1. Overview & Scope
Venyue (“we”, “us”, or “our”) develops and provides an AI-native event operations, digital ticketing, and offline check-in platform accessible via https://www.venyue.app and associated applications.
This Privacy Policy explains how we collect, process, store, and safeguard personal data when you access our website, create an organizer account, purchase or claim an event pass, or interact with our digital gate scanner and AI concierge services.
We adhere to rigorous industry privacy and data protection standards, ensuring transparency, confidentiality, and data minimization across all services.
2. Data Controller vs. Data Processor Roles
Depending on your relationship with Venyue, our operational capacity differs:
- For Event Organizers: Venyue acts as the Data Controller for personal data collected to create and administer organizer accounts, billing records, and service communications.
- For Event Attendees / Participants: The Event Organizer hosting the event acts as the Data Controller. The organizer decides what information is requested during registration. Venyue acts strictly as a Data Processor, processing attendee data exclusively on behalf of and according to the instructions of the event organizer.
3. Information We Collect
We collect information across the following categories:
A. Organizer Account Information
Full name, official email address, phone number, institution or organization name, securely encrypted authentication credentials, and billing identifiers.
B. Attendee Registration Information
Data provided when registering for an event: attendee name, email address, phone number, institution, and any custom questions configured by the organizer (e.g., dietary preferences for meals, t-shirt size, technical team affiliation, GitHub profile link).
C. Operational & Gate Scan Telemetry
Digital ticket identifiers, gate scan timestamps, checkpoint locations (e.g., “Main Auditorium Entrance”, “Lunch Counter B”), scan validation status (valid, duplicate, or rejected), and check-in device metadata.
D. AI Concierge Interaction Queries
Questions submitted by attendees or organizers to the Venyue AI Concierge (“Robin”) via Telegram or Web. Interactions are processed to deliver real-time answers. We never use your private event data or queries to train public foundation models.
4. How We Use Information
We process personal data strictly for legitimate operational purposes:
- Issuing, rendering, and delivering digital passes with secure QR codes.
- Validating attendee entry at physical gates in sub-second time, including offline.
- Preventing ticket counterfeiting, duplicate entry, and fraudulent meal claims.
- Transmitting transactional event updates (e.g., ticket confirmation, schedule alerts).
- Providing organizers with aggregated, real-time attendance analytics.
- Ensuring platform integrity, investigating technical errors, and billing.
5. Subprocessors & Data Sharing
We only share personal data with trusted infrastructure subprocessors bound by strict Data Processing Agreements (DPAs):
- Cloud Hosting & Infrastructure: Secure, encrypted cloud infrastructure providers (including AWS) for data storage and resilient application hosting.
- Transactional Communications: SendGrid / AWS SES (email) and Twilio / Gupshup (SMS / WhatsApp OTPs and tickets).
- Payment Processing: Stripe and Razorpay for processing ticket fees. Payment credentials are handled directly under certified PCI-DSS compliant infrastructure; Venyue never stores credit card numbers.
- AI Infrastructure: Enterprise endpoints of Google Gemini and OpenAI under commercial terms prohibiting the use of customer data for model training.
6. Data Security
We apply comprehensive security standards to protect all platform information:
- Encryption in Transit: All communications between client devices, check-in scanners, and our API servers are encrypted using modern TLS protocols.
- Encryption at Rest: Database records, backups, and media assets are encrypted using enterprise-grade storage encryption.
- Tamper-Proof Passes: Digital QR tickets are cryptographically signed to prevent counterfeit passes, forgery, or unauthorized duplication.
- Tenant Isolation: Multi-tenant isolation ensures one organization can never view or access another organization's attendee records.
7. Data Retention & Deletion
We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law.
- Organizer Accounts: Retained for the active duration of the account. Organizers may request complete account deletion at any time.
- Event Attendee Data: Event organizers retain full control over their event attendee records. Organizers can trigger a full post-event data purge directly through the dashboard settings.
8. User & Attendee Rights
In accordance with recognized privacy standards and applicable regulations, you possess the following fundamental rights:
- Right of Access: You may request a summary of the personal data processed by Venyue.
- Right to Correction: You may request correction or updating of inaccurate or misleading data.
- Right to Erasure (“Right to be Forgotten”): You may request the deletion of your personal data when it is no longer required for event operations.
- Right to Grievance Redressal: You have the right to register an inquiry or concern with our designated privacy team.
10. Data Protection & Privacy Standards
Venyue is built ground-up following established data protection principles:
- Data is processed exclusively for lawful, specified purposes with clear notice.
- Reasonable security safeguards are implemented to prevent personal data breaches.
- Personal data of student participants and minors is collected with requisite institutional or parental consent for campus events.
11. Privacy Contact & Inquiries
The contact details for our designated privacy desk and support team are provided below:
We are committed to reviewing and resolving any privacy inquiries or requests promptly upon receipt.