Privacy Policy

Who we are

CampaignChain is a trust-sensitive campaign platform operated by Dhruvanta Systems for participants and campaign owners across India. This policy explains what personal information CampaignChain collects, why it is collected, how it is shared, and how long it is retained. The canonical Dhruvanta Systems privacy stance is published at dhruvantasystems.com/privacy; the practices below are the CampaignChain-specific application of that stance.

Information we collect

• Account data: display name, email address, hashed password, role, account verification status.
• Profile data: optional bio, skills, blood group, social links, and contact-routing preferences you choose to share.
• Campaign data: campaign details you publish, the authorization chain of coordinators and referrers you grant access to, and updates you post to a campaign.
• Verification data: identity documents you submit for verification cases. These are reviewed by the compliance team and are not exposed on public campaign pages.
• Operational logs: audit events, request traces, and security logs needed to keep the platform safe.

Contact masking and consent-based routing

CampaignChain never displays your raw phone number or email on a public campaign page. Participation forms collect explicit contact-routing consent before any contact details are forwarded to a campaign owner. You can withdraw consent at any time from your profile and preferences screen.

Authorization-chain visibility

The Transparency Chain shown on public campaign pages includes role labels (Owner, Coordinator, Referrer) and display names so participants can see who is behind a campaign. Private review signals such as risk flags are kept inside authenticated workspaces and are never rendered on public pages.

Cookies and session storage

CampaignChain sets a single encrypted, HttpOnly, Secure, SameSite session cookie when you sign in. The cookie does not contain plaintext access or refresh tokens. You can clear the cookie at any time by signing out.

Your rights

You can request a copy of your data, ask for corrections, or request deletion by contacting the CampaignChain team using the channels on the Contact page. We respond within the timelines described in the Digital Personal Data Protection Act, 2023.

Grievance Officer

For grievances under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, see the Grievance Officer page.

Security disclosure

Security researchers can review the responsible-disclosure policy on the Security & disclosure page. Machine-readable contact metadata is published at /.well-known/security.txt.