Privacy Policy

When you interact with Evenzo — whether by browsing, registering for an event, or purchasing a ticket — we may collect the following categories of information:

• ▸Identity & Contact: Full name, email address, and phone number collected at checkout or account creation.
• ▸Event Preferences: Chosen event category, distance, T-shirt size, dietary preferences, and any custom field responses defined by the event organiser.
• ▸Technical Data: IP address, browser type, device identifiers, and approximate location derived from Vercel edge headers (city-level only).
• ▸Usage Data: Pages visited, referral source, and ticket retrieval actions — collected anonymously to improve platform performance.

• 1Process your event registration and issue confirmation codes and QR passes.
• 2Send transactional emails (booking confirmation, ticket receipt) via Resend.
• 3Allow event organisers to manage attendee check-in lists and download CSV reports.
• 4Improve platform reliability, diagnose bugs, and analyse aggregate usage trends.
• 5Comply with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (DPDPA).

All payments are processed securely by Razorpay(Razorpay Software Private Limited, India), a PCI-DSS Level 1 certified payment gateway. We only receive a tokenised payment confirmation (order ID, payment ID, and signature) from Razorpay to verify the transaction and activate your ticket. Your financial data is governed by Razorpay's own privacy policy available at razorpay.com.

Evenzo uses minimal, essential cookies to provide a functional experience:

We do not use advertising, tracking, or analytics cookies. You can clear cookies in your browser settings at any time, though this may affect organiser login sessions.

We retain registration records (name, email, confirmation code) for a period of 3 years from the event date, to support refund requests, dispute resolution, and compliance with Indian financial regulations (GST record-keeping requirements). After this period, personal data is permanently deleted or anonymised. Event organisers may retain their own exported CSV records — Evenzo is not responsible for organiser data handling post-export. Supabase authentication tokens are revoked upon logout. Server-side logs retained by Vercel are subject to a 30-day rolling retention window.

Under the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Indian law, you have the following rights with respect to your personal data:

• AccessRequest a copy of the personal data we hold about you.
• CorrectionAsk us to correct inaccurate or incomplete personal data.
• ErasureRequest deletion of your data, subject to legal retention obligations and event organisers' rights.
• Grievance RedressalLodge a complaint with our designated Data Protection Officer (DPO).
• NominationNominate a person to exercise rights on your behalf in the event of your incapacitation.

For any privacy-related queries, data requests, or to reach our Data Protection Officer, please contact us at: