Privacy Policy

1. Information We Collect

We collect only the minimum personal data required to administer admissions, verify ticketing transfers, and operate a secure registration service:

• Personal Contact Data: Full name, email address, and WhatsApp/phone number provided during registration to issue access tokens and door passes.
• Performer Application Details: Artist/band name, performance category, number of stage members, and audition media links voluntarily submitted for curation.
• Payment Verification Data: The 12-digit Bank Transaction ID / UTR number, transfer amount (₹149 for audience, ₹699 for performers), and transfer timestamp. We do NOT process, see, or store your bank passwords, UPI PINs, or debit/credit card details. Payments occur entirely within your personal bank application.
• Network & Security Telemetry: Public IP address, device form factor, and browser identifiers collected automatically via Cloudflare and edge infrastructure strictly for rate limiting, DDoS mitigation, and bot detection.

2. How We Use Your Information

Your information is processed solely for legitimate event operations:

• To confirm your booking, generate your entry token, and verify your pass at the venue entrance.
• To verify UPI payment transfers against bank credits before locking limited capacity seats.
• To communicate important updates such as soundcheck timings, venue directions, or schedule shifts.
• To defend the ticketing portal against automated bot attacks, ticket scalping, and abuse.
• If you voluntarily opt into community updates, to inform you of upcoming open mic sessions (with one-click unsubscribe available anytime).

3. Service Providers & Infrastructure

We do not sell personal data. We share necessary operational data only with trusted technical service providers under confidentiality and security agreements:

• Supabase: Managed PostgreSQL database hosting attendee records protected by strict Row-Level Security (RLS).
• Vercel: Web hosting and serverless application runtime.
• Cloudflare: Content Delivery Network (CDN), Web Application Firewall (WAF), and Turnstile bot protection.
• Resend: Secure transactional email delivery service for passes and receipts.

4. Cookies & Analytics

We respect user privacy and avoid invasive tracking mechanisms. We do not use third-party advertising cookies or social media tracking pixels.

We employ only strictly necessary technical cookies for security (Cloudflare Turnstile bot verification), encrypted administrator session cookies, and privacy-preserving, cookieless performance analytics (Cloudflare & Vercel Analytics) to ensure rapid loading speeds.

5. Data Security & Storage

All communication between your browser and our servers is encrypted using modern TLS / HTTPS. Database access is restricted to authenticated administrators, and all administrative actions are logged in an immutable audit ledger to prevent unauthorized tampering. We retain registration records only as long as necessary for door verification, accounting records, and dispute resolution.

6. Your Legal Rights (DPDP Act, 2023)

Under India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, you have the right to request access to, correction of, or deletion of your personal data stored with us, subject to statutory record-keeping and tax requirements.

7. Governing Law & Exclusive Jurisdiction

This Privacy Policy is governed by the laws of the Republic of India. Any legal disputes or claims arising under or in connection with this Policy shall be resolved exclusively in the competent civil courts located in Pimpri-Chinchwad / Pune District, Maharashtra, India.

8. Grievance Desk & Direct Contacts

For any privacy concerns, data inquiries, or deletion requests, you may contact our designated organizing team directly: