Privacy Policy

MakeMySquad is operated by Zettaura Innovations Private Limited, Coimbatore, India. This policy explains what personal data we collect when you use the platform, why we collect it, how long we keep it, and the choices you have.

Account data: phone number (required for sign-in), and name and email if you choose to add them. Booking data: events booked, tickets issued, check-in status, and payment status. Support data: messages you send us.

Technical data: request timestamps, response status, performance measurements, security events and diagnostic logs used to operate and protect the service. These records may include technical or account identifiers needed to investigate errors and abuse.

Payment card details are collected and processed by Razorpay and never touch our servers.

To operate your account and deliver tickets, receipts, and event reminders over WhatsApp and email; to prevent fraud and enforce single-use ticket check-in; to provide customer support; to improve event discovery; and to meet legal and tax obligations. We do not sell personal data, and marketing communications are opt-in with unsubscribe in every message.

Organizers see attendee names and check-in status for their own events only — never your phone number or payment details.

We use vetted service providers to run the platform: Amazon Web Services (hosting, operational monitoring and messaging), Razorpay (payments), and MongoDB Atlas (database), each bound by their own security and data-protection commitments.

Google Analytics 4, Microsoft Clarity session recordings and optional browser behavioral analytics are currently disabled.

We disclose data to authorities only where required by law.

Account data is kept while your account is active. Booking and payment records are retained as required for tax, accounting, and dispute-resolution obligations. Support conversations are retained for quality and dispute purposes. Data that is no longer required is deleted or irreversibly anonymized.

We protect data with encryption in transit, signed single-use ticket QR codes, short-lived access tokens with rotating refresh tokens, one-time-password sign-in with attempt limits, and infrastructure access controls. Essential uptime monitoring, error diagnostics, security monitoring and operational logging remain active to help us detect outages, investigate failures and prevent abuse. These operational processes do not depend on optional browser analytics consent. No system is perfectly secure, so we also maintain an incident-response process.

You may request access to, correction of, export of, or deletion of your personal data at any time via the Support page. Where data must be retained to meet a legal obligation, we will tell you what is retained and why. You can withdraw marketing consent at any time without affecting your bookings.

Concerns about how your data is handled can be raised through the Support page and will be acknowledged promptly. We may update this policy as the platform or the law changes; the "Updated" date above reflects the current version, and material changes will be notified before they take effect.