Legal

Privacy Policy & Terms

Last updated: 14 August 2026. This policy explains, in plain language, what personal data we collect when you take a pledge, attempt a quiz, request a certificate, contact us, or subscribe to our newsletter — and the choices and rights you have over that data.

1. Who we are

This platform is operated by iPledge (“we”, “us”, “the platform”). For the purposes of India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary that decides how and why your personal data is processed. You can reach us at support@ipledge.co.in.

2. What data we collect

We only collect what we need to run a pledge, quiz, or certificate. Specifically:

  • Your name — printed on your pledge or quiz certificate.
  • Email address — to send your certificate and, where you opt in, news about future initiatives.
  • WhatsApp / phone number — to share your certificate and event updates.
  • Your photo — used to draw your certificate image, processed within your own browser/device and never stored on our servers or database. If you tick “Email me my certificate”, the finished certificate image (which includes your photo) is transmitted once, solely to send you that email, and is still not stored by us afterwards. If you do not opt in, your photo never leaves your device and is discarded the moment you close or leave the page.
  • Quiz answers and score — to generate your result and certificate.
  • Organisation enquiry details — if you partner with us (organisation name, contact name, email, phone, and message).
  • Newsletter email — if you subscribe through our footer.

In short

The only personal data we actually store on our systems for a pledge is your name, email address, and phone/WhatsApp number — kept solely to record and keep track of your participation. We never store your photo; it is only transmitted (as part of the certificate image) if you opt in to have your certificate emailed.

We do not ask for, or knowingly collect, any sensitive identifiers such as government ID numbers, financial details, location, health, caste, or religious data, and we do not build advertising or behavioural profiles about you.

3. Why we collect it and your consent

We process your data only for the specific purpose you give it to us — generating your certificate, recording your pledge or quiz participation, responding to your enquiry, or (only where you separately opt in) sending you updates about similar initiatives.

Before you submit a pledge or quiz, you are asked to tick a box confirming you have read and agree to this Privacy Policy. That tick is your consent under Section 6 of the DPDP Act. You are never pre-opted-in; you must actively tick the box yourself, and you may withdraw consent at any time (see Your rights). Marketing/newsletter consent is always a separate, optional choice — declining it never blocks you from getting your certificate.

4. Children's data (under 18)

Many of our pledges and quizzes run in schools, so we take children’s data seriously. Under Section 9 of the DPDP Act, the personal data of a child (anyone under 18 years of age) may only be processed with the verifiable consent of a parent or lawful guardian.

By submitting a pledge or quiz on behalf of, or as, a person under 18, you confirm that:

  • you are the parent, legal guardian, or an authorised teacher/school representative, and
  • you have the consent of the child’s parent or guardian to provide that child’s name, photo, and other details for the purpose of issuing a certificate.

We do not use a child’s data for behavioural tracking, advertising, or any profiling. We do not knowingly send marketing messages to children. If you believe a child’s data has been submitted without proper consent, contact our Grievance Officer below and we will delete it promptly.

5. How long we keep it — automatic deletion every 3 months

We practise data minimisation. We do not keep your personal data indefinitely. Personal data submitted through pledges, quizzes, certificate requests, and organisation enquiries is automatically and permanently deleted 3 months (90 days) after it is submitted. This runs on an automated schedule — no manual step is required, and once deleted the data cannot be recovered.

The only exception is the newsletter: if you actively subscribe, we keep your email for as long as you remain subscribed, because that is an ongoing service you asked for. You can unsubscribe at any time, after which it is removed.

We never store your photo. It is processed on your own device to render your certificate. If you opt in to “Email me my certificate”, the finished image (which includes your photo) passes through our server only to hand it to our email provider for that single send — it is never written to any disk or database. If you do not opt in, your photo never reaches our servers at all. Either way there is nothing on our side to delete or retain.

6. Who we share it with

We do not sell your personal data. We share it only with service providers who help us run the platform (for example, our hosting and database providers, and our email provider that delivers your certificate if you opt in) under confidentiality obligations, and only as needed to deliver the service to you. Where you take a pledge or quiz hosted by a partner organisation (such as your school or company), your participation may be shared with that organisation so they can recognise your involvement.

7. How we protect it

We apply reasonable technical and organisational safeguards, including access controls on our admin tools and encrypted connections, to protect your data against unauthorised access, loss, or misuse. No system is perfectly secure, but the short 3-month retention window limits how much data ever exists at any time.

8. Your rights — access, correction, deletion

Under the DPDP Act you have the right to:

  • Access a summary of the personal data we hold about you;
  • Correct or update inaccurate or incomplete data;
  • Erase your data before the automatic 3-month deletion;
  • Withdraw consent at any time, including unsubscribing from updates;
  • Grievance redressal — raise a complaint about how we handle your data.

To update or delete your data, simply email us at support@ipledge.co.in with the request and the name/email you used. We will action verified requests within a reasonable period and confirm once done.

9. Grievance Officer

In line with Section 13 of the DPDP Act, we have appointed a Grievance Officer you can contact with any question, concern, or complaint about your personal data:

Shashank

Grievance Officer, iPledge

Email: support@ipledge.co.in

Address: 63, 2nd Main Rd, VGP Layout, Palavakkam, Chennai, Tamil Nadu 600041

If you are not satisfied with our response, you have the right to complain to the Data Protection Board of India.

11. Changes to this policy

We may update this policy as our platform or the law evolves. The “Last updated” date at the top reflects the latest version. Material changes will be highlighted on this page.