Mana Kavali ("we", "us") runs this website for the people of Kavali. This policy explains what personal data we collect, why, who helps us handle it, and the choices you have. We aim to comply with India's Digital Personal Data Protection Act, 2023.
What we collect
- Account details: your name, email address, account type and a securely hashed password when you register, plus a profile photo if you add one.
- What you post: business listings and offers, events, job posts, classified ads and discussions, with any photos and contact numbers you include.
- Blood donor details: your blood group, area, phone number and when you last donated, if you register as a donor.
- Form submissions: what you send through the contact, news tip, volunteer, advertising and newsletter forms, any photos you attach, and the IP address it came from, to help us prevent spam.
- Technical data: the cookies described below, and server logs kept for security.
How we use it
- To run your account and publish your posts once our team has approved them.
- To reply to messages and review submissions.
- To connect blood donors with people in need. Donors' phone numbers are never shown to visitors who aren't signed in, and are shown to signed-in members only if the donor chooses.
- To keep the site secure and stop abuse.
We do not sell your personal data or use it for third-party advertising.
What other people can see
- Approved listings, events, jobs, ads and discussions are public, along with your name as the poster. Donors appear by first name and last initial.
- Phone numbers on events, jobs and ads are shown only to signed-in members. A business's phone and WhatsApp number are public only if the owner chooses to show them.
- Photos sent with contact messages and news tips are private to our team unless a story is published with your permission.
Emails we send
We email you only about your own account and posts: a welcome email when you register, password reset links you ask for, and updates when something you posted is approved, needs changes, or (for blood donors) is verified. We don't send marketing emails without your consent, and we haven't started sending the newsletter yet.
Who helps us run the site
We share data only with service providers that process it on our behalf, under their own security and privacy commitments:
- Hostinger hosts the website, its database and uploaded photos.
- Brevo delivers our emails, so it receives your name and email address and the content of emails we send you.
We may also disclose data where the law requires it.
Cookies
We use only essential cookies, so we don't ask for cookie consent:
- a session cookie that keeps you signed in and remembers what you were doing;
- a security cookie that protects forms from forgery;
- a "remember me" cookie, only if you tick Remember me when you sign in.
Your light/dark theme choice is stored in your browser, not on our servers. We don't use analytics, advertising or tracking cookies, and we don't load third-party trackers. If that ever changes, we'll ask for your consent first.
Your rights
You can update your name, email and photo, change your password or delete your account at any time from your account page, and edit or remove your posts and donor profile there too. To access, correct or erase any other data we hold about you, withdraw consent, or raise a concern about how we've handled your data, contact us and we'll respond as soon as we can.
Retention
We keep account data until you delete your account. Job posts and ads come down 30 days after approval, and events once they've ended. Form submissions and server logs are kept only as long as needed to handle them and keep the site secure.
Changes
If we change this policy we'll update the date above and, for significant changes, tell registered users by email.