Zero Data Monetization
We never sell, rent, or lease your personal information or contact details to third parties.
Geo-Fenced Check-In
GPS is strictly captured at the moment of venue check-in—never background continuous tracking.
Right to Erasure
Self-service in-app account deletion with a 30-day grace period and permanent purge.
1Information We Collect
EventOye collects information to deliver a secure, transparent, and fair on-ground workforce marketplace for events. The categories of information collected include:
- Account & Profile Details: Full name, phone number, email address, profile avatar, language preferences, and emergency contact details.
- Payout & Banking Information: UPI IDs (Virtual Payment Addresses) and bank account details required to transfer wages and milestone bonuses. Payment card information is handled directly by PCI-DSS Level 1 certified processors (Razorpay) and is never saved on EventOye servers.
- Verification & Attendance Data: Real-time venue selfie photographs and GPS coordinates captured strictly when initiating a shift check-in or checkout. This biometric liveness check ensures identity verification and eliminates proxy attendance fraud.
- Reputation & Performance Metrics: Shifts completed, punctuality records, manager ratings, and automated XP progression data.
2Purpose & Legal Basis for Processing
In accordance with the Digital Personal Data Protection (DPDP) Act, 2023 of India, we process your personal data under explicit user consent and legitimate operational uses:
- Matching workers with relevant event opportunities based on location and skills.
- Enabling secure, geofenced shift check-ins and audit verification for event organizers.
- Executing fast, transparent UPI and digital bank payouts upon shift sign-off.
- Calculating automated XP points and merit-based rank promotions (Worker → Vice-Captain → Captain).
- Investigating disputes, preventing platform abuse, and maintaining venue safety.
3Data Storage, Infrastructure & Security
All platform data is securely stored on enterprise PostgreSQL infrastructure provided by Supabase, fortified with:
Row-Level Security (RLS)
Database queries are restricted by strict PostgreSQL cryptographic policies, ensuring users only access authorized data.
End-to-End Encryption
All data in transit is encrypted using modern TLS 1.3 protocol. Storage volumes are encrypted at rest using AES-256 standards.
4Authorized Third-Party Service Providers
We partner strictly with accredited infrastructure and financial providers who uphold rigorous privacy benchmarks:
- Razorpay: Payment gateway and digital payout transactions (PCI-DSS Level 1 compliant).
- Supabase: Database hosting, user authentication, and secure encrypted cloud asset storage.
- Google Maps Platform: Venue geocoding and proximity search calculations.
- Web Push / VAPID: Browser push notifications for shift alerts and squad coordination.
5User Rights & Self-Service Account Erasure
You hold complete control over your personal data:
In-App Deletion: You can initiate complete account erasure at any time via Profile → Settings → Delete Account.
30-Day Recovery Period: When initiated, your account is immediately deactivated. Logging in within 30 days will restore your account.
Permanent Purge: After 30 days, your profile data, uploaded attendance selfies, and contact records are irrevocably deleted from active databases.
6Grievance Redressal Officer
In compliance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the details of our designated Grievance Officer are:
Designation: Grievance Redressal Officer
Entity: EventOye Technologies
Email: grievance@eventoye.com (cc: support@eventoye.com)
Response Turnaround: Acknowledgment within 24 hours, full resolution within 15 days as required by law.