Privacy Policy

1. Information We Collect

We collect information to provide secure accounting and verified audit services:

• Account Credentials: Full Name, Email Address, Mobile Number, bcrypt-hashed Password, and hashed 6-digit Security PIN.
• Ledger & Financial Data: Event titles, category breakdown, verified income entries, expense receipts, and payment transaction IDs.
• OAuth Data: When signing in via Google, we process your verified Google name, email address, and profile picture avatar.

2. How We Protect Your Data

KanakkuBook employs industry-standard security safeguards:

• All user passwords and 6-digit Security PINs are encrypted using salted bcrypt hashing algorithms. We never store plain-text passwords.
• Authentication sessions are secured using HTTP-only, SameSite-strict JWT cookies to prevent XSS and token theft.
• Database connections are pooled and encrypted using TLS 1.3 protocol.

3. Public Ledger Visibility & Transparency

KanakkuBook is built for community auditing. When event organizers designate a festival or organization ledger as Public:

• Income records, contributor names (e.g. donor listings), and approved expense summaries are accessible via public link for auditing.
• Organizers can toggle ledgers between Private and Public modes at any time in event settings.

4. Your Privacy Rights & Credential Controls

You maintain full control over your personal account:

• Verified Email and Mobile details can be updated securely via OTP verification in your User Profile.
• You may request complete account data deletion by contacting kanakkubook01@gmail.com.

5. Cookies & Local Storage

We use essential HTTP-only cookies for secure user login sessions, and local storage strictly to remember your active theme preference (Light/Dark Mode) and Tamil/English language selections.

6. Contact Privacy Desk

If you have any questions or concerns regarding our Privacy Policy or data handling practices, please email us at kanakkubook01@gmail.com.