Privacy Policy

Who We Are

GEYE INNOVATION FOUNDATION, doing business as GREENEYE®, is a non-profit organisation based in Jaipur, India. We decide how and why the personal information described below is handled, and we are responsible for it.

This policy covers our website at https://greeneye.foundation, our API at api.greeneye.foundation, and the GreenEye mobile application.

Postal address: G-4-2, Kanak Vrindavan, Indra Marg, Jaipur, 302024, Rajasthan, India. Email: [email protected].

This policy is published in English. Section headings are translated for convenience; the English text governs.

Information We Collect

We collect only what the services below need. Every item listed here corresponds to information we actually store.

• Account details — your name, email address, password (kept only as a bcrypt hash and never in readable form), your Google account identifier and sign-in provider if you use Google Sign-In, an avatar image, your phone number, and your address (street, city, state, pincode).
• Donation records — donor name, email address and phone number, the amount, the payment method (PayU or Razorpay), the payment status, the transaction and order identifiers returned by the payment gateway, and any refund records.
• Tree gift records — the occasion, the number of trees, the sender’s name, email address and phone number, the recipient’s name, email address, phone number and WhatsApp number, and the personal message of up to 500 characters that you write.
• Nursery shop orders — the items ordered with quantity and amount, the shipping address you give us (name, street, city, state, pincode, phone), the payment method (PayU or cash on delivery), and payment and refund records.
• One-time codes — when we email you a 6-digit code (to verify your email address, to sign in, to reset your password, to confirm a sign-in after several wrong passwords, or to confirm a new email address), we keep a record linked to your account (or, if you do not have an account yet, to your email address) with a keyed hash of the code and a count of attempts. The code itself is never stored in readable form, and the record is deleted automatically when it expires.
• Tree records — the tracking identifier and certificate identifier we issue, the name you choose for your tree, the species, the planting date, and milestone updates with notes and photographs from our field team.
• Volunteer enquiries — your availability, city, sector, profession and your reason for wanting to join us.
• Tree relocation requests — your first and last name, email address, phone number, the location, the reason for the request, and a photograph of the tree.
• Mobile app — a push notification token and the platform it belongs to, stored only if you allow notifications.
• Account deletion requests — the date you asked, the status, the reason you give, and the outcome of our review.
• Contact and enquiry forms — your name, email address, phone number and your message.
• Server logs and security records — our servers log IP addresses with request details and timestamps; for example, a failed API request is logged with its IP address, path and method and, if you are signed in, your account identifier. Security events, such as failed sign-ins, code requests, refused security checks and payment starts, keep only the network part of the IP address, a keyed hash of any email address and, where there is one, the account identifier, and are deleted automatically after 90 days. Tree relocation requests also record the IP address and browser they were sent from. We use these records for security and abuse investigation.

Gift Recipients and WhatsApp

When you gift a tree we ask you for the recipient’s name and a WhatsApp number in international format, and you may add a message of up to 500 characters. We use these to deliver your gift to the recipient and, afterwards, to send them updates about their tree.

We handle a recipient’s number because you, the donor, have asked us to deliver a gift on your behalf. We message a recipient only for that delivery and for the tree updates that follow from it. We never use a recipient’s number for marketing, and we never pass it to advertisers.

By entering someone else’s contact details you confirm that you are entitled to share them with us for this purpose. If a recipient tells us they did not agree to it, we will delete their details.

How We Use Your Information

We use the information described above to:

• record and fulfil donations, tree gifts and nursery shop orders;
• plant, photograph, care for and report on the trees your contribution funds;
• issue your tree certificate and keep your tracking link working;
• send you transactional messages by email, WhatsApp and SMS about your donation, gift, order or tree;
• answer your enquiries, volunteer applications and tree relocation requests;
• keep the service secure — authenticate sign-in, verify one-time codes, check in the Android app that requests come from the genuine GreenEye app on a genuine device (Google Play Integrity), apply rate limits and investigate abuse;
• meet our obligations under Indian law, including financial, accounting and tax record-keeping.

Who We Share It With

We pass personal information to the service providers listed below, each only to the extent it needs to do its job for us. We do not sell your personal information, and we do not give it to advertisers or data brokers.

• PayU and Razorpay — the payment gateways that handle donations and orders. Your card, UPI and bank details are entered on the gateway’s own hosted page: GreenEye never receives or stores card numbers, CVV codes or bank credentials. We receive only the transaction identifiers, the amount and the payment status.
• Amazon Web Services — Amazon S3 still holds the tree and milestone photographs uploaded before 8 September 2026. Photographs uploaded since then are stored on Google Cloud Storage instead (see Google below).
• Google — Google Sign-In if you choose to sign in with your Google account; Google Cloud Storage, which stores tree and milestone photographs uploaded from 8 September 2026 onwards; reCAPTCHA v3 on the website, with a reCAPTCHA v2 checkbox when the first check is inconclusive, to tell humans from automated scripts when you sign in (with a password, with Google or with an emailed code), sign up (including as a volunteer), request a password reset, or start a payment for a donation, a tree gift or a nursery shop order; Google Play Integrity in the Android app, which tells us whether a sign-in, sign-up, password reset or payment request comes from the genuine GreenEye app installed from Google Play on a genuine Android device, to prevent fraud and automated abuse (Google receives technical information about your device and the app for that check, and we receive only the verdict); Google Analytics for aggregate website usage where a measurement ID is configured for the deployment; and Google Maps in the mobile app to display tree planting locations.
• Cloudinary — hosting and delivery of images uploaded through the site.
• Our own notification engine — a service operated by GreenEye on its own infrastructure that prepares and sends our WhatsApp, email and SMS messages. Emails are delivered through Brevo (Sendinblue SAS), a transactional email provider that processes your email address and the message only to deliver it. We use neither for marketing.

We may also disclose information where Indian law, a court order or a lawful request from a public authority requires it, and where it is needed to establish or defend legal claims.

Tree Photographs and Planting Locations

Our field team uploads notes and photographs as your tree reaches each milestone. Those photographs are stored on Google Cloud Storage (photographs uploaded before 8 September 2026 remain on Amazon S3) and shown on the tree’s tracking page.

A tracking page can be opened by anyone holding its tracking link, because donors share that link with the people they gift trees to. Please do not put personal information into the name you give your tree.

Cookies and Analytics

We use a small number of cookies and similar technologies, described below. We use no advertising, retargeting or cross-site marketing cookies.

• Authentication cookie — when you sign in, your session token is stored in a cookie marked HttpOnly, so scripts running in your browser cannot read it. This cookie is strictly necessary: without it you cannot sign in.
• Google reCAPTCHA v3 — loaded on every page of the website except the admin area, and used to block automated abuse when you sign in (with a password, with Google or with an emailed code), sign up (including as a volunteer), request a password reset, or start a payment for a donation, a tree gift or a nursery shop order; a reCAPTCHA v2 checkbox appears when the first check is inconclusive. Google sets its own cookies and receives technical signals from your browser wherever the script is loaded.
• Google Analytics — where a measurement ID is configured for the deployment, Google Analytics records aggregate usage such as pages viewed and approximate region, so that we can improve the site.

You can block or delete cookies in your browser settings. If you block the authentication cookie you can still read the site, but you will not be able to sign in.

How We Protect Your Information

The measures we have in place are:

• passwords are hashed with bcrypt and are never stored or sent in readable form;
• sign-in uses signed JSON Web Tokens, held in an HttpOnly cookie rather than in browser storage;
• one-time codes are stored hashed, capped to a limited number of attempts, and expire automatically;
• hardened security headers are applied to every API response;
• the API accepts browser requests only from an allowlist of our own origins;
• limits on sign-in attempts, code emails, code attempts and other account actions are counted per email address or per account, and our database keeps each counter under a keyed hash rather than the address itself; after repeated wrong passwords, signing in needs an emailed code for a while;
• incoming requests are sanitised to block database injection attempts;
• traffic to greeneye.foundation and api.greeneye.foundation is encrypted with HTTPS.

How Long We Keep It

• Account information is kept for as long as your account is open. When an account is deleted we remove the associated personal information, except where we must keep it for the reasons below.
• One-time code records expire and are deleted automatically a short time after they are issued.
• Donation, order and refund records are kept for as long as Indian financial, accounting and tax law requires.
• Tree records, including photographs and the planting location, are kept for the life of the tree, so that tracking links and certificates keep working.

Your Rights and Account Deletion

You can ask us for a copy of your personal information, ask us to correct it, and ask us to delete your account and the data associated with it. We handle these requests under India’s Digital Personal Data Protection Act, 2023.

Children

Our services are intended for adults aged 18 and over, and are not directed at children. We do not knowingly collect personal information from children. If you are a parent or guardian and believe a child has given us personal information, write to [email protected] and we will remove it.

Changes to This Policy

We may update this policy as our services change. Material changes are published on this page with a revised last-updated date, so please check back from time to time.

Contact Us

For any question about this policy, or to exercise any of the rights above, write to us at [email protected], or by post to GEYE INNOVATION FOUNDATION, G-4-2, Kanak Vrindavan, Indra Marg, Jaipur, 302024, Rajasthan, India.