Privacy Policy

How Mohanji Connect handles your personal data (GDPR)

Last updated: June 2026

1. Who We Are

Mohanji Connect is the global member platform of the Mohanji Foundation. This policy explains how we collect, use, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR).

Data controller: Mohanji Foundation. For any privacy request, contact us at privacy@mohanji.org.

2. What Data We Collect

• Profile data: name, spiritual name, date of birth, address, phone number, e-mail, T-shirt size, language preferences, dietary restrictions and special requirements.
• Event data: registrations, attendance history, payment records and invoices.
• Volunteer data: team memberships, roles, skills, tasks, availability and engagement history.
• Spiritual role data: initiations (e.g. Mai-Tri, Kriya, MET), levels and initiation dates, recorded by the responsible boards.
• Technical data: login timestamps and session information needed to keep your account secure.

3. Why We Process Your Data

• To manage your membership account and event registrations (performance of contract).
• To process payments and issue invoices (legal obligation).
• To organize volunteer work and spiritual programs (legitimate interest / consent).
• To send you information about events you registered for (performance of contract).

4. Who Can See Your Data

Access inside the platform is role- and scope-based:

• You see and manage your own profile.
• Team leaders and coordinators see contact details (including address and phone number) of volunteers within their own team, country or region only.
• Responsible boards (e.g. Mai-Tri Board, Kriya Team) see the list of practitioners initiated into their technique.
• Finance roles see payment records for their own country or region only.
• Global management has administrative access to the full database.

Restricted documents (e.g. SOPs) are visible only to members holding the required role and level.

5. Data Processors

We use the following processors, each bound by GDPR-compliant agreements:

• Stripe and PayPal — payment processing (we never store full card numbers).
• Google — sign-in (OAuth), maps and e-mail delivery.
• Neon — database hosting.

6. How Long We Keep Data

• Profile data — while your account is active.
• Payment and invoice records — as long as required by accounting law.
• Volunteer and initiation records — while you are an active member, unless you request erasure.

7. Your Rights

Under GDPR you have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate data (you can edit most data in your Profile).
• Erasure — request deletion of your account and data.
• Restriction & objection — limit or object to certain processing.
• Portability — receive your data in a machine-readable format.
• Complaint — lodge a complaint with your local supervisory authority.

To exercise any of these rights, write to privacy@mohanji.org. We respond within 30 days.