Privacy notice · Gatheraro

1. Who this notice is from

Gatheraro is run by Gatheraro, (to be added) (“we”). For the personal data you give us to use Gatheraro, we decide why and how it is used, so we are the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023 (the DPDP Act). Questions about this notice: (to be added).

Organisers of a Space who collect your details through an event’s registration form decide for themselves why they ask for them. Read section 5.

2. What we collect, and why

What	Where it comes from	Why we use it
Name and email address	You, when you create an account (held by Catalyst Authentication, the sign-in service we use)	To create and secure your account, sign you in, and tell you about things you signed up for. For a Domain-only Space (one that an organiser has opened only to certain email domains) we compare the part of your email after the @ with the Space's list, to decide whether you may see it
Headline, interests, profile picture, why you came (find events, organise them or both)	You, on your profile and during onboarding. All optional except your name	To show your profile, suggest what is relevant, and understand who uses Gatheraro (we count the answers; we do not profile you)
Your registrations: the event, your status (confirmed, waitlisted and so on), your booking ID and every answer you type into the event's registration form	You, when you register	To give you a seat, and to let the organiser run the event
Spaces you follow, Spaces you help run and your role	You and the Space's owners	To show you updates from Spaces you follow and let teams do their work
Notifications we send you in the app, and your notification settings	Generated by what happens (a booking, a change to an event) and by you	To keep you informed; you can switch each kind off in Settings
Reports you file about an event or Space (the reason and your note)	You	To keep Gatheraro safe; our team sees who filed it
For Space owners who ask for the verified badge: organisation name, your role, website, organisation email and any documents you upload	You	To check that a Space is run by who it says. Documents are kept in a private store and shown only to our reviewer
Technical records: when you last used Gatheraro, a record of actions that change data (who did what and when), and our hosting provider's server logs, which can include your IP address, browser and the time of each request	Your device and our systems	Security, fixing faults, preventing abuse, and the records the law asks us to keep

We do not ask for your phone number, address, date of birth or government ID to create an account, and we do not run advertising or analytics trackers.

3. Your consent, and what happens if you say no

The first time you sign in, and again if this notice changes in a way that matters, we ask you to read it and confirm that you accept it and that you are 18 or older. We record which version you accepted and when. You cannot use Gatheraro without accepting it, because the data in section 2 is what the service is made of. If you do not accept, you can sign out, or erase your account.

You can withdraw your consent whenever you like by erasing your account (section 7). Withdrawing is as easy as giving it: Settings, then Your data.

4. Who sees your data

Organisers of an event you register for see your name, email, booking status and your answers, so they can run the event. The people who run a Space you follow see that you follow it (your name, picture and when you started), never your email.
Organisers of a Domain-only Space choose which email domains may see it. They are not shown your email because of this. We use only the domain part of your email to decide whether the Space opens for you, and to stop news about it reaching people whose domain was removed. Whether you can open such a Space shows only that your email’s domain is on the list.
Everyone can see the name, picture and headline of people who host a public event or run a public Space. Nobody else has a public profile.
Our service providers, who handle data only on our behalf: Zoho Catalyst (hosting, database, sign-in and file storage, in Zoho’s India data centre), Zoho Cliq (our team’s alerts; a report you file reaches our team there with your name and email) and Zoho QuickML (the writing help for organisers, which receives only the event notes an organiser types, never attendee data).
Authorities, when the law requires it or a competent authority lawfully orders it.

We do not sell your data and we do not share it for advertising. Some default pictures are loaded from illustration or photo hosts (for example api.dicebear.com or images.unsplash.com), which can see that your device asked for a picture.

5. Organisers are responsible for what they ask you

A Space’s organisers choose the questions on their registration form. What you answer goes to them and is held in your Gatheraro registration. They must ask only for what the event needs, use it only for that event and not pass it on (our terms require this). We give them no access to anything beyond what you gave for that event. If you think an organiser is misusing your details, report the event or Space, or write to the Grievance Officer below.

6. How long we keep it

Data	How long
Your account, profile, registrations and follows	While your account exists. When you erase it, your name, email, profile and typed answers are removed straight away (section 7)
Verification documents	Until 90 days after we decide the request, then they are deleted
The record of actions that change data (who did what and when; ids and dates, not your name or email)	At least one year, as the law asks for logs; we keep it so we can show what happened if there is a problem
Our hosting provider's server logs	As the provider keeps them. Indian law (the CERT-In directions) expects logs like these to be kept for 180 days
What your own device stores (section 9)	Until you clear it, sign out, or erase your account

If a law requires us to keep something longer, or an authority asks us to preserve it, we keep only that and tell you if we are allowed to.

7. Your rights, and how to use them

Under the DPDP Act you can:

See your data. Settings, then Your data, then Download my data: one file with your profile, registrations and answers, follows, notifications and activity. It never contains other people’s details.
Correct or update it. Edit your name, headline, picture and interests on your profile at any time.
Erase it, and withdraw consent. Settings, then Your data, then Erase my account. Your upcoming bookings are cancelled; the answers you typed are wiped; your follows, notifications, team roles and invitations are deleted; your name, email and picture are removed from what remains (a registration is kept without you, so the organiser’s seat counts stay right); and your sign-in is removed. This cannot be undone. If you are the only owner of a live Space, make someone else an owner or archive it first.
Complain. Write to the Grievance Officer below. We acknowledge within 24 hours and aim to resolve within 15 days, and always within the 90 days the DPDP Rules allow.
Name someone to act for you if you die or cannot act for yourself. Email us the person’s name and contact details and we will record it against your account.

If we do not resolve your complaint, you can complain to the Data Protection Board of India. We ask that you write to us first.

8. Grievance Officer

(to be added), (to be added), Gatheraro
Email: (to be added)

9. Cookies and what your device stores

Gatheraro uses only what it needs to work. There are no advertising or analytics cookies and no third-party trackers, so there is nothing to opt out of; if that ever changes, we will ask first.

Item	What it does	Kind
Sign-in cookies (set by Catalyst Authentication on our own address)	Keep you signed in and protect your session from forgery	Essential
gatheraro:catalyst-session	Remembers on this device that you are signed in, so the app does not load the sign-in code for visitors	Essential
gatheraro-theme, gatheraro-display, gatheraro-admin-ui	Your light or dark choice, time-zone display and admin screen layout	Preference
gatheraro-recent-searches	Your last five searches in the search window. Never leaves your device	Preference
gatheraro-registration-drafts	A registration form you have started, so a refresh does not lose it. Never leaves your device until you submit	Preference
gatheraro-storage-notice	That you have seen our notice about the above	Essential

You can clear all of it in your browser’s settings. Signing out, or erasing your account, clears it for you.

10. How we keep it safe

Everything travels over HTTPS. Data is held in Zoho Catalyst in India. Every request is checked against who you are and what you may do; verification documents sit in a private store and are opened only through short-lived links for our reviewer; actions that change data are recorded; and limits slow down abuse. No system is perfectly safe. If a breach of personal data affects you, we will tell you and the Data Protection Board as the law requires, and report it to CERT-In within the time it sets.

11. Children

Gatheraro is for people aged 18 and over. We ask you to confirm your age when you accept this notice, and we do not knowingly hold data about anyone younger. If you believe a child has an account, tell us and we will erase it.

12. Changes to this notice

When we change this notice in a way that matters, we update the date above and ask you to read and accept it again the next time you open Gatheraro. Smaller corrections (a typo, a new contact) change the date only.