Privacy Policy

evntfy.in (“we”, “us”) is an event registration, ticketing, and check-in platform. Any community or organization can register their own workspace (“organization”) and connect their own Google Form response sheet and Gmail account to run their event.

• Account information — when you sign in with Google, we receive your name and email address from Google. We never see or store your Google password.
• Organization information — if you register an organization, its name and website/social page (used only to detect duplicate registrations).
• Event registrant data— if an organizer connects a Google Form response sheet, we read the rows of that sheet (names, emails, and whatever other questions the organizer’s form asks) so the organizer can review and email registrants from within the app.
• Check-in and certificate data — attendance/lunch/swag marks recorded by event staff at the door, and any feedback an attendee submits when generating a certificate.
• Connected Google account tokens— if an organizer connects a Sheets or Gmail account, we store an encrypted OAuth token so the app can act on that organizer’s behalf. Tokens are encrypted at rest (AES-256-GCM) and are never readable as plain text from our database.

We request the following Google API scopes, each for a single, narrow purpose, and each authorized separately and revocable independently:

• Sheets/Drive, read-only — to read the rows of the specific Google Form response sheet an organizer connects. We never write to, modify, or delete anything in your Drive or Sheets.
• Gmail, send-only— to send ticket confirmation emails from the organizer’s own Gmail address, on their explicit action (clicking “Send”). We never read, search, or delete anything in your Gmail inbox.

evntfy.in’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell your data, and we do not share it with advertisers or unrelated third parties. Registrant data connected by one organization is never visible to any other organization. Google infrastructure (Firestore, running on Google Cloud) is the only infrastructure provider we use to store data.

Data is retained for as long as the organization or event exists. An organization admin can permanently delete an event at any time, which erases that event’s registrants, send logs, and staff records entirely. You can revoke evntfy.in’s access to your Google account at any time from Google Account permissions. To request deletion of personal data we hold about you, contact us using the details below.

evntfy.in is not directed at children under 13, and we do not knowingly collect data from them.

We may update this policy as the product changes. Material changes will update the “Last updated” date above.

Questions about this policy or a data request: babinsamrat123@gmail.com