Privacy
Last updated 30 August 2026
You are about to tell us your name, your phone number, and possibly show us a photograph of your ID. This page says exactly what happens to all of it — in plain words, and only things that are true today.
The short version
- We never sell your data. There is no advertising on WomSakhi and no advertiser is given anything.
- Your ID document is encrypted and can only be opened by the small review team. It is never shown to other members, employers or buyers.
- Your phone number is not shown to anyone else unless you put it somewhere public yourself.
- Joining is free. We do not charge you to find work, and we never will.
- You can ask us to delete everything, and we will.
Who we are
WomSakhi is operated by PRAKMAS GLOBAL. For anything on this page, write to privacy@womsakhi.in.
What we collect, and why
| What | Why |
|---|---|
| Your name and email | To make your account and to write to you about it. Required. |
| Your password | Stored only as a bcrypt hash. Nobody at WomSakhi — including us — can read it or recover it. If you forget it we can only help you set a new one. |
| Your phone number | Optional. Used to reach you about your own work. Never shown to other members. |
| One photo ID | To check that WomSakhi stays a space for women. See the section below — this one has its own rules. |
| What you do here | Courses you enrol in, jobs you apply for, savings circles you join, things you list for sale. This is your record; it is what the app shows back to you. |
| Money | Amounts, orders and wallet entries. We never see or store your card or UPI details — those go straight to the payment provider. |
| Safety information | Trusted contacts you choose, and any safety report you make. Only the safety team can read a report. |
| Messages to Sakhi | The AI assistant. See “When you talk to Sakhi” below. |
Your ID document
This is the most sensitive thing you will give us, and it is treated differently from everything else.
- It is encrypted on our servers using AES-256-GCM. Somebody who obtained the raw files — a stolen backup, a copied disk — would get unreadable bytes, not a picture of your ID.
- It is never served publicly. There is no address that shows it to the internet, and it is never included in your profile.
- Only the review team can open it, and every single opening is recorded — who looked, and when.
- It is never shown to other members, to employers, or to buyers.
- If your application is rejected, or you close your account, the document is deleted.
Who else your data reaches
Only these, and only for the job named. None of them is given your data to use for their own purposes.
| Company | What they get |
|---|---|
| MongoDB Atlas | Hosts the database. Everything above lives there. |
| Razorpay | Takes payments. Your card or UPI details go to them and never to us. They tell us only whether a payment succeeded. |
| Anthropic | Runs the AI behind Sakhi. Your message is sent so it can be answered. |
| Microsoft Azure | Turns Sakhi’s reply into speech, if you use the voice. |
| Langfuse | Records Sakhi conversations so we can find and fix bad answers. Their servers are in the United States, so this data leaves India. |
| Our email provider | Delivers account email. They get your address and the message. |
Your ID document is never sent to any of them. It stays on our own servers.
When you talk to Sakhi
Sakhi is an AI assistant. What you type is sent to Anthropic to be answered, and a copy of the conversation is kept so we can improve the answers and so you can read it back later.
Sakhi is not a doctor, a lawyer or a counsellor, and it can be wrong. For anything that matters — your health, your rights, your safety — use the real helplines the app lists rather than relying on Sakhi alone.
How long we keep things
- Your account and your records — for as long as your account is open.
- Your ID document — until your account closes or your application is rejected.
- Money records — kept after closure where Indian tax and accounting law requires it.
- Sign-in sessions — 30 minutes of inactivity, then they expire.
- Password reset links — 24 hours, and single use.
Your rights
Under India’s Digital Personal Data Protection Act, 2023 you can ask us to show you what we hold, correct it, or delete it. Write to privacy@womsakhi.in and we will answer within 30 days.
How closing your account actually works. There is a button — Settings, then Password and sign-in, then Close your account. Pressing it suspends your access straight away and asks our team to erase your data, which we complete within 30 days. It is not instant, and we would rather say so than imply otherwise: some records have to be kept for a period under Indian tax and accounting law, and a person checks that before the rest is deleted. You will get an email when it is done. If you would rather not use the button, write to privacy@womsakhi.in and we will do the same thing.
How we protect it
- Passwords are hashed with bcrypt. They are never stored in a readable form.
- ID documents are encrypted at rest with AES-256-GCM.
- Sign-in sessions use a cookie JavaScript cannot read, sent only over HTTPS.
- Five wrong passwords locks sign-in for 15 minutes, so nobody can guess their way in.
- Staff only see what their role allows, and views of an ID document are logged.
No system is perfect. If we ever discover a breach affecting you, we will tell you and the Data Protection Board, as the law requires.
Children
WomSakhi is for adults. You must be 18 or older to join. If we learn an account belongs to a child, we close it and delete the data.
Changes
If we change this page in a way that matters, we will email you before it takes effect — not quietly update the date.
Draft — not yet reviewed by a lawyer
Every statement here describes what the WomSakhi software actually does today, checked against the source. It has not been reviewed by a legal professional and should be before WomSakhi takes real money or opens to the public.