Privacy Policy

1. Who we are

Ranchi Railway Durga Puja Samiti (RRDP), North Colony near Ranchi Railway Station, Ranchi, operates the website, Prasad booking, Daan receipts, staff portal and RRDP Prasad Scanner.

2. Information we handle

Prasad bookings include the devotee name, mobile number, chosen offering, service day and slot, amount, booking/payment references, consent time and one-time QR status. Daan may include donor name, mobile or email, anonymity choice, category, amount and receipt/payment references.

For authorised staff we handle login identifier, name, role, session and audit activity. Security logs may include time, IP address, app version, device/platform context and request outcome.

3. Camera and device storage

The scanner uses the camera only to read Prasad QR codes. RRDP does not save or upload camera photographs or video; only the decoded QR token is sent securely to the RRDP server for validation.

A secure sign-in token, language choice, accepted legal version and limited last-synced booking view may be stored on the device. The app does not request contacts, precise location or microphone access.

4. Payments

Razorpay processes checkout and payment credentials. RRDP receives payment status, amount and provider references but does not store card numbers, UPI PINs, bank passwords or CVV values. A booking or receipt is issued only after server-side payment verification.

5. Why we use information

We use information to create and fulfil bookings, issue Prasad once, provide Daan receipts, reconcile payments, manage capacity, prevent fraud and duplicate collection, support devotees, secure staff access, maintain audit history and meet legal/accounting duties.

6. Sharing

Information is shared only as needed with payment providers such as Razorpay, infrastructure and app-update providers acting for RRDP, authorised Samiti staff, professional advisers, or public authorities when legally required. RRDP does not sell personal information or use it for targeted advertising.

7. Retention and your choices

Information is retained only as long as reasonably needed for fulfilment, security, disputes, accounting and legal duties. You may request access or correction, withdraw consent for future optional processing, or request deletion where retention is not legally required. Some payment, receipt and audit records must be retained for legal, fraud-prevention or accounting purposes.

8. Security, children and changes

RRDP uses access controls, encrypted transport, one-time QR redemption and audit logs, but no system is risk-free. The staff app is for authorised adults and public bookings should be made by an adult or guardian. Material changes will use a new version and the app will ask staff to review it again.

9. Website traffic and performance

To monitor service availability and capacity during busy periods, the website uses its own pathname-only page counter and Vercel Web Analytics. This may include aggregated page views and general referrer, region, device and browser categories. The counter sends only an allowlisted page pathname, never its query string. Vercel Web Analytics does not use cookies and stores analytics in anonymized form. RRDP does not send names, mobile numbers, form values, QR tokens or payment references as analytics events.