Privacy Policy

Decentra Innovation Lab Private Limited operates Ummiid with the aim of handling personal information responsibly, supporting account and campaign administration, and maintaining appropriate records.

This Privacy Policy explains the information Ummiid may process, how it may be used, when it may be shared and how records are retained.

1. About the Platform Operator

Legal Entity: Decentra Innovation Lab Private Limited

CIN: U62013DL2023PTC414076

GSTIN: 07AAKCD0202E1ZB

Registered Office: 55 Gali No. 2, Near Saket, Said-ul-Ajaib, New Delhi 110017, India

General Company Contact: [email protected]

Ummiid Support and Grievance Contact: [email protected]

2. Information We May Collect

Depending on the services used, Ummiid may process the following information.

Account Information

User ID or account identifier.
Name.
Address.
Account and security records required to administer the account.

Campaign Information

Campaign title, description, target and updates.
Organiser and beneficiary details relevant to the campaign.
Supporting documents submitted for campaign review.
Information needed to establish the organiser’s authority to act.

Donation and Financial Information

Donation amount and campaign reference.
Transaction reference and payment status.
Banking details required for eligible payout processing.
Payout, refund and reversal records.

Ummiid must not request UPI PINs, passwords, OTPs or CVVs through ordinary forms, email or support conversations.

Technical and Support Information

Where actually collected, information may include technical access logs, device or browser information, security events, support messages and complaint-related records.

The published policy must reflect the categories actually collected by the production application and its service providers.

3. How Information May Be Used

Personal information may be used, where necessary and lawful, to:

Create and administer accounts.
Publish and manage fundraising campaigns.
Review campaign and beneficiary information.
Process donations and eligible payouts.
Issue transaction confirmations and applicable receipts.
Prevent fraud and unauthorised activity.
Protect accounts and investigate security incidents.
Respond to complaints and support requests.
Maintain campaign, financial and operational records.
Meet applicable legal and payment-related obligations.
Maintain and improve the platform.
Send service communications and, where appropriately authorised, promotional communications.

Sensitive information should not be used for unrelated advertising or public promotion without an appropriate lawful basis and necessary permissions.

Ummiid handles personal information according to applicable law and the circumstances of the processing.

Where consent is required, it should be meaningful, appropriately recorded and linked to clearly explained purposes. Where applicable, users should have a practical way to withdraw consent.

Essential transaction processing should not be misleadingly combined with unrelated promotional consent.

5. When Information May Be Shared

Information may be shared where necessary and lawful with:

Payment and settlement service providers.
Banks and financial service providers involved in supported transactions.
Hosting, database, email, security and technical service providers.
Authorised campaign reviewers and relevant personnel.
Beneficiaries or campaign organisers where necessary for a relevant transaction or campaign.
Professional advisers and auditors where appropriate.
Regulators, law-enforcement authorities or courts where disclosure is legally required or otherwise lawful.

Information should be shared only to the extent necessary for the relevant purpose, with appropriate security and access controls.

Personal information must not be sold as a commercial data product. Any other data-sharing arrangement must be accurately described and comply with applicable law.

6. Public Campaign Information

Campaign titles, descriptions, images, updates and selected campaign information may be publicly visible when a campaign is published.

Campaign organisers should not publish unnecessary medical information, identity-document numbers, banking credentials or other sensitive personal data.

Appropriate permission and a lawful basis must exist before another person’s story, photograph or sensitive information is published.

Retaining a campaign record internally does not mean that the record must remain publicly visible.

7. Cookies and Similar Technologies

Ummiid may use essential technologies needed to operate the website, maintain sessions and protect accounts.

Optional analytics or marketing technologies, if used, must be disclosed according to the actual implementation and applicable law. Consent controls should be implemented where legally required.

8. Information Security

Ummiid should maintain appropriate technical and organisational safeguards, including access restrictions and secure handling of sensitive information.

Access to banking details, supporting documents and other sensitive records should be limited to authorised personnel and systems that need the information for legitimate operational purposes.

No internet-based service can promise absolute security. Users should protect their credentials and report suspected account compromise promptly.

Security certifications, independent audit claims and specific encryption claims must not be made unless supported by actual implementation and evidence.

9. Data Retention Policy

Ummiid follows the following record-keeping policy.

Campaign and Fundraising Records — Five Years

Campaign-related records are retained for five years to support fundraising history, transaction records, beneficiary accountability, complaint handling and appropriate record keeping.

These records may include campaign information, relevant organiser and beneficiary details, supporting documents, campaign updates, donation records, payout records and related complaints.

Campaign records retained for record-keeping purposes are not necessarily publicly accessible.

Where a particular record is subject to an applicable legal, accounting, dispute-resolution or investigation-related retention requirement, it may be retained for the additional period required or permitted by applicable law.

Account and Other User Records — Lifetime

Ummiid’s record-keeping policy is to retain other user and account records for the lifetime of the relevant user record. This supports continuity of account history, record keeping and the ability of users to return to the platform and access available records.

The information available to a user depends on the features supported by Ummiid and the status of the relevant account. Lifetime retention does not necessarily mean that every record will remain available through the user interface at all times.

Ummiid manages retained information according to its stated purposes and applicable privacy and data-protection requirements. Where a valid legal requirement or applicable privacy right requires information to be corrected, deleted, restricted or otherwise handled differently, the request or requirement will be addressed accordingly.

10. Access, Correction and Privacy Requests

Users may contact [email protected] or [email protected] to request access to available account records, seek correction of inaccurate information, request deletion where applicable or raise a privacy concern.

Requests will be reviewed according to applicable law and the platform’s operational procedures. Certain records may remain subject to applicable legal, accounting, security or dispute-related retention requirements.

11. Children and Vulnerable Persons

Campaigns involving children or people who may be unable to provide informed consent require particular care.

Where required, permission from an appropriate parent, guardian or authorised representative must be obtained. Unnecessary identifying, medical or location information should not be exposed publicly.

12. Storage and International Processing

Personal information is handled through the systems and service providers used to operate Ummiid. The platform should maintain appropriate access controls, security safeguards and retention procedures.

Any international processing or storage arrangements must comply with applicable law.

The published policy must reflect the actual production infrastructure and service-provider arrangements.

13. Changes to This Policy

Material changes will be reflected in an updated version of this Policy. Where required, users will be notified or asked to provide fresh consent.

The effective date should reflect the actual approved publication date.

14. Contact and Privacy Complaints

For privacy questions, access requests, correction requests or privacy concerns:

[email protected]

For Ummiid support and grievances: