This Privacy Policy explains how In Your Hand, Inc. (“In Your Hand,” “we,” “our,” or “us”) collects, uses, stores, discloses, and protects personal information when Users:

• Create an account
• Donate
• Open or operate a project
• Upload media or documents
• Use any feature of the platform
• Interact with communications or reporting tools

By using the platform, you agree to this Privacy Policy.

In Your Hand processes data in compliance with:

• ✔GDPR (EU General Data Protection Regulation)
• ✔CCPA/CPRA (California Consumer Privacy Act / Privacy Rights Act)
• ✔Children’s privacy laws (COPPA)
• ✔NY State Privacy & Cybersecurity rules
• ✔U.S. nonprofit data handling regulations
• ✔AML/CFT & KYC/KYB obligations under U.S. federal law
• ✔International data transfer standards

If any local laws provide stronger rights, In Your Hand will honor them.

We collect different levels of data depending on the user category.

To comply with U.S. law, In Your Hand must process:

• Identity documents
• Sanctions screening results
• Watchlist data (OFAC, UN, EU, UK)
• Risk scoring
• Fraud detection signals
• Criminal history indicators (where legally permissible)

We process personal data to:

• ✔Provide platform services
• ✔Verify identity & prevent fraud
• ✔Conduct AML/CFT & sanctions screening
• ✔Process donations and issue receipts
• ✔Manage fundraising projects
• ✔Communicate with users
• ✔Ensure transparency and donor protection
• ✔Improve the platform experience
• ✔Conduct audits and legal compliance reviews

We will not use your data for:

• ❌Selling to third parties
• ❌Behavioral advertising
• ❌Profiling unrelated to safety or fraud prevention

We rely on these lawful bases:

We share data only when necessary and only with:

As a global nonprofit platform, In Your Hand may process and store data:

• In the United States
• In the European Union
• In other jurisdictions where our secure cloud hosts operate

We ensure compliance through:

• ✔Standard Contractual Clauses (SCCs)
• ✔GDPR Article 46 appropriate safeguards
• ✔Data minimization
• ✔Encryption at transit and rest

Users in the EU acknowledge that their data may be transferred to the United States under these legal safeguards.

In Your Hand retains personal data based on legal, regulatory, and operational requirements.

Depending on your jurisdiction, you may have some or all of the following rights:

In Your Hand uses cookies to:

• Secure accounts
• Maintain login sessions
• Detect fraud
• Analyze platform usage
• Measure ad-attributed donation conversions after consent where required
• Improve performance
• Display regionally relevant content

We use:

• ✔Essential cookies (required for platform operation)
• ✔Security cookies (anti-fraud, authentication)
• ✔Analytics cookies (Google Analytics or equivalent)
• ✔Advertising measurement cookies (Google Ads conversion tracking)

We do NOT use:

• ❌personalized advertising or remarketing cookies
• ❌behavioral targeting
• ❌third-party data brokers

Users may disable non-essential cookies via browser settings.

The platform is not intended for users under 18. We do not knowingly collect data from minors.

Project Owners must obtain documented parental or guardian consent for:

• Any media involving children
• Stories or updates referencing identifiable minors

Violations result in:

• Immediate removal of content
• Potential account termination
• Safeguarding investigation

In Your Hand protects data through:

• ✔End-to-end encryption
• ✔SSL/TLS for all connections
• ✔Encrypted storage (AES-256)
• ✔Role-based access control
• ✔Two-factor authentication (for internal systems)
• ✔Intrusion detection and prevention systems
• ✔Regular penetration testing
• ✔Routine security audits

Despite strong protections, no system is 100% secure. Users are responsible for safeguarding their passwords and devices.

If a breach affects personal data:

1. Incident will be investigated immediately.
2. Affected users will be notified within the legally required period (GDPR: 72 hours).
3. Authorities will be notified when required.
4. Mitigation measures and corrective actions will be implemented.

We may use algorithmic tools for:

• Fraud detection
• Sanctions monitoring
• Identity authentication
• High-risk activity alerts

We do not use algorithms to make:

• ❌donation decisions
• ❌beneficiary decisions
• ❌eligibility judgments without human oversight

In Your Hand may update this policy as needed.

Changes are effective upon posting. Continued use of the platform constitutes acceptance of updated terms.

For privacy-related questions, data access requests, or deletion requests:

Users in the EU may also file a complaint with their local Data Protection Authority.