Privacy Policy

Who we are

Dream School Foundation USA, 18725 W Cavendish Dr, Castro Valley, CA 94552. You can reach us at [email protected].

Information you give us

• Contact form: first name, optional last name, email address, subject and message.
• Aarohi enquiry form: name, email address, optional phone number and message.
• Donations: the amount, currency and payment identifiers. Donor name and email address are taken from the payment provider's confirmation — we never ask you to type card details into this website.

Information collected automatically

To protect the forms against abuse we record a rate-limit counter that is derived from your request using a keyed hash. The raw address is not stored. When your browser submits a form or starts a donation we set one anonymous session cookie so that only your browser can look up that donation's status; we store a hash of that token, not the token itself.

We use Google Tag Manager to manage website measurement tags. Analytics storage is disabled by default and can be enabled through our cookie notice. Advertising storage, advertising user data and advertising personalization are disabled. You can change your analytics choice using Cookie settings in the footer. We do not send form messages, donor names, email addresses, card details or PayPal order identifiers to the data layer. If you allow analytics, donation events include the USD amount and a random donation reference to avoid counting the same confirmed gift repeatedly.

Who processes it

• PayPal processes donations and holds the payment relationship. Its own privacy policy governs the payment data it handles.
• Hostinger provides our hosting and database.
• Brevo is the transactional email provider used to send notifications and acknowledgments. Its privacy policy governs the delivery data it processes.
• Google provides Tag Manager and may process technical request data when the container loads. Consent-aware Google tags may send limited measurement signals without analytics cookies when analytics storage is denied. Tags and retention settings configured in the container are managed by the organization.

We do not sell personal information.

How long we keep it

• Contact and Aarohi message bodies, and the rendered content of notification emails, are cleared 30 days after the email provider accepts the notification. Unresolved notifications are retained for review. Provider acceptance does not prove inbox delivery.
• Operational metadata (that a message was received and delivered) is kept longer so we can respond to follow-up questions.
• Donation and payment records are financial records and are retained for the period the organization is legally required to keep them. This retention is set by the organization, not by this website.
• Rate-limit counters are removed as soon as they expire.

Your choices

You can ask us to access, correct or delete information you have sent us. Because donation records are financial records, some may be retained where the law requires it. Write to [email protected] and we will respond as soon as we can.