1. Who this policy applies to
Every authenticated user of Sukrit Nidhi. This includes staff, volunteers, accountants, auditors, and platform operators. Signing in creates an agreement with Vihangam Yog (“the NGO”) and with the operators of Sukrit Nidhi (“the Platform”) that you will abide by this policy.
2. Appropriate use
Use Sukrit Nidhi only to:
- Record, review, or audit donations and expenses for the centres you are authorised to access.
- Generate statements, reports, and audit bundles relevant to your role.
- Manage the users and settings of centres you administer, within the limits of your role.
3. What is not allowed
- Do not share your credentials. Your email, password, and MFA secret are yours alone. If a colleague needs access, have them invited as a separate user.
- Do not use another user’s session or attempt to enter a centre for which you do not hold a role.
- Do not export, copy, or redistribute donor personal data beyond what is strictly necessary for statutory filings. Any such export is audit-logged under your name.
- Do not attempt to circumvent period locks, approval workflows, segregation-of-duties guards, or the audit log. Every bypass attempt is detectable and investigated.
- Do not modify the database directly. All legitimate operations are available through the application. Direct database edits break the audit chain and will be caught by the daily integrity check.
4. Your obligations
- Keep your password confidential and change it if you suspect it has been seen by anyone else.
- Enrol MFA on first sign-in and keep your authenticator device secure. Store recovery codes somewhere separate from the authenticator.
- Sign out when you leave a shared device.
- Report anything that looks wrong — unexpected logins, audit-log rows you don’t recognise, sudden changes to roles — to your Platform Admin.
5. What the platform does with your data
- Authentication material (email, password hash, MFA secret, recovery codes) is stored only in the plane that owns your identity: the Control Plane for Platform Admins, the tenant’s own database for tenant users.
- Passwords are hashed with Argon2id; they are never stored in plain text and never written to the audit log.
- Every create, edit, and void is written to an append-only, SHA-256 hash-chained audit log. This log is the platform’s authoritative record.
- Tenant financial data never leaves its tenant’s database. Head-office rollups read aggregate totals only.
6. Segregation of duties
Sukrit Nidhi enforces segregation-of-duties rules in code, not by policy alone. For example:
- A user who submits an expense cannot also approve it.
- The approver cannot be the payee.
- Voiding a posted transaction requires step-up re-authentication.
- Locking or unlocking a period requires step-up and an explicit reason.
These rules cannot be disabled by any user, including Platform Admins.
7. Audit & monitoring
Every sign-in, failed sign-in, role change, and data mutation is recorded. Administrators review the audit log regularly. You have no reasonable expectation of privacy for actions performed inside Sukrit Nidhi.
8. Consequences of violation
Violating this policy may result in suspension of your account, revocation of your tenant roles, and reporting to appropriate authorities where conduct involves fraud, misappropriation, or criminal activity.
9. Changes to this policy
This policy can be updated; material changes will be announced on the Platform dashboard at least one week before taking effect. Continued use of Sukrit Nidhi after an update constitutes acceptance of the new policy.
10. Questions
Please direct questions to your Platform Admin, or write to
support@nidhi.example.org
if you are unsure who your Platform Admin is.
Last updated: April 2026.