Privacy Policy

1. Overview

This policy explains what information OneTaj collects when masjids and Islamic organizations use our dashboard, and when donors give to them on WhatsApp, and how that information is used, stored and shared. We collect only what is needed to run giving well.

2. What we collect

• Organization account data - your name, email, password hash, organization name, address, currency and office hours.
• Cause and donation data - the causes, funds, goals and donations your team creates or receives, including cash and bank transfers you record.
• Donor data - a donor's name and WhatsApp number, the causes they gave to, amounts and dates, and whether they agreed to receive updates.
• Message data - content exchanged through the WhatsApp Cloud API, strictly as needed to receive donations and send receipts and updates.
• Usage data - device, browser and IP address, and the approximate location (city, region and country) that we work out from the IP address on our own servers, used to keep accounts secure (for example, to show your team where each member last signed in). We never store precise location or coordinates.

3. How we use data

We use this data to show your causes on WhatsApp and your giving page, match messages to donations, send the receipts, thank-you messages and reminders your organization sets up, and keep OneTaj reliable and secure. We never sell donor data, and we never use it to ask your donors to give to anyone else.

4. Organizations and donors

Each organization controls its own donor list. Donor information is visible only to that organization's team, and the organization decides how it contacts its donors, within WhatsApp's opt-in rules. Donors with questions about their data should contact the organization they gave to, or email us.

4a. Instagram and Messenger data

When an organization connects its Instagram or Facebook Messenger account, we receive the messages people send to that account, the sender's page-scoped ID, and the name or handle Meta provides. We use them only to reply and to send the give link. They are kept in the organization's own records for as long as the organization keeps its account, and only that organization's team can see them. To have your messages deleted, use /data-deletion. Connection tokens are held encrypted and are removed when the organization disconnects.

5. WhatsApp data

When an organization connects a WhatsApp Business number, we access only what the Meta Cloud API provides to run giving: inbound messages, delivery status and catalog sync.

6. Payment information

Each organization connects its own payment account, such as Stripe. Card and wallet payments are handled by that provider; OneTaj does not see or store card details.

7. When we share data

We share data only with trusted service providers that help us run OneTaj, with integrations an organization connects, or when required by law.

8. Data retention

We keep data for as long as the organization's account is active. When an account is closed, we delete or anonymize personal data within 30 days, except records the organization or we must keep by law, such as donation records needed for accounting. Conversations with donors are kept for 3 years; after that, the message text and attachments are deleted and only a minimal record stays (direction, date and delivery status). Technical records that may contain personal data are kept only as long as needed: raw messages from WhatsApp and payment providers for 30 to 90 days (payment event details up to one year), delivery logs for 180 days, and visitor details on link clicks for one year. When a donor asks us to delete their data, we remove it from donations and conversations; the organization keeps the donation amounts it needs for its accounts.

9. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to stop receiving messages at any time.

10. Text messages

When you enter your mobile number on a OneTaj sign-in, sign-up or giving page, you agree to receive text messages from OneTaj about your sign-in codes, your gifts and your receipts. Message frequency varies. Message and data rates may apply. Reply STOP to stop at any time, or HELP for help. We do not sell, rent or share mobile numbers or text message consent with third parties or affiliates for their marketing. Your number is passed only to the service providers that deliver the messages for us.

11. Contact us

Questions about privacy? Reach our team at [email protected].