Privacy Policy
Placeholder policy structure for Phase 1. Not a legal compliance certification.
Data collected
Donor and requester names, mobile numbers, blood group, location (city/area), hospital details for requests, availability preferences, and related platform activity such as matches and notifications.
Why data is collected
To register donors, create blood requests, match suitable donors, show privacy-safe search results, and operate the admin dashboard.
Donor consent
Donors must consent to receive blood request notifications during registration. Consent can be withdrawn later by contacting the platform / admin.
Contact information privacy
Donor mobile numbers and exact home coordinates are not shown in the public donor directory. Public cards show display name, blood group, city/area, availability, and verification status.
Data security
Access to sensitive tables is restricted with Supabase Row Level Security and server-side service role usage for privileged operations. Additional production hardening remains required.
Data sharing
Surajya RaktSetu does not sell blood or donor data. Information is used to facilitate connections for blood requests. Sharing with hospitals/blood centres happens through normal care pathways, not through a public phone directory.
Withdrawal of consent
Donors may ask to stop receiving requests or deactivate their profile through admin support channels once account login is available.
Data deletion / contact process
To request correction or deletion, contact support@surajyaraktsetu.org. Requests will be handled by platform administrators.