Privacy Policy
This policy explains what personal information the NGO Partners mobile applications collect, why we collect it, who we share it with, and the choices you have over it.
NGO Partners is operated by Zygonich (“we”, “us”, “our”). We are the data controller for the information described below.
This policy covers the NGO Partners client app, used by NGOs and their representatives to browse services, place orders and track cases. Our internal sales and administration app is covered by a separate Tentacle CRM privacy policy.
1. Information we collect
Account and profile information
When you register we collect your email address and a password. Your password is never stored in readable form — it is hashed using Argon2id and cannot be recovered by us or by our staff. In your profile you may additionally provide your first and last name, phone number, organisation name and a profile picture.
Service orders
When you place an order we record the service selected, its price, and a snapshot of your contact details at that moment (name, email address and phone number), together with any notes you add to the order.
Payment information
Payments are made outside the app. You transfer the amount to our bank account or UPI ID using your own banking or UPI application, and then tell us you have paid. When you do, we collect the payment method you used, the transaction reference number (such as a UTR), the amount you paid, the payment date, the payer name, any note you add, and — if you choose to attach one — a screenshot or receipt image as proof of payment.
We never receive your payment credentials. The app contains no payment gateway and no card entry screen. We do not collect or store card numbers, CVV codes, UPI PINs, bank passwords or one-time passwords at any point.
Case documents
To deliver services such as registration or compliance filing, we ask you to upload supporting documents. These files, their names, types and sizes are stored on our servers and are visible to the staff working on your case.
Support interactions
We keep the support tickets you raise and the messages exchanged on them. If you start a voice or video support call from the app, we record call metadata — who took part, the call type, and start and end times. Call audio and video are transmitted in real time and are not recorded by us.
Community content
If you use the community section, the questions, discussions, answers and votes you post are stored and are visible to other users of the app alongside your display name.
Technical information
Our servers automatically log requests made by the app, including IP address, timestamp, the endpoint called, and a correlation identifier used for troubleshooting. We also store authentication tokens so you can stay signed in, and an audit trail of significant actions taken on your account and orders.
2. How we use your information
| Purpose | Information used |
|---|---|
| Creating and securing your account | Email, password hash, authentication tokens |
| Taking and fulfilling service orders | Order details, contact snapshot, notes |
| Verifying that a payment has been received | Reference number, amount, payment date, proof image |
| Preparing and filing your case | Uploaded documents, case correspondence |
| Answering support requests and calls | Tickets, messages, call metadata |
| Sending service notifications | Account identifier, order and case status |
| Preventing fraud and abuse | Technical logs, audit trail, payment references |
| Meeting legal, tax and accounting duties | Order and payment records |
We do not use your information for advertising, and we do not sell or rent it to anyone.
3. Who we share it with
- Our own staff. Administrators and sales team members can see your orders, declared payments, case documents and support tickets, strictly to deliver the service you asked for.
- Agora — the real-time communications provider that carries in-app voice and video support calls. Agora processes the call stream and a temporary session token. See Agora's privacy policy.
- Our hosting provider, which operates the servers where the data is stored.
- Authorities or professional advisers, where we are required to disclose information by law or to establish or defend a legal claim.
The app contains no advertising SDKs and no third-party analytics or tracking services.
4. Where your data is stored
Your data is stored on servers operated on our behalf and is protected in transit by TLS encryption. Where data is transferred outside your country — for example when a support call is routed through Agora's global network — we rely on the safeguards offered by that provider's own data protection commitments.
5. How long we keep it
- Account and profile — for as long as your account is active.
- Orders, declared payments and proof images — retained after completion for the period required by applicable tax, accounting and company law in India.
- Case documents — for the duration of the engagement and for any statutory record-keeping period that applies to that filing.
- Support tickets and call metadata — normally up to 24 months.
- Server logs — normally up to 90 days.
When a retention period ends, records are deleted or irreversibly anonymised.
6. Your rights and choices
You may ask us to:
- give you a copy of the personal information we hold about you;
- correct information that is wrong or out of date — most profile fields can be edited directly in the app;
- delete your account and associated personal data;
- restrict or object to a particular use of your information;
- withdraw a consent you previously gave.
To make any of these requests, email support@zygonich.com from the address registered on your account. We respond within 30 days. If you are not satisfied with our response, you may complain to the relevant data protection authority.
Deleting your account
You can request deletion of your account and personal data at any time by emailing support@zygonich.com with the subject line Delete my account, from the email address on the account. We verify the request, then delete your profile, documents and community content. Records of completed orders and the payments against them are retained where tax and accounting law obliges us to keep them; they are unlinked from your profile where that is possible. Deletion is completed within 30 days.
7. Security
We protect your information with TLS encryption in transit, Argon2id password hashing, role-based access control so staff only reach the records they need, rate limiting and account lockout against brute-force attempts, and an audit trail of sensitive actions. No system is perfectly secure, but we work to keep these controls current.
8. Children
NGO Partners is a business service intended for organisations and the adults who represent them. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.
9. Changes to this policy
If we change this policy we will update the date at the top of this page, and — where the change materially affects you — notify you in the app or by email. Continuing to use the app after a change takes effect means you accept the updated policy.
10. Contact us
- Privacy & data requests
- support@zygonich.com
- Operator
- Zygonich
- Support page
- ngo-partner/support