PRIVACY POLICY

1. Introduction

This Privacy Policy explains how information is collected, used, stored, processed, shared, and protected when you use the Asomi Incubation mobile application (“App”) and related services.

Asomi Incubation is an application platform implemented by NEATEHUB (An AIC-AAU Incubator) and supported by the Assam State Rural Livelihoods Mission (ASRLM). The platform enables eligible enterprises and women entrepreneurs to register, create profiles, provide personal and enterprise information, upload documents, submit applications for the Asomi Incubation Programme, and receive application-related updates.

For the purpose of this Privacy Policy, “we”, “us”, and “our” refer to NEATEHUB [Foundation of AIC-AAU Incubator], which manages and operates the App.

By accessing, registering on, or using the App, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

Depending on the information required for registration and application under the Asomi Incubation Programme, we may collect the following categories of information:

A. Account and Contact Information

We may collect:

• Full name;
• Mobile phone number;
• One-Time Password (OTP) authentication information;
• Email address, if provided;
• Residential, correspondence, or business address;
• District, state, and other location information provided by the applicant; and
• Other contact information voluntarily provided by the user.

B. Personal and Applicant Information

We may collect information required to determine programme eligibility and evaluate applications, including:

• Age or date of birth;
• Gender;
• Educational qualifications;
• Employment or occupational details;
• Social or economic category information, where required under applicable programme guidelines;
• Applicant background and experience; and
• Other information provided as part of the application process.

We will collect only such information as is reasonably required for the administration, eligibility assessment, selection, monitoring, and implementation of the programme.

C. Enterprise and Business Information

We will collect:

• Name of the enterprise, startup, business, or proposed venture;
• Nature and description of the business;
• Sector or industry;
• Business location;
• Stage of the enterprise;
• Date or year of establishment;
• Registration and incorporation details;
• Products and services;
• Revenue, turnover, sales, employment, and other business information;
• Funding and financial information;
• Business plans, challenges, support requirements, and growth plans; and
• Other information submitted in the application form.

D. Documents and Supporting Information

Users may be required to upload documents in support of their application. Depending on programme requirements, these may include:

• Identity or eligibility documents;
• Enterprise registration documents;
• Business licences or certificates;
• Photographs;
• Financial or business records;
• Presentations, business plans, or supporting documents; and
• Other documents specifically requested as part of the application process.

The exact documents collected will depend on the requirements of the Asomi Incubation Programme.

E. Technical and Usage Information

When you use the App, certain technical information may be collected automatically, such as:

• Device type and operating system;
• App version;
• IP address;
• Login and authentication activity;
• Date and time of access;
• App interactions and usage information;
• Crash logs, diagnostics, and performance information; and
• Other technical information necessary for the security and functioning of the App.

Any technical data collected through third-party services, analytics tools, cloud infrastructure, authentication providers, or software development kits will be handled in accordance with this Privacy Policy and applicable requirements.

3. How We Use Your Information

We may use the information collected through the App to:

• Create and manage user accounts;
• Authenticate users through OTP;
• Enable users to complete and submit applications;
• Verify applicant and enterprise information;
• Assess eligibility under the Asomi Incubation Programme;
• Review, evaluate, shortlist, and select applicants;
• Contact applicants regarding their applications;
• Provide application status updates and programme-related communications;
• Deliver incubation, mentoring, capacity-building, business development, and related support;
• Maintain programme records and documentation;
• Monitor and evaluate programme outcomes;
• Prepare internal reports, programme reports, and aggregated statistics;
• Prevent misuse, fraud, unauthorised access, and security incidents;
• Improve the functionality, reliability, and user experience of the App;
• Comply with legal, regulatory, contractual, audit, and programme requirements; and
• Perform other activities directly related to the administration and implementation of the programme.

We will not use personal information for purposes unrelated to the App or the programme without appropriate notice or consent, where required.

4. OTP Authentication

The App uses mobile number-based OTP authentication to register and verify users.

Your mobile number may be processed through an authorised authentication, messaging, or SMS service provider solely for purposes such as:

• Sending OTPs;
• Verifying your mobile number;
• Securing access to your account; and
• Sending essential service or programme-related communications.

Users should never share their OTP with any person. NEATEHUB, ASRLM, and authorised programme personnel will not ask users to disclose their OTP.

5. How We Share Information

We do not sell or rent users’ personal information.

Information may be shared only where reasonably necessary with:

• NEATEHUB and its authorised employees, consultants, evaluators, mentors, programme personnel, and service providers;
• ASRLM and its authorised officials or programme personnel, where required for programme implementation, evaluation, monitoring, reporting, or support;
• Assam Agricultural University and other authorised institutional stakeholders, where applicable;
• Selection committees, evaluation panels, subject experts, mentors, or partner institutions involved in reviewing applications or providing programme support;
• Technology, cloud hosting, OTP, communication, storage, analytics, and security service providers engaged to operate the App;
• Government departments, funding agencies, auditors, regulators, or competent authorities where required under programme guidelines or applicable law; and
• Law enforcement agencies or other authorities where disclosure is legally required.

Only information reasonably necessary for the relevant purpose will be shared.

Where application information is used for public communication, case studies, promotional materials, or success stories, separate consent will be obtained where appropriate, particularly for the publication of personal photographs, testimonials, or sensitive personal information.

6. Data Storage and Security

We take reasonable administrative, technical, and organisational measures to protect information against:

• Unauthorised access;
• Unauthorised disclosure;
• Loss or misuse;
• Alteration;
• Accidental destruction; and
• Other security risks.

These measures may include controlled access, authentication mechanisms, secure hosting, access restrictions, backups, and other appropriate safeguards.

However, no electronic transmission or storage system can be guaranteed to be completely secure. Users are responsible for maintaining the security of their devices and for not sharing OTPs or account access with others.

7. Data Retention

We retain personal and application information only for as long as reasonably necessary for:

• Processing and evaluating applications;
• Implementing and administering the programme;
• Providing incubation and related support;
• Monitoring programme outcomes;
• Meeting reporting, audit, funding, legal, and regulatory requirements;
• Resolving disputes and complaints; and
• Maintaining legitimate programme records.

When information is no longer required for these purposes, it will be deleted, anonymised, or securely disposed of in accordance with applicable requirements and organisational practices.

Certain records may need to be retained after account deletion where required for legal, regulatory, audit, fraud-prevention, contractual, or programme-reporting purposes. Where such retention is necessary, access to the retained information will be restricted and the information will not be used for unrelated purposes.

8. Account and Data Deletion

Users may request deletion of their Asomi Incubation account and associated personal data.

A deletion request may be submitted:

• Through the account deletion option available within the App; or
• Through the Account Deletion Request page available at: https://asomiincubation.com/account-deletion

Upon receiving a valid request, we may verify the identity of the requester before processing the deletion.

Following verification, the user account and associated personal data will be deleted within 60 days, except for information that must be retained for legal, regulatory, audit, fraud-prevention, contractual, or legitimate programme-administration purposes.

Deletion of an account may result in the withdrawal or discontinuation of an active application or participation in the programme where the retained information is necessary to process or administer such application or participation.

9. User Rights and Choices

Subject to applicable law and programme requirements, users may request to:

• Access information associated with their account;
• Correct or update inaccurate information;
• Withdraw an application, where permitted;
• Request deletion of their account and associated data; and
• Raise questions or concerns regarding the use of their information.

Requests may be submitted using the contact details provided below.

10. Third-Party Services

The App may use third-party services for functions such as:

• OTP delivery and authentication;
• Cloud hosting and database services;
• File and document storage;
• App performance monitoring;
• Crash reporting;
• Analytics; and
• Notifications and communications.

Such providers may process limited information only to the extent necessary to provide their services.

The final version of this Privacy Policy should identify any third-party services that independently collect or process user data where disclosure is required.

11. Permissions

The App may request device permissions only when required for specific functionality, such as:

• Camera access for capturing and uploading documents or photographs;
• File or media access for selecting and uploading supporting documents; and
• Notification permission for receiving application or programme updates.

Users may manage device permissions through their device settings. Denying certain permissions may limit the availability of related App features.

12. Children’s Privacy

The App and the Asomi Incubation Programme are not intended for children below the minimum eligible age prescribed under the programme guidelines.

We do not knowingly collect personal information from children except where specifically permitted under applicable law and programme requirements.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to the App;
• Changes in programme requirements;
• Changes in data practices;
• Changes in applicable law or policy; or
• Changes in technology or service providers.

The updated Privacy Policy will be published on this page with a revised “Last Updated” date. Material changes may also be communicated through the App or other appropriate channels.

14. Contact Us

For questions, concerns, complaints, or requests relating to this Privacy Policy or the handling of personal information, please contact: