Privacy Policy

Last updated: April 3, 2026

1. Introduction

EventHora ("we", "our", or "us") operates the EventHora event management platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, including our website, mobile applications, and WhatsApp-based communications.

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you register, create an account, or use our Service, we may collect the following personal information:

  • Full name and display name
  • Phone number (used for authentication via OTP and WhatsApp communications)
  • Email address
  • Role information (organiser, partner, supervisor, attendee)

2.2 Event & Registration Data

When you create events or register for events, we collect:

  • Event details (title, description, dates, venue)
  • Registration information (name, phone, email, ticket type)
  • Ticket and QR code data
  • Check-in timestamps and status
  • Referral information (if referred by another attendee or partner)

2.3 Automatically Collected Information

When you access the Service, we may automatically collect:

  • Browser type and version
  • Device information
  • IP address
  • Pages visited and time spent on the Service

3. How We Use Your Information

We use the collected information for the following purposes:

  • Authentication & Security: To verify your identity via OTP-based phone authentication and manage secure access to your account.
  • Event Management: To enable organisers to create events, manage registrations, configure ticket types, and track attendance.
  • Ticket Generation & Delivery: To generate digital tickets with QR codes and deliver them via WhatsApp messages.
  • Check-in & Scanning: To facilitate QR code-based check-in at event venues by supervisors and organisers.
  • Partner Management: To enable partners to manage their allocated registrations and ticket distributions.
  • Communications: To send event-related notifications, ticket confirmations, and updates via WhatsApp.
  • Analytics & Improvement: To understand usage patterns and improve the Service.

4. WhatsApp Communications

Our Service uses the WhatsApp Business API (via Meta's WhatsApp Cloud API) to:

  • Send one-time passwords (OTPs) for phone-based authentication
  • Deliver digital event tickets with QR codes to registered attendees
  • Send event-related notifications and confirmations

We only send WhatsApp messages to phone numbers that are provided during registration or account creation. We do not use your phone number for marketing purposes or share it with third parties for advertising. All WhatsApp communications are transactional and directly related to the events you are associated with.

Message data processed through WhatsApp is subject to WhatsApp's Privacy Policy and Meta's Privacy Policy.

5. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • Event Organisers: When you register for an event, your registration details (name, phone, email, ticket type) are shared with the event organiser for event management purposes.
  • Partners: If you register through a partner link, your basic registration information may be visible to the referring partner.
  • Supervisors: Supervisors assigned to an event can view attendee check-in information for the purpose of managing event entry.
  • Service Providers: We use third-party services (WhatsApp Cloud API, cloud hosting) that may process your data on our behalf, subject to their own privacy policies.
  • Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

  • Encrypted data transmission (HTTPS/TLS)
  • Secure password hashing (bcrypt)
  • JWT-based authentication with token refresh mechanisms
  • Role-based access controls to limit data access

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. Event-related data (registrations, tickets, check-in records) is retained for as long as the event organiser maintains the event on the platform. You may request deletion of your data by contacting us.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing of your data
  • Withdraw consent for WhatsApp communications

To exercise any of these rights, please contact us using the details provided below.

9. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: