Privacy Policy

Last updated: 17 July 2026

Mitr (“we”, “us”) operates mitr.co.in — a civic collaboration network and directory of non-profit organisations in India. This policy explains what personal data we collect, why we collect it, and the choices you have. We aim to comply with applicable Indian law, including the Digital Personal Data Protection Act, 2023.

Information we collect

Account data — name, email address and password (stored as a salted hash) when you register.
Profile data you choose to add — headline, location, bio, avatar, and per-field visibility preferences you control from your profile settings.
Organisation data — details submitted when creating or claiming an NGO page, including registration identifiers and verification documents you upload.
Content — posts, comments, community concerns, responses, and other material you publish on the platform.
Technical data — standard server logs (IP address, browser type, pages requested) used for security and reliability.

Public directory data

Our NGO directory includes organisational information (names, registration numbers, locations, sectors) compiled from public government sources such as the NGO Darpan portal. This is organisational — not personal — data. If you represent an organisation and want a listing corrected or removed, contact us at the address below or use the claim/report tools on the listing page.

How we use your data

To operate your account, profiles, connections and the features you use.
To verify organisation claims and maintain trust signals (badges, scores).
To send service notifications you have a reasonable expectation of receiving (e.g. claim status, connection requests). We do not sell your personal data.
To keep the platform safe — abuse prevention, moderation and security logging.

Cookies, local storage and analytics

We use browser local storage to keep you signed in. That is your session token and a little interface state; it stays on your device, and clearing your browser data removes it.

We use Google Tag Manager to load the measurement tags that tell us how the site is used — which pages people reach, from where, and whether things work. Tag Manager is a container: the tags inside it are configured by us, and they can change over time. Those tags are provided by Google and may set cookies on your device and send Google your IP address, the page you are on, and how you arrived. Google processes that data under its own privacy policy. We use it in aggregate, to understand traffic — not to build a profile of you as an individual, and we do not sell it.

If you would rather not be measured: most browsers let you block or delete cookies per site, Google publishes a browser opt-out add-on for its analytics, and any tracker-blocking extension will stop these tags loading. None of it is required to browse the directory, search, or read a profile — the site works fully without it.

Sharing

Content you publish, and profile fields you set to public, are visible to other users and to search engines. Beyond that we share data only with the service providers needed to run the platform, and with authorities where the law requires it. Today those providers are:

Our hosting provider — runs the servers and database that hold the platform's data.
Google — via Tag Manager and the analytics tags it loads, as described above. Google receives your IP address and the pages you visit.
Our email provider — delivers account emails such as verification and password resets, and therefore handles your email address.
Google — again, and separately, only if you choose to sign in with your Google account. Google then gives us your name and email address, which is all we keep. Signing in with Google is optional; an email and password work just as well.

We do not sell your personal data, and we do not share it with advertisers or data brokers.

Retention and your rights

We keep personal data for as long as your account is active or as needed to provide the service. You may access and correct your data from your profile, and you may request account deletion or a copy of your data by writing to us. We will respond within a reasonable period as required by law.

Contact

For any privacy question, correction or deletion request: [email protected]