Privacy Policy

1. Introduction & Statutory Framework

EVENTO ("we", "our", or "us") is dedicated to protecting your privacy and ensuring transparency in how your personal data is handled. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed across the EVENTO mobile applications and web platform.

This policy is formulated in strict compliance with the Digital Personal Data Protection Act (DPDPA), 2023, the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 of the Republic of India.

2. Categories of Data We Collect

We collect only the minimum necessary information required to operate a reliable and verified event staffing marketplace:

3. App Permissions & Device Access

The EVENTO mobile applications may request access to specific device capabilities solely when necessary for core functionality:

• Camera / Media / Storage: To allow you to take or upload profile pictures and event-related images. We do not access your photo gallery or files without your direct action.
• Push Notifications: To deliver essential real-time notifications regarding application status, organizer acceptance, shift updates, and critical announcements.

4. How We Collect & Use Your Data

We collect and process your personal data for legitimate business purposes and with your explicit consent:

• Event Matching: Matching volunteer profiles with event listings based on organizer-specified criteria (gender slot allocation, age bracket, language skills).
• Coordination & Communication: Enabling organizers and volunteers to coordinate shifts, reporting times, and event logistics seamlessly.
• Trust & Accountability: Calculating community trust scores and preventing fake listings or repeat no-shows.
• Zero-Tolerance Safety Enforcement: Enforcing our strict anti-harassment and community guidelines to ensure a safe environment for all participants.
• Support & Dispute Moderation: Assisting users with inquiries, account recovery, and reviewing feedback disputes.

5. Data Sharing & Disclosure

We never sell, rent, or trade your personal data to third-party advertisers or data brokers. We share information only in the following specific circumstances:

• Mutual User Visibility: When an application is submitted, the Organizer can view the Volunteer’s name, photo, gender, age, skills, and rating. When accepted, the Volunteer can view the Organizer's contact information and event location.
• Infrastructure & Service Providers: Trusted third-party vendors (such as cloud hosting providers and SMS/OTP gateway services) who process data strictly on our behalf under confidentiality agreements.
• Legal & Regulatory Authorities: Where disclosure is mandatory under Indian law, court summons, government orders, or to protect the safety, rights, or property of users or the public.

6. Your Rights under DPDPA 2023 & Data Deletion

As a Data Principal under India's Digital Personal Data Protection Act, you have the following rights:

• Right to Access: You can view your profile information, application history, and ratings directly within the app.
• Right to Correction & Update: You may edit and update inaccurate or outdated profile information at any time.
• Right to Erasure (Delete Data): You can request full deletion of your account and personal data at any time through our dedicated portal at /delete-data/ or by submitting a written request to our Grievance Officer.
• Right of Grievance Redressal: You have the right to readily available grievance redressal for any concerns regarding your personal data.

7. Data Retention & Security Measures

7.1 Security Safeguards: We employ industry-standard technical and organizational measures, including HTTPS/TLS encryption in transit, secure token-based authentication, and restricted database access, to protect your data against unauthorized access, loss, or alteration.

7.2 Retention: Personal data is retained for as long as your account remains active. Upon a valid deletion request, your personal identifiers are permanently purged within 30 days, except where retention of anonymized audit records is strictly required to prevent fraud, enforce permanent bans for zero-tolerance safety violations, or comply with statutory legal requirements.

8. Children's Privacy

EVENTO is intended solely for individuals aged 18 years and older. We do not knowingly solicit or collect personal data from children or minors under 18 years of age. If we discover that a user is under 18, the account will be deleted immediately.

9. Data Protection & Grievance Redressal Officer

For any questions, concerns, or data requests under the DPDPA 2023 or IT Rules, please contact our designated Grievance Officers:

10. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our legal obligations or platform practices. The revised version will be indicated by the updated "Effective Date" at the top of this page. We encourage you to review this policy periodically.