1. Introduction
This Privacy Policy explains how ChangeWave ("we", "us", "our") collects, uses, stores, and protects your personal information when you register and interact with our Campaign Management System.
2. Information We Collect
We collect personal information directly provided by you during registration, profile updates, and interaction with campaigns, posts, surveys, and learning modules.
3. Account Information
We store basic account details necessary for system operation, including your account creation date, role (Participant, Campaign Manager, or Admin), and password hash.
4. Profile Information
You may provide optional profile details such as your full name, location, organization, bio, and designated areas of interest.
5. Phone Number and Email
We collect valid Indian mobile numbers (+91XXXXXXXXXX) and verified email addresses for account authentication, password recovery, and system notifications.
6. Date of Birth
We collect your Date of Birth to verify eligibility and ensure compliance with age restrictions.
7. Gender
Gender selection (Male, Female, Others, or Prefer not to say) is collected for user demographic categorization and personal profile customization.
8. Occupation / Category
User category or occupation (e.g., Student, Working Professional, Entrepreneur) is collected to personalize platform recommendations and campaign engagement opportunities.
9. Event / Campaign Information
We log your participation in campaigns, survey responses, learning module progress, badges earned, and community posts created.
10. Profile Pictures
If uploaded, profile images are stored on our secure media servers to represent your identity across platform feeds and profile headers.
11. How We Use Information
We use your data to maintain account authentication, measure impact scores, grant achievement badges, enable campaign participation, and improve overall platform functionality.
12. Authentication and Account Security
Authentication relies on encrypted JSON Web Tokens (JWT). Passwords are never stored in plaintext and are hashed using salt rounds prior to persistence.
13. Data Storage
User data is securely persisted in MongoDB databases maintained in monitored server environments.
14. Database Security
We restrict database access to backend application services and authorized administrative connections utilizing authenticated connections.
15. Encryption & Sensitive Field Protection
Sensitive personal data, including phone numbers, dates of birth, gender, and user categories, are protected using industry-standard AES-256-GCM encryption at rest on backend systems.
16. Data Sharing
We do not sell, rent, or trade user personal information to third parties or advertising brokers.
17. Third-Party Services
We may utilize essential infrastructure sub-processors (such as email service providers for transactional messages) bound by confidentiality obligations.
18. Notifications / Emails
Transactional emails regarding account security are mandatory. Users can opt in or out of news updates at any time via profile preferences.
19. Data Retention
Personal data is retained as long as your account remains active. Upon account deletion, associated personal records are removed from active database instances.
20. User Rights
Users have the right to access, inspect, update, and request correction of their personal data through their account profile panel.
21. Account & Data Deletion
Users can permanently delete their account and associated data at any time via the profile settings page, requiring password verification.
22. Cookies & Local Storage
We utilize browser LocalStorage exclusively for maintaining your session authentication token and user preference cache. We do not track users across external web sites.
23. Security Incident Handling
We implement technical and organizational security measures designed to safeguard user information. In the event of a confirmed security incident affecting user data, we will take prompt remedial action and notify affected users in accordance with applicable standard operating procedures.
24. Minor Users & Eligibility
ChangeWave is intended for users who are at least 13 years old. We do not knowingly register or solicit data from children under the age of 13.
25. Changes to Privacy Policy
We may revise this Privacy Policy periodically. Significant changes will be announced on the platform or communicated via email.
26. Contact Information
If you have questions regarding this Privacy Policy or data protection, please contact our team at privacy@changewave.org.