Privacy Policy

Overview

This Privacy Policy explains how EventOS (“EventOS”, “we”, “us”, or “our”) collects, uses, shares, and protects personal data when you use our websites, organizer apps, event microsites, APIs, and related services (the “Platform”).

It is designed to provide transparency under frameworks such as India’s Digital Personal Data Protection Act, 2023 (DPDP Act), the EU/UK GDPR, and other applicable privacy laws. It includes our consent / privacy notice and data principal / data subject rights in one place.

Who this applies to

• Visitors to EventOS marketing sites
• Organizers and team members with EventOS accounts
• Attendees, speakers, sponsors, partners, and volunteers interacting with events on EventOS
• Anyone submitting support, privacy, or security requests

Roles: controller vs processor

EventOS as controller / data fiduciary

We determine purposes and means when you browse our marketing site, create an organizer account, manage billing for a Platform plan, receive EventOS product emails, or use Platform security and abuse-prevention systems.

EventOS as processor

When an independent organizer collects registration, ticket, check-in, or form data for their event, that organizer typically acts as controller / data fiduciary. EventOS processes that data on their instructions to provide the Platform. Attendees should contact the organizer first for event-specific requests; we assist organizers as required.

Personal data we collect

• Identity & contact: name, email, phone, organization, role
• Account & workspace: login identifiers, team membership, preferences
• Event & registration: ticket types, orders, form answers, waitlist status, check-in records
• Payment metadata: processed by payment providers; we do not store full card numbers
• Device & technical: IP address, browser/device info, logs, cookies (see Cookie Policy)
• Communications: support messages, feedback, transactional email engagement

Why we use personal data

• Provide registration, ticketing, check-in, email, and workspace features
• Process payments through authorized providers
• Send transactional messages (confirmations, receipts, operational updates)
• Secure the Platform, prevent fraud and abuse, and troubleshoot issues
• Improve product performance and reliability
• Comply with legal obligations and respond to lawful requests

We do not sell personal data.

Legal bases

Where required, we process personal data based on consent, performance of a contract, legitimate interests (such as security and product improvement, balanced against your rights), and/or legal obligations. You may withdraw consent where processing is consent-based; withdrawal does not affect prior lawful processing.

Sharing

We share personal data only as needed with:

• Event organizers (for registrations and event operations they control)
• Payment processors and settlement partners
• Hosting, email, analytics, and security service providers acting as subprocessors
• Authorities when required by law

Retention

We retain personal data only as long as needed to provide the Platform, meet contractual and legal requirements, resolve disputes, and maintain security. After that, data is deleted or anonymized unless longer retention is required by law.

Your rights

Subject to applicable law (including DPDP Act and GDPR where they apply), you may request:

• Access to personal data we hold about you
• Correction of inaccurate or incomplete data
• Erasure / deletion where legally available
• Withdrawal of consent where consent is the basis
• Restriction or objection to certain processing (where applicable)
• Data portability (where applicable under GDPR)
• Nomination of another person to exercise rights in case of death or incapacity (where permitted under DPDP)
• Grievance redressal as described in our Grievance Redressal Policy

To exercise rights for Platform/account data, email privacy@eventos.com. For event registration data controlled by an organizer, contact that organizer; we will assist as appropriate. We may verify your identity before fulfilling a request.

Security

We use technical and organizational measures such as encryption in transit, access controls, authentication, logging, and vulnerability management. No method of transmission or storage is completely secure.

International processing

Personal data may be processed in jurisdictions other than your own by EventOS or authorized providers, subject to applicable legal requirements and appropriate safeguards.

Children

The Platform is not directed to children under the age required by applicable law to consent to online services without parental authorization. If you believe we have collected such data improperly, contact us to request deletion.

Updates and contact

We may update this Policy from time to time. The latest version will be posted on this page with an updated effective date.

Privacy questions and requests: privacy@eventos.com. See also our Cookie Policy and Grievance Redressal Policy.