Privacy Policy — 3BY2WEB Events

1. Scope and roles

This policy applies to account holders who create and manage events on the Events App ("Organisers") and, where stated, to guests who submit RSVP or contact information through published invite pages ("Guests").

For Guest data submitted through an Organiser's invite page, the Organiser is the primary decision-maker regarding how that data is used for the event. TouchTap processes Guest data on the Organiser's instructions to provide hosting, RSVP collection, and related features.

2. Personal data we collect

We may collect the following categories of personal data:

• Account data: name, email address, phone number (if provided), authentication identifiers from Google Sign-In or email OTP verification.
• Event and content data: event titles, dates, venues, descriptions, images, speaker lists, custom domains, and other content you upload or enter.
• RSVP and guest data: names, email addresses, phone numbers, attendance responses, dietary or custom form fields configured by the Organiser, and timestamps.
• Billing data: billing name, address, GSTIN (if provided), transaction references, and payment status. Card and UPI details are processed directly by our payment partner Razorpay; we do not store full payment instrument numbers.
• Technical data: IP address, browser type, device identifiers, pages viewed, referral URLs, and approximate location derived from IP.
• Support communications: messages and attachments you send through in-app support or email.
• Cookies and similar technologies: session cookies, authentication tokens, and analytics identifiers as described below.

3. How we use personal data

We use personal data for the following purposes:

• Creating and authenticating your account and providing access to the Events App.
• Hosting, publishing, and renewing event invite pages and collecting RSVPs on your behalf.
• Processing payments, generating tax invoices, and fulfilling Glow and hosting subscriptions.
• Sending service emails such as OTP codes, receipts, renewal reminders, and support updates.
• Monitoring usage, preventing fraud and abuse, and maintaining platform security.
• Complying with legal obligations, responding to lawful requests, and enforcing our terms.
• Improving the Events App through aggregated or de-identified analytics.

4. Legal bases for processing

Under applicable Indian law, we process personal data based on one or more of the following: your consent (which may be withdrawn subject to contractual and legal limits); performance of a contract with you; compliance with legal obligations; and legitimate interests such as fraud prevention, security, and service improvement, where such interests are not overridden by your rights.

5. Sharing and disclosure

We do not sell your personal data. We may share personal data with:

• Service providers: cloud hosting (including Google Cloud Platform), content delivery, email delivery (including MSG91), authentication (Google Firebase / Identity Platform), payment processing (Razorpay), and analytics — strictly to operate the Events App.
• Organisers and Guests: RSVP information submitted by a Guest may be visible to the relevant Organiser and, if the Organiser configures public display, to other invite page visitors.
• Distributors: where your account was provisioned by an authorised 3BY2WEB distributor, we may share account and support metadata necessary for fulfilment and L1 support.
• Legal and safety: regulators, courts, or law enforcement when required by law or to protect rights, safety, and integrity of the Platform.
• Business transfers: in connection with a merger, acquisition, or asset sale, subject to confidentiality and continued protection of personal data.

6. Data retention

We retain personal data for as long as your account is active or as needed to provide the Services, comply with law, resolve disputes, and enforce agreements.

Event pages and RSVP records may be retained for the duration of your hosting term and for a reasonable period thereafter for backup, billing, and legal purposes. You may request deletion of specific content where technically feasible and not prohibited by law or legitimate business needs.

Billing and invoice records are retained as required under Indian tax and accounting laws (generally up to eight (8) years unless a longer period is mandated).

7. Your rights

Subject to applicable law, including the DPDP Act, you may have the right to:

• Access personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Withdraw consent where processing is consent-based (without affecting prior lawful processing).
• Request erasure of personal data, subject to legal and contractual retention requirements.
• Nominate another individual to exercise your rights in the event of death or incapacity, as permitted under the DPDP Act.
• Lodge a complaint with our Grievance Officer or with the Data Protection Board of India once operational under the DPDP Act.

8. Cookies and tracking

We use essential cookies for authentication and session management. We may use analytics tools to understand feature usage. You can control non-essential cookies through your browser settings; disabling essential cookies may limit functionality.

9. Children

The Events App is not directed at children under eighteen (18) years of age. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us to request deletion.

10. Security

We implement reasonable administrative, technical, and organisational safeguards including encryption in transit (TLS), access controls, and secure cloud infrastructure. No method of transmission or storage is completely secure; you use the Events App at your own risk and should protect your account credentials.

11. International transfers

Your data may be processed on servers located in India and, where necessary for service delivery (for example, Google or Cloudflare infrastructure), in other countries. Where data is transferred outside India, we take steps consistent with applicable law to ensure appropriate protection.

Grievance redressal

If you have questions, concerns, or complaints regarding this Privacy Policy or our handling of your personal data, contact our Grievance Officer:

TouchTap Technologies Pvt Ltd — Grievance Officer 14/21, Desigar Street, Vadapalani, Chennai, Tamil Nadu 600026, India Email: touchtaptechnologies@gmail.com Phone: +91 98407 62326

We will acknowledge your complaint within seventy-two (72) hours and endeavour to resolve it within 30 days, or within the timeline prescribed under applicable law, whichever is earlier.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on the Platform with an updated "Last updated" date. Continued use after changes constitutes acceptance of the revised policy.

Contact

TouchTap Technologies Private Limited 14/21, Desigar Street, Vadapalani, Chennai, Tamil Nadu 600026, India Email: touchtaptechnologies@gmail.com Phone: +91 98407 62326 Website: https://www.3by2web.com