Privacy Policy

Compliant with the Digital Personal Data Protection Act, 2023 (India) · Last updated: 11 November 2026 · Applies to eventora.social

1. What data we collect

• Attendee details (per ticket): full name, age, gender — used for entry, capacity planning and ID checks at the gate.
• Buyer contact: name, WhatsApp phone number, and email (optional) — order tracking and ticket delivery.
• Order data: order ID (EV-XXXXXXXX), tickets bought, payment method (UPI/Venue), payment reference (UTR), payment status.
• Entry logs: which ticket was scanned, when, and by which event — prevents double entry.
• Device/browser info: none stored; no tracking pixels, analytics, ads or fingerprinting whatsoever.

2. Why we collect it (Purpose)

• Issue QR e-tickets and show them to the buyer later.
• Entry log & gate check-in verification (double-entry prevention).
• Verify manual UPI payment via UTR before marking paid.
• Send order/ticket confirmation email (only if you gave an email).
• Customer support / lost tickets.

3. Consent & withdrawal (Section 6 DPDP Act)

• Your consent is explicit, informed, and unconditional — the checkbox on the booking page is the consent. Tick it to book.
• You may withdraw consent at any time by emailing privacy@eventora.social with your Order ID. Withdrawal deletes your data except what is legally required to keep (e.g., gate entry logs held for fraud prevention for 180 days, payment records until accounting settlement complete).
• Withdrawing before the event = your tickets become invalid and you are not eligible for entry.

4. How long we keep it (Retention & Erasure — Section 12)

• Orders & attendee data: 120 days after the event date, then permanently erased from live DB.
• Entry/check-in logs: 180 days after event (fraud & dispute evidence), then erased.
• Payment records (UTR only — never card number/CVV): 24 months (required for accounting & refund disputes).
• Drive & export backups: purged every 90 days.

5. Your rights (Sections 11–13 DPDP Act)

• Access — see your data anytime at My Tickets or by emailing us.
• Correction — wrong name/age/gender/phone? Email privacy@eventora.social within 7 days.
• Erasure — we will delete within 30 days of your email (or 90 days of event if later).
• Nomination — appoint a nominee on your behalf in writing (email).
• Grievance Redressal — email privacy@eventora.social. We acknowledge in 72 hours, resolve in ≤30 days.
• Right to complain — if unsatisfied, Data Protection Board of India (dpb.gov.in) — you can complain directly, free of cost.

6. Children & minors

7. Payments & money data

• We never collect card numbers, CVV, or passwords. Not a single field.
• UPI payment — money moves directly to the organizer's UPI account; we only store UTR / transaction reference to verify. On-the-spot apps (GPay/PhonePe/Paytm) display the actual amount and recipient name.
• Cash at venue — we store only "Venue: Cash/UPI at gate" as payment method. No cash-handling data.
• If payment fails, no data about the payment attempt is kept beyond that the order was created & cancelled.

8. Security

• Data at rest in Supabase, SSL/TLS in transit. Row-Level Security limits write/read to only the ticketing functions.
• No staff can view your full attendee list offline; admin accesses are session-bound & logged.
• We never email you asking for password, OTP, or UPI PIN — we don't hold either.
• If a breach occurs, we notify you, the DPB (if significant) and your bank/UPI provider within 72 hours as required by Section 8(6).

9. Cookies & localStorage

• No tracking cookies. Small localStorage entries only: last order ID + phone (My Tickets quick open), admin session flag, no cross-site data.
• You can clear localStorage in browser settings — My Tickets still works with manual entry.

10. Changes to this policy

None of this can be changed silently to collect more than today. Material changes → email to all buyers + 14 days public notice on this page + explicit re-consent at booking.

Terms & Conditions

Eventora event tickets · Last updated: 11 November 2026

1. Tickets

• Non-transferable. QR is tied to attendee name. Entry requires a valid government photo ID matching the attendee name printed on the ticket.
• One scan = one entry. No re-entry.
• Group passes are for the named party only and are subject to capacity.

2. Entry & Conduct

• Entry may be refused if ID does not match the ticket, if the QR fails, or if the bearer is under influence of alcohol/substances (chargeable by the venue rules and Indian law).
• Recording phones, cameras, other hardware may be restricted at the organizer's discretion.
• Outside food, drinks, weapons — prohibited. The organizer reserves the right to stop or call police for any risk.

3. Cancellation & Refund

• Non-refundable ticket, no returns, no replacements once redeemed. (Seller refunds are handled directly by the event organizer.)
• Event cancelled by organizer → full refund to the same UPI VPA the payment came from within 7 working days. Venue cash/refund — handled at gate or kiosk.
• Pending payments not claimed within 48 hours automatically cancel and the seat is released.

4. Liability

• Eventora and the organizer are not liable for injury, loss, or damage to property inside the venue except as caused by our direct negligence.
• Photos/videos taken in the event area may be used for Eventora promotional purposes (zero personal identification).
• By entering, you waive claims against the organizer, venue and Eventora for any venue-related injury.

5. Refunds on failed payment

Payment failed? The amount debited always returns automatically in 5–7 working days — If not, email hello@eventora.social with UTR and order ID and we'll chase it manually.

6. Data & privacy

Everything we do with your data is under our Privacy Policy. It's part of this agreement.