What we hold, why, and who it belongs to

SevaCircle is used by organisations — temples, trusts and community groups — to record contributions and manage funds. Most of the personal information in it was given to an organisation by its own members, and it stays that organisation's to control. This page explains what the software stores, what it does with it, and what it will not do.

Who is responsible for your information

The organisation that added you decides what is collected about you and why. It is the controller of that information. We operate the software on its behalf and act on its instructions. If you want your record corrected or removed, your organisation's administrator is the person who can do it — and the fastest route, because they can see your record and we do not go looking through it.

What the software stores

• Who you are: your name, mobile number, and optionally an email address and photo. Your mobile number identifies you across every organisation you belong to.
• How you sign in: a six-digit MPIN, stored only as an Argon2id hash. We cannot read it, and neither can your organisation. Sessions and the devices you signed in from are recorded so you can end them.
• Your membership: which organisations you belong to, your roles in each, and when you joined or left.
• Money: what you owe, what you have paid, the method and reference, any receipt you attach, and how each payment was allocated.
• What you are sent: announcements and notifications addressed to you, and whether they were read.
• What was done: an audit record of changes — who did what, and when.

What we do not do

• We do not sell personal information, and we do not share it with advertisers.
• We do not use it to train anything or to build a profile of you.
• We do not take custody of money. Payments move through your organisation's own accounts; SevaCircle records that they happened.
• There is no public sign-up, so nobody can add themselves to an organisation you belong to.

Who can see what

An organisation sees its own records and no others. If you belong to two organisations, neither is shown the other's dues, payments or roles, and money received by one can never settle the other's books. Within an organisation, what an administrator or treasurer may see is decided by their role, and enforced by the server rather than hidden by the screen.

Receipts and attachments

A payment receipt you upload is visible to the people in that organisation who review and approve payments, and to you. Files are checked on upload — the contents, not just the file name — and stored on the organisation's own deployment.

Notifications

You can choose, per category, whether to receive updates in the app or as a push notification. Some records — a payment being approved, a month's dues being raised — are written to your inbox regardless, because they are a statement about your money rather than marketing.

How long it is kept

Financial records are kept for as long as your organisation needs them for its own accounts, which is a decision it makes and often one the law makes for it. Generated report files are removed on a retention period the organisation sets. Session records end when a session does.

Where it lives

SevaCircle is deployed on infrastructure chosen by the organisation running it — often a single server it controls. Information is sent over encrypted connections, MPINs are hashed, and access tokens are short-lived.

Your choices

• See your own record, dues and payment history at any time from the app or the panel.
• Change your MPIN, and end any session on any device — including all of them at once.
• Set your notification preferences per category.
• Ask your organisation's administrator to correct or remove your details.

Children

SevaCircle is meant for the adults who administer and contribute to an organisation. It is not directed at children, and accounts are created by an organisation rather than by self sign-up.

Changes to this policy

If this changes in a way that affects what is collected or who can see it, the date at the top changes with it, and organisations using SevaCircle are told.

Getting in touch

For anything about your own record, start with your organisation's administrator. For anything about the software itself, write to hello@sevacircle.app.