Privacy Policy

1. Introduction

This Privacy Policy describes how Fanpit Technologies Private Limited ("Fanpit," "we," "us," or "our") collects, uses, processes, and shares your personal information when you use our platform, website, mobile applications, and services (collectively, the "Service").

We are committed to protecting your personal data and ensuring its privacy, security, and integrity in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable privacy laws.

Age Requirement: Our Service is only available to users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us, including:

• Contact information (name, email address, phone number)
• Account credentials and profile information
• Billing and payment information
• Business information (for business users)
• Event preferences and ticket purchase history
• Customer service communications and feedback

2.2 Transaction and Loyalty Data

When you use our loyalty programs or purchase event tickets, we collect:

• Purchase history and transaction details
• FanPoints and FanScore activity
• Loyalty program interactions and redemptions (including 10-20% commission on marketplace transactions)
• Event attendance and ticket usage information
• Payment and billing information (including service fees where applicable)

2.3 Usage and Technical Information

We automatically collect information about your use of our Service, including:

• Device information (IP address, browser type, operating system)
• Usage analytics and interaction patterns
• Location data (with your consent)
• Cookies and similar tracking technologies
• Platform navigation and feature usage

2.4 Conversation and Communication Data

Our AI-powered conversation systems may collect:

• Chat conversations and customer service interactions
• Voice recordings (where applicable and with consent)
• Communication preferences and history
• Automated conversation analytics

3. How We Use Your Information

We process your personal information for the following purposes:

3.1 Service Provision

• Providing and maintaining our platform services
• Processing loyalty program transactions and rewards
• Managing event ticket sales and delivery
• Operating customer service and support
• Processing payments and managing billing

3.2 Customer Intelligence and Personalization

• Analyzing customer behavior and preferences
• Providing personalized recommendations and offers
• Creating customer insights for businesses
• Improving AI-powered conversation systems
• Enhancing user experience and platform functionality

3.3 Marketing and Communications

• Sending service-related notifications and updates
• Delivering marketing communications (with consent)
• Promoting events and special offers
• Conducting surveys and gathering feedback

3.4 Legal and Security Purposes

• Complying with legal obligations and regulations
• Preventing fraud and ensuring platform security
• Protecting user safety and platform integrity
• Resolving disputes and enforcing our Terms

4. Information Sharing and Disclosure

4.1 Business Partners and Merchants

We share relevant customer information with businesses on our platform to facilitate loyalty programs, process transactions, and provide personalized experiences. Each business has their own privacy policies governing the use of your data.

4.2 Service Providers and Data Processors

We work with third-party service providers who process data on our behalf:

• Amazon Web Services (AWS): Cloud hosting and infrastructure
• MongoDB Atlas (Pune, India): Database services
• Anthropic (United States): Claude AI services for conversation intelligence
• Razorpay (India): Payment processing services for transactions and billing
• Analytics Providers: Platform analytics and performance monitoring

4.3 Event Organizers

For event ticketing services, we share necessary information with event organizers including attendee details, ticket purchase information, and contact details for event-related communications.

4.4 Legal Requirements

We may disclose your information when required by law, legal process, or government request, or to protect our rights, privacy, safety, or property, and that of our users or others.

5. International Data Transfers

We may transfer your personal data to countries outside India where our service providers are located. When we transfer personal data internationally, we ensure appropriate safeguards are in place through:

• Data transfer agreements and standard contractual clauses
• Ensuring recipients are in countries with adequate data protection laws
• Implementing technical and organizational security measures
• Obtaining your consent where required

6. Data Security and Protection

We implement comprehensive technical and organizational measures to protect your personal information:

• End-to-end encryption for data in transit and at rest
• Multi-factor authentication and access controls
• Regular security assessments and penetration testing
• Employee training on data protection practices
• Incident response procedures and breach notification protocols
• Secure infrastructure with industry-standard certifications

7. Your Rights Under the DPDP Act

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

7.1 Right to Information

You have the right to be informed about the personal data we collect, how we process it, and who we share it with.

7.2 Right to Access

You can request access to your personal data that we hold and receive a copy in a structured, commonly used format.

7.3 Right to Correction

You can request correction of inaccurate or incomplete personal data. You can also update most information directly through your account settings.

7.4 Right to Erasure

You have the right to request deletion of your personal data under certain circumstances. Account deletion can be initiated through your profile settings, and your data will be stored for 14 days before permanent deletion.

7.5 Right to Data Portability

You can request to receive your personal data in a portable format and have it transferred to another service provider where technically feasible.

7.6 Right to Object

You have the right to object to certain types of processing, including direct marketing and automated decision-making.

To exercise any of these rights, please contact us at connect@fanpit.live or +91 93637 22121.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Account information: Until account deletion plus 14 days
• Transaction records: 7 years for accounting and tax purposes
• Marketing communications: Until you unsubscribe
• Conversation logs: 2 years for service improvement
• Event data: Until the event concludes plus 1 year for support purposes

9. Artificial Intelligence and Automated Processing

Our platform uses artificial intelligence and automated processing for:

• Customer service conversations and support
• Personalized recommendations and content
• Fraud detection and security monitoring
• Business analytics and customer insights
• Marketing automation and targeting

You have the right to object to automated decision-making that significantly affects you and request human review of such decisions.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and provide personalized content. You can control cookie preferences through your browser settings, though this may affect platform functionality.

11. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes via email or through our platform and update the "Last Updated" date at the top of this policy.

13. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023. Any disputes relating to this policy shall be subject to the jurisdiction of courts in Chennai, Tamil Nadu, India.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to report a privacy concern, please contact us:

15. Compliance and Certifications

We are committed to maintaining high standards of data protection and regularly review our practices to ensure compliance with applicable laws and industry best practices. We may obtain relevant certifications and undergo third-party audits to validate our security and privacy measures.