Privacy Policy

Madalsan Party is the data controller for the personal data described here. Contact us at info@madalsan.org for any privacy request.

• Account / sign-in data: email address, hashed password credentials handled by our authentication provider, and sign-in timestamps.
• Membership data: name, date of birth, gender, contact details, geographic area (state, region, district), photo and signature you upload, and membership status and member code.
• Verification data: one-time codes sent to your email, SMS or WhatsApp number for verification purposes.
• Activity data: administrative and security audit records (who did what, when) for accountability.
• Technical data: standard web analytics and security logs.

Google Sign-In is offered on the Madalsan platform as an authentication method only. Where it is offered, we request only the standard identity scopes openid, email and profile.

• What we receive: your Google account email address, whether it is verified, and basic profile information (name and profile picture URL).
• What we do not request: Gmail, Google Drive, Calendar, Contacts, Sheets, Docs, YouTube or any other Google API data.
• How it is used: solely to authenticate you and to attach the sign-in to your existing Madalsan account. It is never used for advertising or profiling.
• How it is stored: inside our managed authentication provider as part of your authentication record. Google credentials, tokens and authorization codes are never stored in application database fields, browser storage or logs.
• Linking: signing in with Google does not by itself create a member record, and never grants any administrative role or permission. Linking a Google identity to an existing Madalsan account requires an explicit, verified linking action; ambiguous matches are blocked and referred for manual resolution.
• Unlinking / deletion: you can unlink your Google identity yourself from Account settings when another sign-in method exists, or request unlinking or account deletion by contacting us. Unlinking removes the sign-in method; it does not by itself delete membership records we are required to retain.

• To create, verify and administer membership and party records.
• To authenticate users and protect accounts.
• To send transactional messages (verification codes, membership status, receipts) and party communications you are eligible to receive.
• To maintain election, candidate and governance integrity records.
• To meet legal, audit and organisational accountability obligations.

We do not sell personal data. We share it only with service providers that operate the platform on our behalf — our managed cloud/database and authentication provider, and our email, SMS and WhatsApp delivery providers — strictly for the purposes above, and with authorities where legally required.

Data is stored in our managed cloud database with row-level security, role-based access control, encrypted transport, restricted administrative access and an immutable audit trail. Secrets and provider credentials are held in a server-side secret store and are never exposed to the browser. Membership and governance records are retained for as long as needed for party administration and legal obligations; verification codes and transient security data are kept only briefly.

You may request access to, correction of, or deletion of your personal data, withdraw consent for non-essential communications, and ask how a decision about your membership was recorded. Write to info@madalsan.org.

We will update this page when our practices change. Material changes affecting sign-in or data sharing will be announced on the platform.

info@madalsan.org

See also our Terms of Service and Trust & Security overview.