Privacy Policy

Privacy Policy

This Privacy Policy (“Policy”) describes the policies and procedures about collection, use, disclosure, security and protection of your information or information provided by you of any beneficiary when you use our website located at Tashi.in, or the “the platform application” (Collectively, “the platform”) offered by “Blue Pencil Strategies Private Limited” (“Company”, “we”, “us” and “our”) , a company incorporated under Companies Act, 2013, having its Registered Office located at 2nd Floor, Kagalwala House, Plot No. 175, CST Road, Kalina, Santacruz East, Mumbai 400098.   The Terms “you” and “your” refer to the user, beneficiary or anyone using the Platform. The terms “Services” refers to services offered by “the Company” on the platform Tāshi  Please read this Policy before using the platform or submitting any personal or any third-party beneficiary information on the platform. This Policy is a part of and incorporated within, and is to be read with, the Terms of Service. This Privacy policy applies in full essence to the Implementation Organisation, Donor, User or any other organisation known by any name or form, engaging in collecting data and information for the purposes of the services under Tāshi It is clarified that this Policy applies to the duration and instances during which the data or information may not have been directly collected on the Platform or been uploaded on the Platform or may have been collected on any other digital format and stored there in the interim to uploaded on the Platform.   Please read this Policy and the Terms of Service carefully to understand the Platform policies and practices regarding your information and how the Platform will treat it. By accessing or using its Services or providing information, in any manner, on the and/or registering with the Platform, you agree to this Privacy Policy, the Terms of Service, and you are consenting to Tāshi and its associated / related entities collecting, using, disclosing, retaining, sharing, validating, verifying the personal information, including beneficiary information as governed by applicable law and described here. If you do not provide the information the platform requires, the platform may not be able to provide all of its Services to you.   
CONSENT
By using the Platform and the Services, you agree and consent (obtained through checkboxes, OTP, explicit agreements, etc. on the platform) to the collection, retention, transfer, use, storage, disclosure and sharing of your information as described and collected by us in accordance with this Policy. If you do not agree with the Policy or the Terms of Service, please do not use, or access the platform.  
CHANGES TO THIS PRIVACY POLICY 
We may occasionally update this Policy and the Terms of Service and such changes as may be posted on this page and shared over email to appropriate user communities on a best effort basis. If we make any significant changes to this Policy or the Terms of Service, the same shall be displayed on the Platform, your willingness to continue use of the platform or provide information on the platform will be considered as active consent for the same along with any additional consent forms signed. Your continued use of Services after we publish or send a notice about our changes to this Policy shall constitute your consent to the updated Policy and this Terms of Service.  
GENERAL
This Platform/ in Mobile/ websites/ Application is owned by the Company. We are committed to protecting and respecting your privacy. Collection of information and processing of the same is in accordance with the Information and Technology laws, as applicable, (IT Act, 2000 and the Rules thereunder), Data Protection Act, 2023 and other national and state laws which relate the processing of personal data.  
Please read the following carefully to understand our views and practices regarding your personal data.  
— Downloading, accessing, or otherwise using the App and/or visiting the Platform indicates that you have read this Privacy Policy and consent to its terms. If you do not consent to the terms of this Privacy Policy, do not proceed to download, access, or otherwise use the App. 
We collect your personal information in order to provide and continually improve our products and services. 
Our Privacy Policy is subject to change at any time without notice. To make sure you are aware of any changes, please review this policy periodically. The last updated date can be found at the end of this Policy. 
All partner firms and any third-party working with or for Us, and who have access to personal information, will be expected to read and comply with this Policy.  
HOW WE COLLECT THE INFORMATION AND HOW WE USE IT
We collect this information:  
Directly from you, with your consent when you provide it to us; and/or 
— A
utomatically as you navigate through our Services (information collected automatically may include usage details, IP addresses and information collected through cookies, web beacons and other tracking technologies). 
Implementation Organisations by any name or form may collect it on any other digital or non-digital medium. 
We may collect personal information that you voluntarily provide to us when registering on our App and/or platform, filling out forms, subscribing to our services, or contacting us. This information is not limited to personal information like contact information, demographic information, financial information, etc. or preference/claim-based information collected during a program. We may automatically collect certain information when you access and use our App and/ or platform. This information may include usage data (such as the pages you visit, the time and date of your visit, the time spent on those pages). Device information (such as your device's IP address, browser type, and operating system). Location information (such as your geographical location when you use our services if you have enabled location services on your device). Cookies and similar technologies (such as tracking cookies and web beacons that collect information about your browsing habits). We may also receive information about you from third parties, such as verification agencies /subscriptions, social media platforms, analytics providers, and payment processors.
We will collect and process the following information about you:
From you directly and through this App: We may collect information through the App when you visit the Platform. The data we collect depends on the context of your interactions with our App. 
Through business interaction: We may collect information through business interaction with you or your employees and beneficiaries. 
From other sources: We may receive information from other sources, such as public databases; API partners; social media platforms; or other third parties such as: 
Information about your interactions with programs, products and services offered by our subsidiaries/ associated companies.  
INFORMATION WE COLLECT 
Information you provide to Us: 
We collect information primarily to provide better services. 
We collect the following information from you when you use or signup on our App: 
For Implementation Organization Registration - Name, Email Address, Contact Number and any other information, collected for a Program on Tāshi or for in any manner engaging with Blue Pencil Strategies Private Limited. 
For Beneficiaries - Name, Age, Number of Family members, Date of Birth, Gender, Address, Contact Number, Education Qualification, Ownership of House / Type of Household, Ownership Land, Size of Land Holding in Acres (Owned / Leased / Irrigated), Type cattle owned, Current Occupation, Household Annual Income (Agriculture and Others), Geo Location, Photo and any other information, collected for a Program on  Tāshi or for in any manner engaging with  Blue Pencil Strategies Private Limited.
For Donors and Other Organization Registration Name, Email Address, Contact Number and any other information, collected for a Program on  Tāshi or for in any manner engaging with Blue Pencil Strategies Private Limited.
For Validator Registration Name, Email Address, Contact Number and any other information, collected for a Program on  Tāshi or for in any manner engaging with Blue Pencil Strategies Private Limited.
For Volunteer Registration Name, Age, Number of Family members, Date of Birth, Gender, Address, Contact Number, Education Qualification, Geo Location, Photo and any other information, collected for a Program on  Tāshi or for in any manner engaging with Blue Pencil Strategies Private Limited.  
5.2 Information we collect through Automatic Data Collection Technologies: 
— When you visit our App and/or Platform, some information is automatically collected. This may include information such as the type of mobile device, Operating System (OS) running on your device, Internet Protocol (IP) address, unique user ID, access times, device type, and language. We also collect information about how you use Our products or services. 
— We automatically collect purchase or content use history, which we sometimes aggregate with similar information from other customers to create features such as Top Rated, High Confidence, etc. 
— The information about your usage of the App, including crash logs and usage statistics. 
— Information about the location of your device, including geolocation information. 
— By using this App and/or Platform, you are agreeing that We may advertise your feedback on the App and/or Platform and other marketing materials. 
— We will retain your information as long as we require this to provide you with the goods and services and for such period as mandated by the applicable laws. 
If you opt to receive marketing correspondence from us, subscribe to our mailing list or newsletters, enter into any of our competitions or provide us with your details at networking events, we may use your personal data for our legitimate interests in order to provide you with details about our goods, services, business updates and events.
We use the information we collect primarily to provide, maintain, protect, and improve our current products and services. 
We use the information collected through this App and/or platform as described in this policy and we may use your information to: 
-
Improve our services, App, Platform and how we operate our businesses. 
-
Understand and make efficient your experience using the platform, App, products, and services. 
-
Process, manage, complete, and account for transactions. 
-
Provide customer support and respond to your requests, comments, and inquiries. 
-
Send you related information, including confirmations, invoices, technical notices, updates, security alerts and support and administrative messages. 
-
Communicate with you about promotions, upcoming events and news about products and services. 
-
We may process your personal information without your knowledge or consent where required by applicable law or regulation for the purposes of verification of identity or for prevention, detection, or investigation, including of cyber incidents, prosecution, and punishment of offences. 
-
Protect, investigate, and deter against fraudulent, unauthorized, or illegal activity.  
5.3 Use of AI and ML:
There are no specific legislations in India to govern the use of AI and ML, currently. However, all usage on  Tāshi does, is in accordance with the [Digital India Act, 2024], NITI Ayog principles on responsible AI issued in 2021, advisories issued by the Ministry of Electronics and Information Technology issued to intermediaries and platforms under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, guidelines for deepfakes.  
6. HOW WE SHARE THE INFORMATION WE COLLECT 
Information about the user is an important part of our business and we take due care in handling of any information that is collected. We may disclose personal information that we collect, or you provide, as described in this Privacy Policy, in the following ways:  
General Information Disclosure: We share your data with your consent or to complete any transaction or provide any product or service you have requested or authorized. We also share data with our affiliates, subsidiaries and other related Companies, with vendors working on our behalf. We may employ other companies and individuals to perform functions on our behalf. The functions include fulfilling orders for products or services, delivering packages, sending postal mail and e-mail, removing repetitive information from customer lists, providing marketing assistance, providing search results and links (including paid listings and links), processing payments, transmitting content, scoring credit risk, and providing customer service. 
Service Providers: These third-party service providers have access to personal information needed to perform their functions but may not use it for other purposes. Further, they must process the personal information in accordance with this Privacy Policy and as permitted by applicable data protection laws. 
Legal Purposes: We release account and other personal information when we believe is appropriate to comply with the law, enforce or apply our conditions of use, and other agreements, protect the rights, property, or safety of Us, our users, or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction. 
Consent: We may share your information in any other circumstances where we have your consent. Tāshi is vested with all the rights to share, transfer, and license all/ or any part of the Data it collects, to authorised entities which will receive such data, we will provide complete names and identities of the other data processors and data fiduciaries receiving this information from the Company.
7.SECURITY: HOW WE PROTECT YOUR INFORMATION
We take due care to protect all data on the Platform. Technical measures are in place to prevent unauthorized or unlawful access to data and against accidental loss or destruction of, or damage to the data. The employees who are dealing with the data have been trained to protect the data from any illegal or unauthorized usage. All information collected by any Implementation Organisation by any name in any other digital medium during any interim period that such data/ information is not on the Platform is governed by this Privacy Policy and the same is applicable to the collecting, handling Implementation Organisation. The concerned Implementation Organisation shall at all times be liable and have the obligation to demonstrate to Tāshi and us that it is in compliance of this Privacy Policy. 
We have implemented appropriate physical, electronic, and procedural safeguards in connection with the collection, storage, and disclosure of personal customer information. 
We take reasonable steps to help protect your personal information. The information is stored in an AES - 256 bit encrypted form, and personal sensitive information is hashed which non-retrievable. The infrastructure is protected by firewalls and access is controlled through authorized Multi-Factor Authentication in an effort to prevent the loss, misuse, and unauthorized access, disclosure alteration and destruction. It is your responsibility to protect your usernames and passwords to help prevent anyone from accessing or abusing your accounts and services. You should not use or reuse the same passwords you use with other accounts as your password for our services.  
It is important for you to protect against unauthorized access to your password and your devices, and applications. Be sure to sign off when you finish using a non-personal device. Information you provide to us is shared on our secure servers. We have implemented appropriate physical, technical and organizational measures designed to secure your information against accidental loss and unauthorized access, use, alteration, or disclosure. In addition, we limit access to personal data to those employees, agents, contractors, and other third parties that have a legitimate business need for such access.   
Information collected from you will be stored for such period as required to complete the transaction entered into, with you or such period as mandated under the applicable laws from the date of information collected from you. The Company may decide to delete the information Suo moto post the mandatory period without any notification to the data principal, following established protocols under applicable laws. In the event, the data principal requests for deletion of his/her personal information either directly or indirectly through an institution actively registered on the platform, then the same will be executed by the Company within reasonable time. However, the Company reserves the right to mask all such personal user information for data analytics that allows the Company to improve experiences or provide new services on the platform and/or App. In such a scenario, the user may have to register afresh on the platform and/or app to receive services from the Company.  
8. COOKIES  
This platform and authorised third parties, may use cookies, pixel tags, web beacons, mobile device IDs, flash cookies and similar files or technologies to collect and store information with respect to your use of the Services and third-party websites in accordance with the applicable laws.
Cookies are small files that are stored on your browser or device by websites, apps, online media, and advertisements. We use cookies and similar technologies for purposes such as: 
— Authenticating users 
Remembering user preferences and settings 
Generally understanding the online behaviours and interest of people who interact with our services.  
A pixel tag (also called a web beacon or clear GIF) is a tiny graphic with a unique identifier, embedded invisibly on a webpage (or an online ad or email), and is used to count or track things like activity on a webpage or ad impressions or clicks, as well as to access cookies stored on users’ computers. We may include web beacons in e-mail messages or newsletters to determine whether the message has been opened and for other analytics. 
To modify your cookie settings, please visit your browser’s settings. By using our Services with your browser settings to accept cookies, you are consenting to our use of cookies in the manner described in this section.  
We may also allow third parties to provide audience measurement and analytics services for us, to serve advertisements on our behalf across the Internet, and to track and report on the performance of those advertisements. These entities may use cookies, web beacons, SDKs, and other technologies to identify your device when you visit the “the platform” Platform and user our Services, as well as when you visit other online sites and services.  
Please see our Cookie Policy here for more information regarding the use of cookies and other technologies described in this section, including regarding your choices relating to such technologies.  
9. OPT-OUT
When you sign up for an account, you are opting in to receive emails from the platform. You can log in to manage your email preferences or you can follow the ‘unsubscribe’ instructions in commercial email messages but note that you cannot opt out of receiving certain administrative notices, service notices, or legal notices from Blue Pencil Strategies Private Limited.
If you wish to withdraw your consent for the use and disclosure of your personal information in the manner provided in this Privacy Policy, please write to us at support@tashi.in Please note that we may take time to process such requests, and your request shall take effect no later than fifteen (15) business days from the receipt of such requests, after which we will not use your personal data for any processing unless required by us to comply with or legal obligations. We may not be able to offer you any or all Services upon such withdrawal of your consent.  
10. SHARING OF PERSONAL INFORMATION WITH THIRD PARTIES  
We do not share your personal data with third parties without your prior consent other than: 
With third parties who work on our behalf provided such third parties adhere to the data protection principles set out in the IT Act, 2000 (21 of 2000) and other applicable legislation, or enter into a written agreement with Us requiring that the third party provide at least the same level of privacy protection as is required by such principles; 
To comply with laws or to respond to lawful requests and legal process. 
To protect the rights and property of Us, our agents, customers, and others including to enforce our agreements, policies, and terms of use. 
In an emergency, including to protect the personal safety of any person; and 
For the purpose of a business deal (or negotiation of a business deal) involving the sale or transfer of all or a part of our business or assets (business deals may include, for example, any merger, financing, acquisition, divestiture, or bankruptcy transaction or proceeding). 
We may share your information with our parent company, subsidiaries, affiliates, and other related companies (collectively referred to as "Related Companies")  
PERMISSIBLE AGE 
The Services are not intended for users under the age of 18, unless permitted under applicable law laws (Permissible Age). If you are under the age of 18 or the age of majority in the jurisdiction in which you reside, you may only use Our App with the consent of your parent or legal guardian. We do not knowingly collect any personal information from users or market to or solicit information from anyone under the Permissible Age. If we become aware that a person submitting personal information is under the Permissible Age, we will delete the account and any related information from or about a user under the Permissible Age, please contact us at contact@bluepencil.com  
THIRD PARTY LINKS AND SERVICES 
The Services may contain links to third-party websites (like diagnostic tools such as Sentry). Your use of these features may result in collection, processing or sharing of information about you, depending on the feature. Please be aware that we are not responsible for the content or privacy practices of other websites or services which may be linked on our Services. We do not endorse or make any representations about third-party websites or services. Our Privacy Policy does not cover the information you choose to provide to or that is collected by these third parties. We strongly encourage you to read such third parties’ privacy policies.  
DATA RETENTION AND ACCOUNT TERMINATION 
You can close your account by visiting your profile settings page on our website/ application. We will remove your public Programs from view, but we may retain information about you for the purposes authorized under the Privacy Policy unless prohibited by law. Thereafter, we will either deleted your personal information or de-identify it so that it is anonymous and not attributed to your identify. For example, we may retain information to prevent, investigate, or identify possible wrongdoing in connection with the Service or to comply with legal obligations.  
YOUR INFORMATION CHOICES AND CHANGES 
We strive to provide you with choices regarding the personal information you provide to us. You can also make choices about the collection and processing of your data by Us. You can access your personal data and opt-out of certain services provided by the Us. You can set your browser or mobile device to refuse all or some browser cookies, or to alert you when cookies are being sent. In some cases, your ability to control and access to your data will be subject to applicable laws.  
You may opt-out of receiving promotional emails from Us by following the instructions in those emails. If you opt-out, we may still send you non-promotional emails, such as emails about our ongoing business relationship. You may also send requests about you got preferences, changes and deletions to your information including requests to opt-out of sharing your personal information with third parties by sending an email to the email address provided at the bottom of this document.  
CONTACT US  
If you have any queries relating to the processing/ usage of information provided by you or the platform Privacy Policy, you may email the Data Protection Officer/ Grievance Officer at contact@tashi.in or write to us at the following address.  
For users residing in India:  
Address:  Blue Pencil Strategies Private Limited
2nd Floor, Kagalwala House,
Plot No. 175, CST Road, Kalina,
Santacruz East, Mumbai 400098.