Legal
Privacy Policy
Institutions decide what alumni data is collected. My Universe maintains and protects it as their platform provider.
Who controls your data
Alumni records live inside the institution you joined. The institution (its verified administrators) is the data controller and decides what is collected and why. My Universe, operated by SG PR Infotech LLP, is the data processor: we store, secure and maintain the data strictly on the institution's instructions.
What we collect
Account details (name, email, photo), membership details you submit when joining an institution (batch, course, roll number, role), content you publish (gallery uploads, posts, RSVPs), transaction records for donations and store orders, and technical logs needed for security and abuse prevention.
Why we process it
To verify alumni membership, run the directory, deliver news, events, jobs and campaigns, process payments, send transactional email from the institution's own verified sender identity, and keep the platform secure.
Payments
Card and UPI details are never stored by us. Payments are processed by our payment partners (Razorpay / Stripe); we retain only the transaction reference, amount, status and payer identity needed for receipts and reconciliation.
Who can see your profile
Row-level security limits visibility to co-members of the institutions you belong to and their verified administrators. Unverified requests, rejected requests and private fields are never exposed publicly.
Institutions submit and verify their own sending domain and sender address. Invitations and announcements go out under the institution's identity, not ours. Every email carries an unsubscribe or preference path where required.
Retention and deletion
Data is retained while your membership is active. You may request correction or deletion from your profile page or by contacting your institution's administrator; platform-level deletion requests can be raised with SG PR Infotech LLP and are actioned within 30 days, except where records must be kept for statutory financial reporting.
Your rights
Access, correction, portability, restriction and deletion of your personal data, and withdrawal of consent for optional processing such as marketing email.
Security
Encrypted transport, role-based access control, database row-level security, scoped storage buckets, signed webhooks and least-privilege service credentials.