Privacy Policy

Eventnet Technologies Private Limited is the Data Fiduciary under the DPDP Act 2023 for data processed through the Executive Panel. Our registered office is in Indore, Madhya Pradesh, India.

2.1 Application and Identity Data

• Full name, mobile number, email address, and photograph
• Aadhaar, PAN, and address proof submitted during the application/KYC process
• OTP verification metadata and login/session logs

2.2 Territory and Performance Data

• Assigned territory, onboarding activity, and task completion records
• Vendors onboarded and their verification status
• Commission calculations, payout records, and bank account details for disbursement

2.3 Vendor and Customer Data You Access

• Vendor business details and documents, for onboarding and verification purposes
• Booking and customer contact details visible for Vendors in your territory, strictly for support purposes

2.4 Technical and Usage Data

• IP address, device type, browser type, and operating system
• Login timestamps and feature usage logs

• Verifying your identity and processing your application
• Assigning territory and onboarding tasks, and tracking performance
• Calculating and disbursing commission payouts, including TDS deduction
• Sending OTPs, task notifications, and payout alerts
• Complying with legal and regulatory obligations
• Preventing, detecting, and investigating fraud or policy violations

We do not use your Aadhaar, PAN, or bank details for any purpose other than verification and payout processing.

We rely on your free, specific, informed, and unambiguous consent as the lawful basis for processing your personal data, except where processing is permitted under the Act's legitimate-use provisions. You may withdraw consent at any time by contacting privacy@eventnet.in; withdrawal may affect your ability to use the Executive Panel.

Note: under the DPDP Rules, 2025, Consent Manager integration for exercising and managing consent becomes mandatory across covered platforms by November 2026. We will update this policy and our consent flows as that requirement takes effect.

• Vendors and customers — limited profile and contact details as necessary to perform onboarding and support duties
• Payment processors — for commission payout disbursement
• Cloud infrastructure providers (Supabase, hosted on AWS) — under contractual data-processing agreements
• Professional advisors — accountants, auditors, and legal advisors bound by confidentiality
• Government authorities and law enforcement — where legally required

We never sell, rent, or trade your personal data to any third party for commercial purposes.

• Application and identity documents: 7 years from collection, as required for verification and dispute resolution
• Commission and payout records: 8 years, as required by Indian financial regulations
• Technical logs: 12 months from collection

• Right to access a summary of the personal data we hold about you
• Right to correction of inaccurate or incomplete data
• Right to erasure, subject to legal retention obligations
• Right to nominate a person to exercise your rights in the event of death or incapacity
• Right to withdraw consent at any time

To exercise any of these rights, email privacy@eventnet.in. We respond within 15 days.

• TLS/HTTPS encryption for all data in transit
• Row-level security on all database tables — you can only access data for Vendors in your assigned territory
• OTP-based authentication with rate limiting
• Role-based access controls

The Executive Panel is not intended for persons under 18. We do not knowingly collect data from minors.

We may update this policy from time to time. Material changes will be communicated via the Executive Panel or email at least 7 days before they take effect.

Email: privacy@eventnet.in
Address: Indore, Madhya Pradesh, India
Response time: Acknowledgement within 24 hours, resolution within 15 days

If unsatisfied with our resolution, you may lodge a complaint with the Data Protection Board of India once constituted under the DPDP Act 2023.