Privacy Policy

1. Who We Are

Yoga Seva Sangh is a registered non-profit organization dedicated to providing free, accessible virtual yoga and wellness sessions to the community. The organization was founded by Vaishali Prabhu.

• Website: yogasevasangh.com
• Contact: yogasevasangh@gmail.com

2. Information We Collect

We collect the following categories of personal information:

• Registration data: Full name, email address, phone number, WhatsApp number, and mailing address.
• Health information: Health conditions, injuries, or concerns you voluntarily disclose to help instructors guide your practice safely.
• Consent records: A record of your participation acknowledgment and your photo/video consent preference (yes or no).
• Contact form submissions: Name, email address, and the message you send us.
• Donation records: Voluntarily self-reported donor name, email address, donation amount, and an optional note. We do not collect or store any payment credentials — all Zelle transactions are bank-to-bank and are initiated solely by you through your own financial institution.
• Technical data: Standard HTTP request logs (including IP addresses) processed automatically by our hosting provider, Vercel. We do not actively use or analyze this data.

3. How We Use Your Information

We use the information we collect solely to operate and improve our free community yoga program:

• To review and approve class registration applications.
• To send session access information (Zoom links) via email and WhatsApp upon approval.
• To allow instructors to offer safe, personalized guidance based on health conditions you have disclosed.
• To respond to contact form inquiries.
• To maintain internal records of voluntarily reported donations.
• To display photos or videos on our website or social media platforms, but only if you granted photo/video consent at registration.

We do not use your data for advertising, behavioral profiling, or any commercial purpose. We do not sell, rent, or trade your personal information to any third party.

4. Sensitive Health Information

Any health information you provide is used solely to help our instructors offer appropriate modifications and ensure your safety during sessions. This information is stored securely in our database and is accessible only to organization administrators. It is never shared with third parties, sold, or used for any purpose beyond session safety.

You may request deletion of your health information at any time by emailing us at yogasevasangh@gmail.com. Removing your health information will not affect your registration status.

HIPAA Notice: Yoga Seva Sangh is not a healthcare provider and is not a Covered Entity under the Health Insurance Portability and Accountability Act (HIPAA). However, we treat all health information you share with us with equivalent care and confidentiality.

5. Photo & Video Consent

Photo and video consent is entirely optional and is recorded at the time of registration. If you grant consent, photographs or videos captured during virtual sessions may be used for promotional or community purposes on our website, Instagram, Facebook, or other organizational materials.

You may withdraw this consent at any time by emailing yogasevasangh@gmail.com. Withdrawal does not retroactively require removal of content that has already been published.

6. Third-Party Data Processors

We use the following trusted third-party services to operate the website and deliver sessions. Each processor receives only the data necessary for its specific function:

• Convex (convex.dev) — Our database, authentication system, and file storage provider. All user data is stored on Convex servers located in the United States.
• Resend (resend.com) — Transactional email delivery. Receives your name and email address to send registration approval notifications and session information.
• Twilio — WhatsApp message delivery. Receives your WhatsApp number to send session notifications upon registration approval.
• Vercel (vercel.com) — Website hosting. Processes standard HTTP request logs, including IP addresses, as part of normal infrastructure operation.
• Zoom — Virtual session delivery. When you join a session using a Zoom link we provide, you are subject to Zoom's Privacy Policy.

7. Donations via Zelle

Yoga Seva Sangh does not operate a payment processor and does not store any payment credentials, bank account numbers, or card information. Donations made via Zelle are initiated entirely by you through your own bank or financial institution. We may record the fact of a donation and its voluntarily reported amount for internal non-profit record-keeping purposes only. Zelle transactions are governed by Zelle's terms and your own bank's privacy policy.

8. Cookies

Our website uses only essential functional cookies — specifically, session authentication cookies required to keep you logged in. We do not use advertising cookies, analytics pixels, or any tracking technologies that require your consent under applicable privacy laws. No cookie consent banner is required for this site.

9. Data Retention

• Account and registration data is retained for as long as your account is active.
• Upon a written request to delete your account (sent to yogasevasangh@gmail.com), all personal data — including health information — will be removed within 30 days.
• Donation records may be retained for up to 7 years as required for non-profit financial record-keeping and tax compliance.

10. Your Privacy Rights

Depending on where you live, you may have the following rights regarding your personal information:

• The right to know what personal information we hold about you.
• The right to request correction of inaccurate information.
• The right to request deletion of your personal information.
• The right to opt out of the sale of personal information. (Note: we do not sell personal information.)
• California residents (CCPA): You have the right not to be discriminated against for exercising any of these rights.

To exercise any of these rights, please email us at yogasevasangh@gmail.com.

11. GDPR Notice (European Economic Area)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR): the right of access, rectification, erasure, portability, restriction of processing, and the right to object to processing.

Our legal basis for processing your personal data is your consent (given at registration) and our legitimate interest in providing safe, community-focused yoga sessions.

Data Controller: Yoga Seva Sangh — yogasevasangh@gmail.com

12. Children's Privacy

Our sessions are designed for individuals aged 15 and older. We do not knowingly collect personal information from children under the age of 13. If we become aware that a user under the age of 13 has registered, we will promptly delete their account and associated data. If you believe a child under 13 has provided us with personal information, please contact us at yogasevasangh@gmail.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised policy on this page with an updated “Last Updated” date. We encourage you to review this page periodically to stay informed about how we protect your information.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: yogasevasangh@gmail.com