Privacy Policy

At AidOS, your privacy is of utmost importance. This Privacy Policy explains the types of data we collect, how we use it, and how we ensure its security. By using AidOS services, you consent to the collection and processing of your personal data as described below.

Effective Date: Nov 10, 2025

1. Data Collection

AidOS collects personal and organizational data to provide its services, which include:

Personal Information

  • For account creation: First Name, Last Name, Email, Password, Profile Photo.
  • For organizational accounts: Logo, Organization Name, Country of Operation, Website URL, About the Organization, and Organization Type.

Funds Information

  • Self-fund and Bank transaction details (e.g., sender, bank, amount, receipt).
  • Donor fund details (e.g., donor name, amount, receipt).

Omid ID

  • Basic Information: First Name, Last Name, Phone, Wishlist, etc.
  • Household Information (optional): Income source, address, family details.
  • Biometric Information (optional): Tazkira, Passport Number, photo, etc.
  • Family Member Data (optional): Name, relation, date of birth, occupation.

Campaign+

  • Campaign details: Title, Description, Photo.
  • Payment account information via Stripe.
  • Donor details: Name, Email, Phone, Donation Amount, Payment Method, etc.

2. Data Usage

The collected data is used for the following purposes:

  • To create and manage user accounts.
  • To process payments and donations.
  • To analyze campaign performance and improve services.
  • Meeting compliance and security obligations.

AidOS does not sell, rent, or lease personal data to any third parties.

3. Data Sharing

We may share your data under the following circumstances:

  • With third-party service providers who help us operate and provide services, including payment processors (e.g., Stripe) and cloud storage services.
  • To comply with legal obligations, such as tax and regulatory requirements.
  • With our partners for the purposes of aid distribution or collaborative campaigns, ensuring that data is anonymized when possible.

AidOS requires all third-party processors and partners to maintain confidentiality, integrity, and data protection standards consistent with this Privacy Policy.

4. Cookies and Tracking

AidOS uses cookies for session authentication purposes only. We do not use cookies for tracking or marketing.

You can control or delete cookies through your browser settings; however, disabling them may affect the functionality of some platform features.

5. Data Retention

Data is retained as necessary for business purposes:

  • Personal information is kept as long as you have an active account or until you request its deletion.
  • Financial data and transaction records are retained for compliance and auditing purposes, as required by applicable laws.
  • Backups and Logs: Securely retained for a limited time for disaster recovery and system integrity.

Upon account deletion or request, AidOS anonymizes or securely erases personal data unless retention is required by applicable law.

6. User Rights

You have the following rights under GDPR:

  • Access: Request a copy of your personal data.
  • Rectification: Correct any inaccuracies in your personal data.
  • Erasure: Request the deletion of your personal data when it is no longer needed.
  • Restriction: Limit the processing of your data in specific situations.
  • Portability: Request the transfer of your data to another service provider.
  • Objection: Object to the processing of your data based on legitimate interests.

7. Security

We employ a range of technical and organizational measures to protect your personal data:

  • Data is encrypted in transit using SSL/TLS protocols and at rest using AES-256 encryption to ensure confidentiality and integrity.
  • Access to sensitive data is restricted to authorized personnel only, with role-based access controls.
  • We conduct regular security audits and vulnerability scans to ensure the safety of your data.
  • We have a defined breach response process to address and notify affected users promptly in the event of a data breach.

8. International Transfers

Your personal data may be transferred and stored outside the European Economic Area (EEA), including in the United States. We ensure that all international transfers comply with GDPR requirements, using Standard Contractual Clauses (SCCs) or other legal safeguards.

9. User Consent

By using AidOS services, you consent to the collection, processing, and transfer of your data as outlined in this Privacy Policy. You may withdraw your consent at any time by contacting us directly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be communicated through our platform or via email. Please review this policy regularly to stay informed about how we protect your data.

Contact Information

For questions, concerns, or privacy-related requests, please contact: support@aidos.com