Scope & applicable privacy framework
This Privacy Policy applies to personal data processed by Raizoh in connection with the use of its website, platform and related services, including where users create or support fundraising campaigns, interact with beneficiaries or campaign organisers, communicate with Raizoh, or otherwise use the platform.
Raizoh processes personal data in accordance with applicable Indian data-protection, privacy and cybersecurity laws, including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, to the extent applicable and in force. Where older privacy or security requirements continue to apply to a particular processing activity, Raizoh will comply with such requirements to the extent applicable.
Your use of the platform does not, by itself, mean that every processing activity is based solely on consent. Depending on the circumstances, Raizoh may process personal data on the basis of consent where required, contractual or transactional necessity, legal obligations, fraud prevention, security, or other lawful grounds recognised under applicable law.
Categories of personal data we collect
Depending on how you use Raizoh, we may collect the following categories of information:
Personal identity data
Full name, date of birth, gender where relevant, address, email address, mobile number, PAN, Aadhaar or other government-issued identification where required.
Identity verification, account creation, fundraiser/beneficiary verification, fraud prevention and compliance.
Medical & campaign data
Medical reports, treatment information, medical history summaries, treatment/cost estimates, admission or discharge information, hospital information, patient photographs or videos.
Medical campaign verification, beneficiary verification, campaign administration and, where applicable, hospital verification.
Financial & banking data
Bank account details, IFSC, account-holder name, cancelled cheque, UPI ID, transaction reference and related payment information.
Payment processing, beneficiary verification, settlement and payout processing.
Technical & navigation data
IP address, browser type, device information, operating-system information, session information, logs and security-related information.
Platform security, fraud and bot prevention, troubleshooting, analytics and performance.
Communication data
Support requests, emails, messages, complaints, feedback and related correspondence.
Customer support, grievance handling, dispute resolution and service improvement.
Raizoh may collect additional information where reasonably necessary to provide a requested service, conduct verification, prevent fraud, comply with applicable law, or protect users and the platform.
Payment credentials: Raizoh does not ordinarily store complete card numbers, CVV/security codes or net-banking passwords. Payment credentials are processed through the applicable payment gateway, payment processor, banking partner or other authorised service provider in accordance with their security and compliance requirements.
Medical & sensitive campaign information
Medical crowdfunding may require the submission of information relating to a patient's health, treatment and financial medical needs, including diagnostic reports, treatment estimates, admission or discharge summaries, hospital records, patient photographs and related documentation.
Medical information is collected and processed primarily to verify the authenticity of a medical fundraising campaign, verify the beneficiary and treatment requirement, support hospital or healthcare-provider verification, administer the campaign, facilitate applicable payouts, and address fraud, disputes, complaints or legal and compliance requirements.
Detailed medical documents submitted for verification are treated as restricted information. They are not ordinarily published in full on a public campaign page and may be accessed only by authorised Raizoh personnel, relevant service providers, payment or verification partners, treating hospitals or healthcare institutions where necessary, or other parties where required or permitted by applicable law.
A campaign page may contain a general description of the medical condition, treatment requirement, fundraising purpose and other campaign information. Photographs, videos or other personal information will be displayed publicly only where the campaign organiser or beneficiary has provided the necessary rights, permissions or consent. Detailed diagnostic reports, identity documents, bank documents and other verification-only records will not ordinarily be made publicly available.
Where consent is required for a particular use of medical or sensitive information, Raizoh will seek the appropriate consent. A beneficiary or authorised representative may request withdrawal of consent for a particular optional/public use by contacting Raizoh through the designated privacy or grievance channel. Withdrawal of consent will not affect processing that is otherwise permitted or required by law, nor will it automatically reverse transactions or funds that have already been lawfully processed or disbursed.
Medical documents are retained only for as long as reasonably necessary for verification, campaign administration, dispute resolution, fraud prevention, security, accounting, legal compliance and other lawful purposes. After the applicable retention period, information may be securely deleted, anonymised or otherwise disposed of in accordance with applicable law and Raizoh's data-retention practices.
A beneficiary or authorised representative may contact Raizoh to request access to, correction of, or deletion of personal information, subject to applicable law, verification requirements, legitimate retention obligations and the rights of other individuals.
Purposes of processing
Raizoh may process personal data for the following purposes:
- Platform operations: creating and maintaining user accounts, enabling fundraising campaigns, facilitating contributions, providing campaign-related services, communicating with users, and maintaining platform functionality.
- Verification & trust: verifying campaign organisers, beneficiaries, NGOs and charitable organisations where applicable, medical claims and supporting documents, and hospitals or healthcare institutions; and preventing impersonation, fraud and misuse.
- Payments & payouts: processing contributions, facilitating payment transactions, reconciling transactions, processing refunds where applicable, verifying beneficiary bank details, and facilitating approved payouts or settlements.
- Legal, regulatory & security requirements: complying with applicable laws and regulations, court orders and lawful governmental requests, tax and accounting requirements, fraud-prevention obligations, cybersecurity requirements, and payment-partner requirements. Where applicable, payment and financial-regulatory obligations specific to regulated payment or banking entities may be fulfilled by the relevant regulated partner.
- Communications: transaction confirmations, receipts, campaign-related notifications, account and security alerts, support communications, and responses to inquiries and complaints. Marketing communications, where applicable, will be handled in accordance with applicable law and user preferences.
Data sharing & third-party disclosure
Raizoh does not sell, rent or trade personal data to third parties or advertisers for their independent commercial use. Personal data may be shared only where reasonably necessary for the purposes described in this Privacy Policy, with appropriate safeguards and subject to applicable law.
- Payment partners & banks: to process contributions, complete payment transactions, verify accounts, process refunds, reconcile transactions, and facilitate approved payouts or settlements.
- Hospitals & healthcare providers: where applicable, to verify medical claims, validate treatment or billing information, confirm beneficiary information, and facilitate direct hospital or healthcare-provider payments. Only information reasonably necessary for the relevant purpose will be shared where practicable.
- Verification & service providers: engaged for identity verification, KYC, fraud prevention, cybersecurity, cloud hosting, analytics, communications, customer support and other technology or operational services. Such providers may process personal data only as necessary to provide their contracted services and subject to applicable contractual and legal safeguards.
- Government, regulatory & law-enforcement authorities: where required or permitted by applicable law, including court orders, lawful governmental requests, regulatory requirements, law-enforcement or fraud investigations, or other legally valid processes. Where legally required, information may be disclosed to appropriate financial-intelligence, law-enforcement or regulatory authorities.
Data retention & security
Raizoh retains personal data and transaction records only for as long as reasonably necessary for the purposes for which they were collected and for such additional period as may be required or permitted by applicable law, regulatory requirements, accounting and taxation requirements, contractual obligations, dispute resolution, fraud prevention, cybersecurity and security monitoring, or legitimate operational requirements. Different categories of information may therefore be retained for different periods.
Raizoh implements reasonable technical and organisational measures designed to protect personal data against unauthorised access, misuse, alteration, disclosure, loss or destruction, including encryption in transit using appropriate secure protocols, access controls, authentication mechanisms, restricted administrative access, logging and monitoring, secure cloud infrastructure, backup and recovery controls, and fraud and security monitoring. No electronic transmission or storage system can be guaranteed to be completely secure, and Raizoh cannot guarantee absolute security of information.
Your rights
Subject to applicable law, verification requirements and statutory retention obligations, you may have rights to: request information or a summary regarding personal data processed by Raizoh about you (access); request correction or updating of inaccurate or incomplete personal information (correction); request deletion of personal data where permitted by applicable law (erasure — deletion may not be possible where Raizoh is legally required or otherwise permitted to retain information for legal compliance, fraud prevention, accounting, taxation, dispute resolution or security); raise a privacy or data-processing grievance through the designated grievance channel; and, where processing is based on consent and applicable law provides for withdrawal, request withdrawal of that consent (withdrawal does not affect the lawfulness of processing carried out before withdrawal and may not apply where another lawful basis for processing exists). Requests may be subject to reasonable identity verification and other requirements prescribed by applicable law.
Grievance redressal & privacy contact
For privacy-related questions, requests or grievances, you may contact:
Raizoh Ventures Private Limited
CIN: U62013TS2026PTC220985
Address: H. No. 08-003/2/2, Block C, NCL Colony, Kompally, Medchal-Malkajgiri, Telangana – 500067, India
Email: [email protected]
The name and designation of the designated Grievance Officer / privacy contact will be published on this page prior to launch and updated whenever required.
For account, payment, campaign or general support matters, please use the Help Centre / Contact Us channels available on the Raizoh platform.
Updates to this Privacy Policy
Raizoh may update this Privacy Policy from time to time to reflect changes in applicable laws and regulations, technology, platform features, business operations, payment or service providers, or privacy and security practices. Where appropriate, material changes will be published on this page together with an updated effective date. You are encouraged to review this Privacy Policy periodically to remain informed about how Raizoh processes personal data.
