Privacy Policy

1. Information We Collect

When you interact with eventdio (such as registering for an event, purchasing a ticket, or initializing an event storefront), we collect necessary personal data:

• Identity & Contact Info: First Name, Last Name, Email Address, Mobile Number, and WhatsApp Number.
• Dynamic Form Inputs: Custom attendee responses requested by specific event hosts (such as T-shirt size, emergency contact details, company name, or date of birth).
• Storefront Profile Data: Storefront name, contact email, WhatsApp notification number, custom domain slug, branding logos, and banner media.
• Gate Check-In Audit Logs: Timestamp, venue location, and check-in validation status recorded when your digital QR pass is scanned by gate staff.
• Technical Diagnostics: IP address, device type, browser identifiers, and security logs required to prevent fraudulent checkouts and bot activity.

2. How We Use Your Information

Your personal data is processed strictly for legitimate operational purposes:

• Generating and issuing secure digital QR ticket passes.
• Facilitating gate validation via the eventdio mobile scanner application.
• Sending transactional booking confirmations, receipts, and WhatsApp alerts.
• Providing Organizers with attendee rosters and sales analytics.
• Validating coupon codes and preventing payment fraud.

3. Data Sharing & Disclosure Controls

eventdio limits data sharing strictly to essential service fulfillment:

4. Payment Security Standards

Financial transactions are processed through end-to-end encrypted PCI-DSS compliant payment gateways. eventdio never stores sensitive credit card numbers, CVVs, card expiration dates, or net banking passwords on our servers. All online payment credentials are handled directly by payment gateway infrastructure.

5. Data Protection & Infrastructure Safeguards

We enforce comprehensive technical data security measures:

• End-to-end Transport Layer Security (TLS 1.3 / SSL) for all network communications.
• Encrypted database storage with strict Row-Level Security (RLS) isolation.
• Hashed authentication credentials and secure session tokens.
• Automated threat monitoring and rate limiting to prevent unauthorized access.

6. Attendee Privacy Rights & Data Erasure

Under applicable data protection guidelines, attendees and organizers have the right to:

• Access: View registered tickets via the Member Portal or request a copy of collected data.
• Correction: Update inaccurate contact details or storefront profile information.
• Erasure / Deletion: Request permanent deletion of personal account records (subject to tax and venue audit retention requirements).

7. Cookies & Local Storage

eventdio uses essential session cookies and local storage tokens to manage authentication state, active storefront navigation, and modal preferences. We do not use intrusive cross-site tracking cookies.