Privacy Policy

1. Information We Collect

1.1 Information you provide

• Account information: your email address, and - if you sign in with Google - the basic profile information Google shares with us (name, email, profile picture).

• Profile information: your name or organization name, profile photo or logo, cover image, bio or description, gender (optional), phone number (optional), and location (country, state, city). Location fields set during profile setup are permanent and cannot be edited later.

• Content you create: posts, captions, images you upload, comments, event details, announcements, and memories.

• Attendee details: when you register for or buy a ticket to an event, the attendee name, mobile number, and (optionally) email you provide for that registration.

• Organization verification information: for organizations seeking verification, the documents, official email, authorization letters, or contact details you submit.

• Payout and KYC information (organizers only): to receive ticket revenue as an organizer, you provide business and bank details necessary for verification and payout. Specifically, this includes:

  • Beneficiary name (the name on the receiving bank account or UPI ID);
  • Bank account number and IFSC code, or UPI ID, or both (at least one payout rail is required);
  • PAN (Permanent Account Number) for tax and KYC compliance.

  Bank account numbers are stored on our servers only in encrypted form; the last 4 digits are also kept in plain form for identification (for example, to show "Account ending in 1234" in the app). IFSC codes, UPI IDs, and PAN are stored in our database under restricted access controls, used solely for KYC verification, payout execution, statutory reporting, and dispute resolution.

1.2 Information collected automatically

• Device and technical information: a device identifier we generate, app version, operating system, and general network information.
• Usage information: events you view, pages you open, and similar interaction data used to operate and improve the Platform.
• Approximate location: derived from the city you set on your profile and, where relevant, network information. We do not continuously track your precise GPS location.

1.3 Information from payments

When you buy a ticket, our payment partner (Razorpay) processes the payment on our behalf. We receive a payment confirmation and identifiers (order ID, payment ID, refund ID) needed to issue your ticket, reconcile the transaction, and process refunds. We never receive or store your full card, UPI ID, or bank credentials as a payer - those are handled entirely by the payment partner. We record only the transaction amount, applicable platform fee, payment status, and the identifiers above.

1.4 How ticket money is held, released, and refunded

When you buy a ticket, the payment is collected via our payment partner and settled into EveLynk's own operating account with the payment partner. The organizer's share is not automatically forwarded - it is held with us until the settlement criteria defined in our Terms are met (for example, a minimum percentage of paid attendees being verified at the event gate) and until the organizer's payout details have been verified. From each ticket, we deduct a platform fee (disclosed at the point of purchase and/or in our Terms), and the remainder is what we owe the organizer.

Once released for payout, the payout to the organizer is executed manually by an authorized EveLynk representative via bank transfer (NEFT) or UPI, using the payout details the organizer has registered with us. We keep a full internal audit trail of every payout — including the bank reference number (UTR or UPI transaction ID), the EveLynk staff member who processed it, and the timestamp - for accounting, tax, and dispute-resolution purposes.

Payout verification (₹1 test transaction). As part of verifying an organizer's payout details, we may initiate a small verification transaction (typically ₹1) to the organizer's registered bank account or UPI ID to confirm the details are correct. This is not a business payment.

Refunds. If an event is cancelled, refunded under our policy, or otherwise fails to meet the release criteria, refunds are processed back to the paying attendee's original payment method through our payment partner (Razorpay), subject to any non-refundable portions permitted under our Terms.

1.5 Messages

EveLynk includes a chat feature. Chat messages are protected with end-to-end encryption, meaning their content is encrypted on your device and can only be read by you and the recipient. We cannot read the content of your end-to-end encrypted messages. We do process limited metadata (such as sender, recipient, and delivery timestamps) needed to deliver messages.

2. How We Use Your Information

We use your information to:

• create and manage your account and profile;
• let you discover, register for, and buy tickets to events;
• issue and verify tickets, including QR-code check-in at event gates;
• collect ticket payments, hold funds pending settlement, deduct platform fees, and process refunds through our payment partner;
• verify organizers' identity and payout details (KYC), including via small (₹1) verification transactions, and execute manual bank/UPI payouts to organizers;
• enable posts, comments, memories, following, and chat;
• send you transactional communications (ticket confirmations, event updates, cancellation and refund notices, security notices);
• send push notifications about events and announcements you have opted into;
• maintain the security, integrity, and reliability of the Platform, including fraud prevention and abuse detection;
• comply with legal, tax, accounting, and audit obligations under Indian law.

We rely on your consent, the performance of our agreement with you, our legitimate interests in operating a secure Platform, and compliance with law as our bases for processing.

3. What Is Public

EveLynk is partly a public, social platform. The following are visible to others, including on publicly shared web pages (such as evelynk.in/post/…, /event/…, and /profile/…):

• your public profile: name or organization name, profile slug, avatar, cover image, and bio;
• content you mark public, including posts, images, captions, and the counts of likes, comments, and shares;
• public event details you organize.

Content you mark followers-only or private is not shown on public pages. Attendee registration details, phone numbers, email addresses, chat messages, payout details, PAN, and bank/UPI information are never made public and are not shared with other users or organizers (except as strictly needed for a specific transaction - see Section 4).

Important - images of other people. If you upload an image containing other identifiable people, you are responsible for having their permission. Do not upload images of others, especially minors, without consent.

4. How We Share Information

We do not sell your personal data. We share information only as follows:

• Payment partner (Razorpay): to process ticket payments from attendees, hold ticket revenue in our operating account with them, and process refunds back to attendees. Organizer payout details (bank account, UPI, IFSC, PAN) are not shared with the payment partner - payouts are executed by EveLynk directly (see Section 1.4). If this ever changes, we will update this policy and, where required, notify you.
• Cloud and infrastructure providers: to host the Platform, store media, run our database, send email, deliver push notifications, and receive crash/diagnostic reports, under contractual confidentiality obligations.
• Event organizers: when you register for or buy a ticket to an event, the organizer and their authorized gate staff receive the attendee details needed to admit you (attendee name, mobile number, ticket status). Organizers do not receive your payment card details, UPI ID, or bank information.
• EveLynk finance and payout personnel: a limited number of authorized EveLynk staff have access to organizer payout details for the sole purpose of verifying KYC, processing NEFT/UPI transfers, running the ₹1 verification transaction, and maintaining the audit trail. All administrative actions on financial data are logged.
• Legal, tax, and safety: where required by law, legal process, tax or regulatory reporting (including reporting on organizer income where applicable), or to protect the rights, safety, and security of users, the public, or EveLynk.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.

5. Advertising

EveLynk does not sell your personal data to advertisers, and we do not run third-party advertising networks inside the app that profile you across the internet.

6. Data Retention

We keep your information for as long as your account is active and as needed to provide the Platform.

• When you deactivate your account, your profile and content are hidden and can be restored by logging back in.
• When you request deletion, your account is scheduled for permanent deletion after a 30-day grace period, during which you can cancel by logging in. After the grace period, we delete or irreversibly anonymize your personal data.
• Financial, payout, KYC, and tax records (including transaction records, PAN, IFSC, invoices, payout references, and settlement histories) are retained for the periods required under Indian tax, accounting, and anti-money-laundering law, even after you close your account. This is a legal requirement, not a marketing choice.
• Anonymized or aggregated statistics (which cannot be linked back to you) may be kept longer for product improvement.

7. Your Rights

Subject to applicable law, you may:

• access and review your personal data;
• correct inaccurate data (note: some fields, such as profile location, are fixed at setup by design);
• withdraw consent and deactivate or delete your account from within the app;
• request deletion of your personal data (subject to the retention requirements in Section 6 for financial and legal records);
• raise a grievance with our Grievance Officer.

To exercise these rights, use the in-app controls or contact us at privacy@evelynk.in.

8. Security

We use industry-standard measures to protect your data, including:

• Encryption in transit for all communications with the Platform (HTTPS/TLS);
• End-to-end encryption for chat message content;
• Encryption at rest for sensitive fields including organizer bank account numbers;
• Hashed credentials and scoped access tokens for authentication;
• Role-based access controls limiting who inside EveLynk can view sensitive fields (payout, KYC, and financial records);
• Audit logging of administrative actions on financial data, including who released settlements and who executed payouts.

No system is perfectly secure, but we work continuously to protect your information. If you discover a security issue, please contact security@evelynk.in.

9. Children

EveLynk is not intended for children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact privacy@evelynk.in and we will take steps to remove it.

10. International Users

EveLynk is operated from India and intended primarily for users in India, though it may be accessed from other countries. By using the Platform, you understand your information will be processed in India and other locations where our providers operate.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes - including changes to how we collect, store, or share payout, KYC, or financial information - will be notified through the Platform or by email. The "Last updated" date at the top reflects the latest version.

12. Grievance Officer & Contact

In accordance with applicable Indian law, you may contact our Grievance Officer for privacy concerns:

• Grievance Officer: grievance@evelynk.in
• Privacy: privacy@evelynk.in
• General support: support@evelynk.in

We will acknowledge and address grievances within the timelines required by applicable law.

This Privacy Policy is a general template tailored to EveLynk's features and should be reviewed by a qualified lawyer before launch. It is not legal advice.