Legal
Privacy Policy
Last updated: 5 August 2026
This Policy explains how Umap General FZCO (“Umap”, “we”, “us”) collects and uses personal data in connection with the Proof of Presence (PoP) developer portal, early-access forms, partner and subject accounts, and related APIs.
1. Who we are
Umap General FZCO, IFZA Business Park, DDP, 001 – 27923, Dubai, United Arab Emirates. For daGama consumer products, see also the confidentiality policy at dagama.world.
2. Data we collect
Depending on how you use PoP services, we may process:
- Early access / marketing leads: name, email, company, role, use case, free-text description, source IP, and submission timestamps.
- Partner accounts: registration identifiers, authentication artifacts, publisher and campaign configuration, API key metadata (not raw secrets after issuance where hashed), and billing/vault operational records you create.
- Subject accounts: account identifiers, email verification state, passkey credential metadata, session metadata, wallet binding references, and attestation/claim references you initiate.
- Technical logs: request paths, approximate IP, user-agent, error traces, and rate-limit counters needed for security and reliability.
- On-chain identifiers: public wallet and contract addresses you connect or configure. Public blockchain data is inherently public; we do not control third-party indexers.
We do not intentionally collect special-category data through the portal forms. Please do not submit sensitive personal information in free-text fields.
3. Purposes and legal bases
We use personal data to:
- operate and secure the portal and APIs (contract / legitimate interests);
- respond to early-access and support requests (consent / legitimate interests);
- authenticate partners and subjects and prevent abuse (contract / legitimate interests);
- improve reliability, debug incidents, and measure feature usage in aggregate (legitimate interests);
- comply with legal obligations and enforce our Terms of Use.
4. Presence and location
PoP is designed so that presence proofs can be verified without unnecessary disclosure of raw trajectories. Where a flow requires device signals or evidence packages, processing is limited to what the protocol and your chosen integration need. Raw coordinates, if ever processed by a component you operate, remain under your responsibility unless a written agreement states otherwise.
5. Sharing
We do not sell personal data. We may share data with:
- infrastructure and email providers acting under confidentiality obligations;
- affiliates assisting in operating PoP / daGama;
- authorities when required by law;
- professional advisors under privilege or confidentiality.
Public blockchain transactions and attestations you publish are visible to anyone with network access.
6. International transfers
Data may be processed in the UAE and other countries where our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.
7. Retention
Lead records are kept while evaluating access and for a reasonable follow-up period. Account and security logs are retained as needed for operations, fraud prevention, and legal requirements. Pilot environments may purge demo data without notice. You may request deletion of account-linked data subject to legal retention and on-chain immutability limits.
8. Security
We apply technical and organizational measures appropriate to a pre-production / pilot service, including access controls, transport encryption, and credential hashing where applicable. No method of transmission or storage is completely secure.
9. Your choices
Depending on applicable law, you may request access, correction, deletion, or restriction of personal data we hold about you, or object to certain processing. Contact privacy@dagama.world. You may also stop submitting forms or close partner/subject sessions. Passkeys and wallets remain under your device control.
10. Children
The portal is directed at professionals and is not intended for children under 16. We do not knowingly collect their data.
11. Changes
We may update this Policy by posting a revised version with a new “Last updated” date. Material changes will be highlighted on this page where practical.
12. Contact
Privacy inquiries: privacy@dagama.world · legal: legal@dagama.world · web: dagama.world.