Privacy Policy

1. Who we are and what this policy covers

Shifu Foundation operates shifufoundation.org and related tools for our entrepreneurship programs, including Hometown Talks and its poster studio. This policy explains how we collect, use, share and retain personal information when you visit our website, contact us, submit information or use these tools.

2. Information we collect

Information you provide may include your name, email address, phone number, city or district, professional background, LinkedIn profile URL, application details, messages and uploaded files. For Hometown Talks posters, this includes a speaker’s name, headshot, approved credential, district and the text used in the poster. Only submit another person’s information or photograph if you have their permission.

Our website and service providers may collect technical information such as IP address, browser and device information, pages visited, interactions, timestamps and error logs. Donation transactions are handled through our payment provider; payment information is subject to that provider’s privacy practices.

3. Sign in with LinkedIn

Where available, connecting LinkedIn is optional. With your authorization, our LinkedIn integration requests OpenID Connect identity and basic profile access to obtain the signed-in member’s name, profile photograph and identifier for authentication. The current photo-import flow does not request email access. It does not access your messages, connections or posts, or post to LinkedIn on your behalf. Signing in returns your own profile information, rather than another person’s photo from a profile URL.

The poster studio temporarily holds the imported name and photo reference to let you review and use them. When you approve poster generation, the selected photo and speaker details are processed to create the poster. You can upload a headshot instead of connecting LinkedIn. We do not receive your LinkedIn password.

You can revoke this application’s access in your LinkedIn account settings. Revoking access prevents future authorized access; it does not automatically delete information or posters already provided to us. To request deletion of those materials, contact us using the details below.

4. How we use information

We use information to operate our website and programs, respond to inquiries, process applications and registrations, communicate about requested services, coordinate events and donations, create and review speaker posters, and maintain security and reliability. We use information with your consent where required, to provide services you request, and as otherwise permitted by applicable law.

Speaker photos, names and approved credentials included in campaign materials may be made public when those materials are published or shared for the agreed event or campaign. Connecting LinkedIn alone does not publish a poster. Please review the photo and text before approving their use.

5. AI services and other providers

When you request AI-assisted poster creation, the selected headshot, speaker name, credential, location, approved text and design references are sent through OpenRouter to the selected AI model provider, which may be OpenAI. Location information may also be sent to a text model to suggest Hindi and local-language spellings. These providers process submitted information under their own terms and privacy policies. Do not include sensitive personal information that is unnecessary for the poster.

We also use providers for website hosting, databases, file storage, email, payments, analytics and performance monitoring. Our website uses Vercel Analytics, Vercel Speed Insights and Contentsquare for usage and performance insights. Providers may process information outside your country. Authorized team members and service providers access information as needed for their work.

We do not sell personal information. We may share information when necessary to comply with legal obligations, protect people or our services, or with your authorization. Public campaign materials can be viewed, downloaded and reshared by others.

6. Cookies and similar technologies

We use cookies and similar technologies for sign-in, session management, security and, where enabled, usage analytics. LinkedIn sign-in uses temporary cookies to validate the authorization flow and hold imported profile information. You can manage cookies through your browser settings, although blocking essential cookies may prevent sign-in or other features from working.

7. Retention and security

We retain information for as long as needed for the purpose for which it was collected, including program administration, approved campaign use, support, security and legal obligations. Temporary sign-in information expires separately from saved program records or exported posters. AI and infrastructure providers may retain their own records under their applicable policies.

We use access controls and other reasonable safeguards to protect information. No internet service can guarantee absolute security. If information is deleted, limited copies may remain in backups until they are overwritten, or where retention is legally required. We may be unable to remove copies of public materials held or reshared by others.

8. Your choices and privacy requests

You can choose whether to connect LinkedIn, provide a headshot or submit optional information. You may request access to, correction of or deletion of information we hold about you, withdraw consent, or raise a privacy concern by emailing contact@shifufoundation.org. Please identify the relevant service or poster and the information involved; do not send passwords or identity documents unless we specifically request an appropriate verification method.

We may need to verify your identity or authority to make a request. We will respond in accordance with applicable law and explain any legal or operational limits. You can also ask us to stop future use of your photograph or remove campaign materials from channels we control. Withdrawal does not affect processing that already took place lawfully.

9. Children and external services

The LinkedIn integration and poster studio are intended for adults and authorized organizers. Please do not submit a child’s photograph or information through these tools. If you believe a child’s information has been submitted without appropriate authorization, contact us. Other programs may have their own eligibility and consent requirements.

Our website may link to external services, including LinkedIn. Their handling of information is governed by their own policies. This policy describes Shifu Foundation’s practices.

10. Updates and contact

We may update this policy as our services or privacy practices change. The date above identifies the latest revision. Where required, we will provide additional notice or request consent for material changes.