Privacy Policy

Eventnet Technologies Private Limited is the Data Fiduciary for personal data processed through the Eventnet website, customer app, vendor app, admin tools, executive tools, support channels, payment flows, and related services.

From Customers:

• Name, mobile number, and email address
• OTP verification metadata (timestamps, success/failure, device type)
• Event details: type, date, location, estimated guest count
• Payment method details (processed and stored by Razorpay, not by Eventnet directly)
• Browsing behaviour, search queries, and wishlist activity on the platform
• Support requests, complaints, disputes, reviews, ratings, uploaded evidence, and communication history

From Vendors:

• Business name, category, city, and service area
• Verification documents such as Gumasta, GST, MSME, PAN, FSSAI, trade licence, identity proof, address proof, and other documents voluntarily submitted for verification where legally permissible
• Bank account details for payout processing
• Portfolio photographs, videos, package descriptions, and pricing
• Onboarding fee status, subscription plan, lead credits, commission settings, booking history, review history, payout history, and support records

From Partner Executives and Admin Users:

• Name, phone number, email address, role, assigned city or territory, and login information
• Vendor onboarding activity, approvals, notes, documents reviewed, and audit logs
• Commission, payout, and performance records where applicable

Technical Data (all users):

• IP address, device type, browser, and operating system
• Login timestamps, session duration, and feature usage
• Cookie identifiers and similar tracking technologies

• Operating and personalising the Eventnet platform
• Verifying identity and business credentials
• Processing enquiries, bookings, onboarding fees, subscriptions, lead credits, payments, refunds, commissions, and vendor payouts
• Sending OTPs, booking notifications, and important account communications
• Displaying vendor profiles to potential customers
• Complying with legal and regulatory obligations (TDS, GST, law enforcement requests)
• Detecting and preventing fraud, abuse, and policy violations
• Improving platform features and conducting analytics
• Marketing and promotional communications (with consent; you may opt out at any time)

Where required, we process personal data based on your consent. We may also process data for legitimate and lawful uses connected with platform operation, account security, fraud prevention, payment processing, compliance, grievance handling, service delivery, and enforcing our Terms. You may withdraw consent for optional processing by contacting privacy@eventnet.in. Withdrawal may limit or prevent access to features that require the relevant data.

Under the DPDP Rules, 2025, Consent Manager integration for exercising and managing consent becomes mandatory across covered platforms by November 2026. We will update this policy and our consent flows as that requirement takes effect.

We share your data only as necessary:

• With vendors you enquire about or book, including your contact details and event requirements
• With customers, including vendor public profile, portfolio, packages, service details, reviews, and contact channels where applicable
• With Razorpay for payment processing and fraud prevention
• With communication providers (SMS, email, WhatsApp) for notifications and OTPs
• With Supabase (our cloud infrastructure provider, hosted on AWS) for secure data storage
• With professional advisors (lawyers, auditors) under confidentiality obligations
• With government authorities where legally required by a court order or statutory obligation

We never sell, rent, or trade your personal data to any third party for commercial purposes.

Your data may be processed by service providers in India or outside India, subject to applicable law, contractual safeguards, and platform security controls.

• Account and profile data: duration of active account plus 3 years after closure
• Vendor verification documents: duration of active account plus up to 7 years, or longer if required for legal, tax, fraud, or dispute purposes
• Bank account and payout records: 8 years from date of last transaction
• Booking, payment, invoice, tax, refund, commission, and transaction records: up to 8 years for accounting, GST, income tax, and audit compliance
• Support and dispute records: 3 years from resolution
• Technical logs: 12 months from collection

After the retention period, data is securely deleted or anonymised. You may request deletion of your account through your Settings page, subject to mandatory legal retention obligations above.

Subject to applicable law, you may request:

• Access: obtain a summary of personal data we hold and how it is processed
• Correction: require us to correct inaccurate or incomplete data
• Erasure: request deletion of your data, subject to legal retention obligations
• Grievance redressal: lodge a complaint with our Data Protection Officer
• Nomination: nominate a person to exercise your rights in the event of death or incapacity
• Withdraw consent: withdraw consent for any non-essential processing

To exercise any right, email privacy@eventnet.in. We may verify your identity before acting on the request. We aim to respond within 15 days, unless a longer period is required by law or the request is complex.

We implement security measures such as HTTPS encryption in transit, access controls, OTP-based authentication, role-based admin permissions, private document storage, audit logs, and internal access restrictions. No online platform can guarantee absolute security, but we work to prevent unauthorised access, misuse, loss, or disclosure.

If a personal data breach requires notification under applicable law, we will notify affected users and the relevant authority in the manner and timeline required by law.

We use essential cookies for authentication, sessions, security, preferences, and platform operation. We may also use analytics technologies to understand performance and improve user experience. You may manage cookies through your browser settings, but disabling essential cookies may break login or booking features.

Eventnet is not directed at persons under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact privacy@eventnet.in immediately.

Privacy and Data Protection Contact
Eventnet Technologies Private Limited
Email: privacy@eventnet.in
Location: Indore, Madhya Pradesh, India
Response: Acknowledgement within 24 hours, resolution within 15 days

If unsatisfied with our resolution, you may escalate through the legal remedies available under applicable Indian law.

We may update this Privacy Policy from time to time. Material changes may be communicated through the platform, email, SMS, WhatsApp, or other reasonable means. Continued use of Eventnet after the updated policy becomes effective means you accept the updated policy.