Privacy Policy

Who we are

Annai Foundation ("we", "us") is a Canadian not-for-profit organization that connects monthly donors with mothers of Tamil Eelam. This policy explains how we handle personal information for visitors, donors and newsletter subscribers of annai.ca, in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). Questions or requests: info@annai.ca.

What we collect

• Account information — your name, email address and password (or Google sign-in identity) when you create a donor account.
• Donation information — your subscription status, donation history and donation receipts. Card payments are processed by Stripe; we never see or store your full card number.
• Preferences — donor type, preferred contact method and anonymity settings you choose.
• Newsletter and contact messages — your email address and anything you send us through our forms.

How we use it

To process your monthly donation, pair you with a mother the foundation supports, send you donation receipts and impact updates, respond to your messages, and operate a secure service. We do not sell, rent or trade personal information, and we do not use it for third-party advertising.

Who processes it for us

We rely on a small number of service providers to run annai.ca: Stripe (payment processing), Supabase (database and authentication hosting), Vercel (website hosting) and our email delivery provider (transactional email). Each processes your information only to provide their service to us and may store it outside of Canada (including in the United States), where it is subject to local laws.

Retention

We keep donation records and receipts for as long as required for our financial record-keeping obligations. Account information is kept while your account is active; you may delete your account at any time from your settings, which removes your profile data. Newsletter subscriptions are kept until you unsubscribe.

Your rights

You may ask us to access, correct or delete the personal information we hold about you, withdraw consent to communications, or ask questions about this policy by writing to info@annai.ca. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

Security

All traffic to annai.ca is encrypted in transit (HTTPS). Donation data is protected by row-level security so that only you and authorized foundation administrators can see your records. Administrator access requires multi-factor authentication.

Changes

If we materially change this policy we will update this page and revise the "last updated" date above.