1. Data Ownership
DigitalJamath is designed as a self-hosted or tenant-isolated system. You own your data. The Digital Ummah Foundation does not sell, trade, or access your community's sensitive data without explicit permission (e.g., for support).
2. Information We Collect
If you use our Cloud Managed service, we collect:
- Admin contact details (Name, Email) for billing and support
- Usage logs for system performance and security auditing
- Payment information processed securely through our payment provider
For self-hosted installations, we do not collect any data from your instance.
3. Sensitive Community Data
Data regarding Zakat eligibility, household income, and financial transactions is encrypted at rest. We strictly adhere to privacy standards to protect the dignity of Zakat recipients.
Key protections include:
- AES-256 encryption for data at rest
- TLS 1.3 for data in transit
- Role-based access control to limit data exposure
- Audit logging of all data access
4. Cookie Policy
We use essential cookies to maintain your login session. No third-party tracking cookies are used. We do not use analytics services that track individual users.
5. Data Retention
For Cloud Managed users:
- Your data is retained as long as your account is active
- Upon account deletion, data is permanently removed within 30 days
- Backups are retained for 30 days for disaster recovery
6. Your Rights
You have the right to:
- Export all your data in standard formats (CSV, JSON)
- Request deletion of your account and data
- Access logs of who has accessed your data
- Migrate to a self-hosted instance at any time
7. Third-Party Services
We use the following third-party services:
- Brevo (Sendinblue) - for transactional emails
- AWS/DigitalOcean - for secure cloud hosting
We do not share your data with any advertising or marketing services.
8. Contact
For privacy-related inquiries, please contact us at [email protected].