Privacy Policy

1. Who we are and what this covers

This policy explains how [Registered company name] ("TixNest", "we") handles personal data on the TixNest website and software. It follows the Information Technology Act, 2000 and the rules under it, the Digital Personal Data Protection Act, 2023 (India) and, for the UAE, Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

TixNest plays two roles. For organisers (people who open a TixNest account) we decide why and how data is used, so we are the data fiduciary / controller. For ticket buyers, the organiser decides why their data is collected and TixNest only processes it on the organiser's behalf. If you are a buyer, the organiser's own privacy policy also applies.

2. Data we collect

• Account data: name, email address, phone number, password (stored only as a one-way hash), business name, address, tax number (GSTIN or TRN) and country.
• Verification and payment-setup data: details you give for your payment provider (Razorpay or Stripe). Identity and bank details are collected and held by the provider, not by TixNest.
• Subscription data: plan, invoices and payment status. Card or bank details for TixNest subscriptions are entered with our payment provider and never stored by us.
• Buyer data processed for organisers: name, email, phone, order and ticket details, and any attendee details the organiser asks for.
• Usage and device data: pages viewed, IP address, browser, device type and error logs.
• Messages you send us, such as support requests and contact forms.
• Support chat: the questions you type in the in-app chat, the answers from our help bot and from our team, and any ratings you give. Our team reads these chats to help you and to improve our help content.

3. Why we use it

• To create and run your account and provide the Service (performance of our contract with you).
• To verify your email and your business, and to prevent fraud and misuse.
• To bill you, issue tax invoices and meet legal, tax and accounting duties.
• To send service messages such as verification codes, receipts, ticket emails and important notices.
• To give support and to improve and secure the Service.
• To send marketing about TixNest only where you agree. You can withdraw consent at any time.

4. Who we share data with

• Payment providers (Razorpay in India, Stripe in the UAE) to take payments and verify businesses.
• Service providers that help us run TixNest, such as cloud hosting, email delivery (for example Brevo) and messaging providers. They may use data only to serve us and must protect it.
• The organiser of an event, for the buyers of that event.
• Courts, regulators and law-enforcement bodies, where the law requires it.
• A buyer of our business, if we are sold or merge, with the same protection for your data.
• We do not sell your personal data.

5. Cookies

We use essential cookies to run the site, sign you in and keep it secure. Optional cookies, such as the language translation widget, are used only if you accept them in the cookie banner. You can change your choice or clear cookies in your browser at any time.

6. How long we keep data

• Account data: while your account is open and for a short period after, then it is deleted or anonymised.
• Invoices and accounting records: for the period tax and company law require (generally up to 8 years in India).
• Security and audit logs: up to 12 months, unless needed longer for a dispute or legal duty.
• Support chats: up to 12 months, then they are deleted or anonymised.

7. Your rights

You may ask to see, correct, update, delete or export your personal data, to withdraw consent, to object to certain uses, and to nominate someone to act for you if you cannot. To use a right, write to us at the address below. We reply within 30 days, and we may need to confirm who you are.

If you are not satisfied with our answer, you can complain to our Grievance Officer. In India you may also approach the Data Protection Board of India once it is in place; in the UAE you may contact the UAE Data Office.

8. Security

We use encrypted connections, hashed passwords, role-based access, rate limits and audit logs, and we limit who can see personal data. No system is perfectly secure. If a breach affects your data we will tell you and the authorities as the law requires.

9. Children

TixNest is for businesses and is not meant for people under 18. We do not knowingly collect data from children. Tickets for people under 18 should be bought by a parent or guardian.

10. Where data is stored

Data is stored on secure cloud servers. If it is transferred outside your country, we use the safeguards the law requires, such as contracts with our providers.

11. Changes to this policy

We may update this policy. We will post the new version here with its date and email you about important changes.

12. Contact and Grievance Officer

Privacy questions: privacy@tixnest.example.

Grievance Officer: [Name], Grievance Officer, grievance@tixnest.example, +00 0000 000000. We acknowledge complaints within 48 hours and aim to resolve them within 30 days.