Privacy Policy

This policy covers information you provide to WEEFUND, information produced by your use of the service, and information returned by necessary providers such as a payment gateway. It does not make WEEFUND the operator of linked websites, hosted media platforms, or a creator’s independent business.

We do not copy another company’s foreign legal identity, office address, marketing partnerships, advertising practices, or international data-transfer arrangements into our own policy. Any additional services must be described when they are actually introduced.

Account records include your name, email address, password hash, role, optional phone and avatar, and account timestamps. Passwords are hashed; your account password is not displayed to administrators. We also store your campaign follows and email subscription choices.

Your browser may store saved-project summaries, an unfinished campaign form, and language or currency preferences. These device-local features are not necessarily synchronised with your account. See the Cookie Policy for controls and duration.

A creator application contains the business and contact information you submit, project purpose, declaration version, typed acknowledgement name, acceptance time, review status, and administrator feedback.

After preliminary business review, the current identity step collects an eligible non-Aadhaar credential PDF, credential number, full legal name, date and place of birth, and residence address, together with a timestamped consent record. Do not upload Aadhaar or send identity documents through public comments, Support, or ordinary email. Submit only the document requested in the protected application flow.

Document and identity-detail bytes are encrypted before upload to a private Vercel Blob store. Database references use opaque paths and a masked credential. Only authorised administrators can use the protected review and download endpoints to view the full submission. Reviewers must protect downloaded copies. This process is manual document review, not a government-registry query, certified KYC service, or bank-account verification.

Previously supplied account or tax information may remain in legacy records where applicable. We do not publish full credential numbers or application PDFs on public campaign pages. Contact us if a submission needs correction, withdrawal, or deletion review.

Campaign titles, stories, images, hosted video links, creator display information, project stage, goals, risks, rewards, FAQs, public updates, and public comments are intended to be visible to website visitors. Do not include private identifiers, addresses, passwords, or payment credentials in that content.

A manual-review label may disclose that an administrator approved an identity submission, but does not expose the PDF or full private details. A founder-resource article does not make the featured individual a user, customer, endorser, or recipient of your information.

For a pledge, WEEFUND records the campaign, backer, reward selection where applicable, amount, optional platform-support amount, payment status, provider order/payment references, anonymity preference, and risk-acknowledgement details. A reward requiring delivery may also require a shipping name, address, and phone number.

Payment credentials are handled through the configured payment gateway. WEEFUND does not ask you to submit a full card number, card security code, UPI PIN, banking password, or OTP in a campaign or support form. Never send these to a creator or administrator.

The current creator application is not a bank-onboarding form. If a payment provider needs additional information for payment or settlement, its collection and terms must be presented in that flow. This policy does not imply that automated payouts or bank verification are already available.

Where consent is the appropriate basis, we request it for the particular purpose and provide a way to withdraw it. Withdrawing optional email consent does not close your account or cancel a pledge. Contractual or legally required records may still need to be retained. We do not use private identity submissions as public marketing material.

• Create and secure accounts, maintain sessions, and apply current access permissions.
• Review creator applications and campaigns and handle corrections and suspected misuse.
• Display permitted campaign and community content, project following, and pledge history.
• Process enabled payment flows, investigate payment status, and support lawful fulfilment and refund enquiries.
• Send requested confirmation emails and future public project updates to confirmed subscribers.
• Respond to support, safety, privacy, and grievance requests and keep relevant records.
• Maintain the service, diagnose failures, prevent abuse, and comply with applicable legal duties.

Public information is visible to visitors and may be copied by third parties. This version of WEEFUND does not include a data-sale or cross-context targeted-advertising feature. We do not treat acceptance of this policy as blanket permission to sell identity documents or contact lists. Any materially different use requires appropriate disclosure and a lawful basis.

• Authorised WEEFUND administrators, for the application, operations, security, and support tasks they perform.
• Vercel for website hosting and the configured private document store, and the connected Neon/PostgreSQL service for durable application data.
• The enabled payment provider, currently the Razorpay integration, for the payment and related provider services you use.
• The configured email provider—Resend or the operator’s SMTP service such as Gmail—for recipient addresses, message content, and delivery processing.
• A project creator, only to the extent necessary and lawfully authorised for a pledge, fulfilment, service communication, dispute, or applicable duty. Following alone does not expose your subscription email or private identity document to the creator.
• Competent authorities, professional advisers, or another authorised recipient where required or justified by applicable law, a dispute, security, or a lawful business transfer.

Project email alerts require a request and confirmation at your current account email. Confirmation links expire after 24 hours. Unconfirmed accounts and existing in-app follows are not automatically subscribed to project-update emails. Changing your account email requires a new confirmation for that address.

Every project email includes an unsubscribe route. You can also disable emails in Following while keeping the project in your account. We retain subscription and delivery records needed to operate the queue, prevent repeated sends, and investigate problems. Cancelling a subscription cancels queued messages where possible; an email already handed to a provider cannot be recalled.

Delivery records distinguish queued, sender-accepted, failed, and cancelled attempts. They do not prove a message reached an inbox. The WEEFUND templates do not themselves embed an email-open tracking pixel; the sender may process delivery and anti-abuse information under its own service terms.

Hosting and security services may process IP addresses, request times, browser information, and operational logs to serve and protect the website. WEEFUND uses an essential session cookie and browser storage for the features explained in the Cookie Policy. We do not add an advertising-cookie banner that falsely implies a tracking system is installed.

Remote project images, video players, and external links can contact their hosting services and disclose information such as your IP address and browser request details. Those services have their own policies. Do not put secrets in hosted-media URLs. The current site does not request precise device geolocation or import your email contacts as part of project following.

We use password hashing, role-based checks, restricted identity-review endpoints, encrypted private identity storage, and signed subscription actions. No system, device download, or external provider can be guaranteed completely secure. Report a suspected issue promptly and do not disclose another user’s data publicly.

We retain information for the purpose for which it is needed and any justified transaction, dispute, fraud-prevention, or legal retention requirement. There is not a universal automatic deletion deadline for every account record. Contact us for a review of data you want removed; we will assess applicable obligations and explain relevant limitations. Backups and records held lawfully by other providers may persist beyond deletion from the active service.

An expired email-send attempt is not the same thing as deletion of its audit record. Account closure or withdrawal from a campaign also does not automatically erase records needed for outstanding commitments or a dispute.

We may need to verify your identity and authority using proportionate information before disclosing or changing records. Do not send an identity PDF or password in an ordinary privacy request. Some requests are subject to legal exceptions or outstanding obligations; we will assess them rather than promising unconditional deletion. Rights under Indian data-protection law and other jurisdictions apply according to their scope and commencement; this notice does not claim that every foreign privacy regime necessarily applies to WEEFUND.

• Review or update available profile fields through Account settings.
• Follow or unfollow a project, confirm email alerts, or unsubscribe without cancelling an account.
• Ask for access, correction, deletion, withdrawal of consent, or a review of how your personal information is used.
• Raise a privacy or grievance request through Support or the named contact below, and ask an authorised representative to act where applicable.
• Use any complaint, regulatory, or other remedy available under the law that applies to you.

The service is oriented toward Indian creators and INR pledges. Hosting, database, email, media, or payment providers may operate in other countries or process data through their own service infrastructure. Do not assume every service or backup is located in India merely because a project is Indian.

We assess applicable transfer and provider requirements for the services used. We do not claim an unexecuted EU standard-contractual-clause arrangement or a partnership with a foreign crowdfunding operator. If you believe a specific jurisdiction’s rights apply to your information, contact the grievance contact below so the request can be assessed.

The account, creator, and pledge services are for people aged 18 or older. We do not offer a child account or parental-consent onboarding flow. Tell us if you believe a child has submitted personal information so we can investigate and take appropriate action.

We publish the current version and effective date here. Material changes will be identified on the service, and further notice or consent will be obtained where required. A changed notice does not retrospectively authorise an undisclosed use of previously collected data.