Last updated 22 October 2026

Privacy Policy

This policy explains what personal data Amaya Ecommerce Ventures, which operates OpenConcerts (“we”), collects when you use openconcerts.in, why we collect it, and the choices you have. We process personal data in line with India’s Digital Personal Data Protection Act, 2023.

What we collect

  • Account details: name, email address, phone number (optional), your chosen city, and profile photo if you sign in with Google. If you buy as a guest we create an account from the name and email you give us.
  • Activity: tickets you buy, events you attend and check in to, venue bookings, RFPs, messages with other users and reviews you write.
  • Listings: venue address, location coordinates, photos and pricing you publish as a host.
  • Payments: we receive confirmation of payments and refunds from our payment providers. We never see or store your full card, UPI or bank details.
  • Hosts: to pay you, Razorpay needs your legal name, PAN, phone and bank account. These go directly to Razorpay for verification; we keep only the last four digits of your account number and your payout status.
  • Usage analytics, only if you accept the analytics banner: pages visited and actions such as starting checkout, collected through Google Analytics cookies.
  • Technical data: IP address, device and browser information, used to keep the service secure and to prevent abuse.

Why we use it

  • To run your account and deliver what you ask for: issue tickets, process bookings and refunds, and send related emails.
  • To let hosts and organisers manage their events, for example seeing attendee names at check-in.
  • To keep the platform safe: detect fraud, enforce our Terms and rate-limit abusive traffic.
  • To meet legal obligations such as tax and accounting record-keeping.

We do not sell your personal data and do not use it for third-party advertising.

Who we share it with

  • Event organisers and venue hosts you transact with, limited to what they need (name, email, ticket or booking details).
  • Service providers acting on our behalf: Supabase (database, authentication, file storage), Vercel (hosting), Razorpay and Stripe (payments and host payouts), Upstash (security rate limiting), Sentry (error monitoring), Google Analytics (usage analytics, with your consent) and our email delivery provider.
  • Authorities, where required by law.

How long we keep it

We keep account data while your account is active. Transaction records are kept for as long as Indian tax and accounting law requires, currently up to eight years. Other data is deleted or anonymised within 90 days of account deletion.

Your rights

You can access and correct your profile, and delete your account, from your account page. You can also ask us for a summary of the personal data we hold about you, ask us to correct or erase it, withdraw consent, or nominate someone to act for you, by writing to hello@openconcerts.in. We respond within 30 days.

Cookies

Essential cookies keep you signed in, remember your chosen city and secure checkout. With your consent we also use Google Analytics cookies; you can change your choice any time with “Cookie settings” in the footer. Our payment providers may set their own cookies during payment.

Security

Data is encrypted in transit and at rest with our providers, access is limited to staff who need it, and ticket QR codes are cryptographically signed.

Grievances

For any concern about your data, contact our Grievance Officer at hello@openconcerts.in. If you are not satisfied with our response you may approach the Data Protection Board of India.

Changes

We will post updates here and email you about material changes before they take effect.