Privacy Policy (Pakistan)

Effective: 3 September 2026.

1. Data controller

The controller of your personal data is Social Business Global (International Social Benefit Association) (İstanbul, Türkiye). Contact for data matters: in-app support channels and the e-mail address on the hangel.org contact page.

2. Legal framework — plain statement

As of the effective date, Pakistan has no comprehensive personal data protection statute in force; a Personal Data Protection Bill has been under consideration (status to be verified periodically). Relevant scattered provisions exist in the Prevention of Electronic Crimes Act 2016 (PECA) and the Electronic Transactions Ordinance 2002, and the Constitution of Pakistan recognises the dignity and privacy of the person (Article 14). hangel therefore applies its highest global standard as a contractual commitment to its users in Pakistan: the principles of the Turkish data-protection law (KVKK) and the European General Data Protection Regulation (GDPR) — transparency, purpose limitation, data minimisation and security — regardless of the absence of an equivalent local statute.

3. What we process

• Account data: name, e-mail, phone number, country, language.
• Usage data: organisations you selected, affiliate-link clicks (click identifier), internal impact statistics.
• Technical data: device type, approximate IP-based location, security logs.
• Blood-donor data (only with separate explicit consent): blood group, city, availability. Sensitive; processed solely for informational matching and never shared for commercial purposes.

4. Purposes and bases

We process data: to provide the service (performance of contract); with your consent (blood-donor matching, marketing messages), withdrawable at any time; to comply with legal obligations; and in our legitimate interest in platform security.

5. Sharing and transfers

• Infrastructure providers (hosting, analytics) — including Google Firebase; data may be stored on servers in the European Union and other jurisdictions.
• Affiliate networks — technical click identifiers only, never your name.
• Organisations — aggregated indicators only; your contact details are not shared without your own action.
• Public authorities — only upon a valid legal demand.

6. Retention

Account data is kept while your account exists and deleted or anonymised after deletion, unless a longer statutory period applies. Blood-donor data is deleted immediately upon withdrawal of consent.

7. Your rights

As a contractual commitment we grant you: information about processing, access, rectification, erasure, withdrawal of consent, and objection — via the support channels. Where unresolved, you may pursue remedies before the competent courts.

8. Language and precedence

The binding version of this document is Turkish; this English version is provided as a service to our users in Pakistan.

9. Google user data

If you are an organisation administrator and connect a Google account to hangel, hangel uses the Google Meet and Google Drive permissions only to create meeting spaces for your online events, to read the attendance records of those spaces for attendance and participation certificates, and to store recordings made in hangel's own meeting room. Data received from Google APIs is not sold, not used for advertising and not used to train artificial intelligence models. Details: Privacy Policy — Google user data.

If you sign in with Google, hangel receives only your Google account identifier, verified e-mail address and name; if you connect Google Calendar, hangel writes the events you registered for only to a separate “hangel” calendar it creates in your account and does not access your other calendars.

In addition, any user may connect their own Google Drive with the drive.file permission only: hangel then fetches only the file you choose in the Google Picker into the action you started (it is not stored permanently) and, at your request, creates or updates in your own Drive a Google Doc or Sheet of content you can already see and download in the panel (project application, meeting notes, participant and attendance lists, etc.). If you pass a chosen file to an AI-powered action, its text is processed only for that request and is not used to train any model.

hangel's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

YouTube: if an organisation administrator connects their own YouTube channel, hangel uses the youtube.force-ssl permission only to create, start and end live broadcasts on that channel for Oda events; the stream key is kept only on the server. This feature uses YouTube API Services; by using it you agree to the YouTube Terms of Service. How Google processes data: Google Privacy Policy.

You can withdraw access with the disconnect button in the hangel panel or at https://myaccount.google.com/permissions.