Privacy policy

About this policy

Sanskriti of NJ (“we,” “our”) operates this expense management system solely for internal use by our volunteers and committee members. This policy explains what information we collect, how we use it, and your rights.

Information we collect

• Account information — name and email address from your Google account when you sign in
• Expense data — amounts, dates, categories, descriptions, and notes you enter when submitting reimbursement requests
• Receipt images — photos or scans you upload to support your claims
• Payment information — Zelle number or mailing address you provide to receive reimbursements
• Approval activity — decisions, comments, and timestamps recorded during the review process

How we use your information

• Processing and approving expense reimbursement requests
• Sending email and push notifications about your submissions
• Generating financial reports for committee leads and the treasurer
• Maintaining an audit trail of organizational spending

We do not sell, rent, or share your personal information with third parties outside of Sanskriti of NJ except as necessary to operate this system (Supabase for data storage, Resend for email delivery, Google for authentication).

Data storage and security

All data is stored on Supabase, a SOC 2 Type II certified platform. Receipt images are stored in a private storage bucket and only accessible via temporary signed URLs. Access to data is controlled by role-based permissions — volunteers can only see their own submissions.

Data retention

Expense records and receipts are retained for a minimum of seven years to satisfy nonprofit financial record-keeping requirements. Account information is retained while you are an active member of Sanskriti of NJ.

Your rights

You may request access to, correction of, or deletion of your personal data by contacting us at the address below. Deletion requests for financial records may be subject to retention obligations.

Contact

Questions about this policy? info@sanskritiofnj.org