Enterprise Privacy Policy.

1. Statutory Compliance with DPDP Act 2023

DREAM IT CHARITABLE FOUNDATION and its technology platform ImpactOS adhere strictly to the Digital Personal Data Protection (DPDP) Act 2023. We collect, store, and process personal data exclusively for specified, verified statutory CSR governance, milestone telemetry, and partner due diligence purposes with explicit lawful consent.

2. Indian Sovereign Data Residency

All institutional records, financial ledgers, partner PII, and beneficiary demographic data remain strictly within MeitY-empanelled Tier-IV data centers located within the sovereign territory of the Republic of India (Mumbai and Hyderabad). Zero customer data is transferred outside Indian jurisdiction.

3. Beneficiary Data Protection & Pseudonymization

Personal identifiers of vulnerable rural beneficiaries (such as phone numbers, family names, and national identity numbers) are pseudonymized and encrypted at rest with AES-256. Access is strictly governed by least-privilege role-based access controls (RBAC).

4. Zero Third-Party Commercial Monetization

We never sell, rent, monetize, or share corporate portfolio data, partner files, or beneficiary records with commercial advertising networks, data brokers, or public AI foundation model providers.