Barter & Green Foundation (“bNg”, “we”, “us”) operates the website https://www.mybng.org and the underlying Karyakarta network. This policy explains what personal data we collect, why we collect it, and how we protect it. We are aligned with the Digital Personal Data Protection Act, 2023.
1. What we collect
- Mandatory: mobile number (for OTP-based identity), name, city/village, state.
- Optional: email, profile photo, gender, date of birth, geo-location (only when you opt in for proximity matching), Aadhaar (masked, last-4 only — used for the Verified-Karyakarta tick).
- Activity: Barter Credit ledger entries, listing posts, time check-ins, ratings given/received, dispute messages.
- Device & analytics: anonymised page-view data via GA4 with IP truncation. No third-party advertising trackers.
2. How we use it
- To verify your identity (OTP) and prevent fraud.
- To match Karyakartas on the network and operate the BC ledger.
- To send transactional notifications (SMS/WhatsApp/email).
- To improve the service through aggregated analytics.
3. OTP & authentication
Your one-time password is hashed at rest using a one-way function and is never written to console, logs, or API responses. We delete the hashed OTP record once the OTP is consumed or expires.
4. Data sharing
We never sell, rent, or trade your data. We share limited data with:
- Government scheme portals (PM Suryaghar, Udyam, etc.) — only with your explicit consent at the moment of submission.
- Empanelled service providers (SMS, WhatsApp, hosting, analytics) bound by confidentiality agreements.
- Law enforcement — only on a written legal request lawfully issued under Indian law.
5. Where data is stored
On Indian-region cloud infrastructure (Mumbai). Backups are encrypted at rest with AES-256 and rotated every 14 days.
6. Your rights
- Access — download a copy of your data from the Member Dashboard at any time.
- Correct — edit your profile and listings whenever needed.
- Delete — close your account from the Dashboard. We retain only the audit-log entries required by law (financial trail of BCs) for 7 years; everything else is purged within 30 days.
- Withdraw consent for any optional data category at any time.
7. Cookies
Essential cookies (auth session) and anonymised analytics cookies (GA4 with IP truncation). No third-party advertising trackers. You can clear or block cookies in your browser; some features (login) will stop working without them.
8. Children
bNg is not intended for users under 14. Members aged 14–18 must have a guardian co-sign their enrolment.
9. Changes to this policy
Material changes will be announced via SMS/email at least 14 days in advance. Trivial edits are listed in the page footer with a date stamp.
10. Contact
Email info@mybng.org, WhatsApp +91 99635 54333, or write to Barter & Green Foundation, 501 Vamsee Estates, Metro Pillar 1079, Ameerpet, Hyderabad – 500016.