, device type, pages visited and page speed measurements). Card, UPI and bank login details are handled by Razorpay and never reach Fundraze.
Why we use it
To run your account and sign you in; to publish campaigns; to take payments and send receipts; to pay founders and fundraisers; to verify identities and stop fraud; to send emails you asked for (receipts, updates, reminders, the weekly newsletter if you opted in); to answer support requests and grievances; and to keep the site fast and secure.
Who processes it for us
Razorpay (payments and refunds), our email delivery provider (receipts and codes), Google Cloud (hosting, storage and backups, in India where available), and Google (only if you choose to sign in with Google). Each may process data only on our instructions. A founder receives the name and delivery address of their own backers only to deliver rewards. We never sell personal data.
What is public
Campaign pages, founder profiles, reviews and comments are public. Backers’ names appear on a campaign only if they choose; donors can give anonymously. Verification documents are never public: they are seen only by our verification staff, and every view is logged.
How long we keep it
Account data is kept while your account is open. When you delete your account, your profile and personal details are removed within 30 days, except payment, tax and verification records, which we must keep for up to 8 years under Indian law, and data needed to settle an open dispute. Page speed measurements are kept for 90 days without anything that identifies you.
Your rights
You can see and correct your details in Settings; ask for a summary of the data we hold about you; ask us to erase data we no longer need; withdraw consent; nominate someone to act for you; and raise a grievance with our grievance officer (Contact page), and then with the Data Protection Board of India. Email hello@fundraze.in and we reply within 30 days.
Deleting your account
Go to Dashboard → Settings → Delete account. You will be asked to confirm. Campaigns with money still owed to backers must be completed or refunded first.
Cookies and security
Fundraze uses one essential cookie to keep you signed in, and stores small preferences in your browser. We do not use advertising cookies. Data is sent over HTTPS, passwords are hashed, staff accounts need two-factor sign-in, and access to documents is logged.
Children
Fundraze is for people aged 18 and over. We do not knowingly collect data from children; a parent or guardian may contact us to have a child’s data removed.
Last updated 5 November 2026 · Questions? hello@fundraze.in