Privacy Policy

1. Introduction

TransformatiQs Consulting Private Limited ("we", "us", "Company") operates UMM360 at umm360.in. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data. By using our Service, you agree to the practices described in this Policy.

2. Data We Collect

Account data: Name, email address, phone number, and business/brand name provided during registration.

Business profile data: Industry, organisation type, team size, revenue range, growth ambition, and other parameters you provide in your business profile.

Assessment data: Your answers to assessment questions and the resulting scores, maturity labels, and reports.

Payment data: Transaction identifiers processed via Razorpay. We do not store card numbers or banking credentials — these are handled entirely by Razorpay.

Usage data: IP address, browser type, pages visited, and time spent on the platform, collected automatically via server logs.

3. How We Use Your Data

We use your data to:

• Create and manage your account
• Generate personalised assessment questions and reports
• Send OTP verification codes and transactional emails
• Deliver your assessment report to your registered email
• Process and verify payments
• Improve the platform, fix bugs, and enhance assessment accuracy
• Respond to your queries and support requests

We do not use your data for advertising, profiling for third-party marketing, or any purpose not listed above.

4. Data Sharing

We do not sell your personal data. We share data only with the following service providers who process it on our behalf:

• Anthropic (Claude API) — to generate AI-powered assessment questions and reports
• Brevo — to send transactional emails including OTP codes and assessment reports
• Razorpay — to process payments securely
• Render — cloud hosting provider where the platform runs

All third-party providers are contractually required to protect your data and use it only for the services they provide to us.

5. Data Retention

We retain your account and assessment data for as long as your account is active. Assessment reports are stored indefinitely so you can access them at any time using your result code. You may request deletion of your data at any time by emailing connect@umm360.in.

6. Data Security

We take appropriate technical and organisational measures to protect your data, including encrypted database storage, HTTPS-only communication, httpOnly session cookies, and no plain-text password storage. Authentication is handled via time-limited OTPs only. However, no system is 100% secure, and we cannot guarantee absolute security.

7. Cookies

We use a single session cookie to maintain your login state. This cookie is httpOnly, secure, and contains only a signed JWT session token — no personal data. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for data processing (note: this will prevent use of the Service)

To exercise any of these rights, email us at connect@umm360.in. We will respond within 30 days.

9. Children's Privacy

UMM360 is intended for use by business owners and professionals. We do not knowingly collect data from individuals under 18 years of age. If you believe a minor has registered, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the Service after updates constitutes acceptance of the revised Policy.

11. Contact

For privacy-related queries, contact: connect@umm360.in

TransformatiQs Consulting Private Limited, Bengaluru, Karnataka, India.