Legal
Privacy
What we collect, why we have it, and how you get it back or get rid of it.
Last updated 9 September 2026
Two different kinds of data
This distinction matters more than anything else on this page, so it comes first.
- Your data. The account you open with us — your name, business details, email address and phone number, and your subscription and payment records.
- Your customers' data. Everything you put into EventzNest: your customers, students, quotations, bookings, payments, attendance. This is yours, not ours. We hold it and process it on your instructions and for no other purpose. We do not mine it, sell it, or use it to train anything.
What we collect about you
- Business name, contact person, email, phone, address and GST number where you give it.
- Your subscription, its dates, and the payments recorded against it.
- Sign-in records and a log of actions taken in your account, so you can see who did what.
- Aggregate website analytics that use no cookies and no cross-site tracking, on every page of our public website — we can see that a page was visited, not who visited it. This runs for everyone and is not something you are asked about, because there is nothing to identify you with.
- If you accept cookies on our public website: advertising and remarketing tags (Google, Meta) that let us measure whether our ads bring people here, and session-replay on our homepage alone (Microsoft Clarity) that shows us where visitors click and scroll so we can fix what confuses them. These load in a switched-off state and stay that way unless you accept. Decline, or ignore the banner, and they store nothing at all. You can change your mind at any time, at the bottom of this page.
- None of that is present once you sign in. The application itself carries no third-party tracking of any kind.
If you message us through the website — the pricing page's plan builder or the contact page — before you have an account: your name, and whichever of email or phone you gave us, plus anything you typed and, if you used the plan builder, the modules you selected. That is used to reply to you and for nothing else. A hidden field on that form exists purely to catch automated spam submissions; if it is filled in, the submission is discarded and never stored.
What we do not do
- We do not sell personal data. To anyone, under any circumstances.
- We do not run advertising trackers, session recording or any other third-party trackinginside the application. Signed in and working, you and your staff are not being watched by anyone but us. Our public website is a different place with a different answer — see above, and thesub-processors page for exactly who is involved.
- We do not send your business data — your customers, students, bookings or payments — to any advertising or analytics company. What the marketing-site tools see is which of our own public pages someone looked at before getting in touch.
- We do not read your business data except when you ask us to help with a specific problem, and then only as far as answering it requires.
How long we keep it
Your business data stays for as long as your account is open. If you close it, tell us and we will delete it — the database schema holding your records is dropped, not just flagged as inactive. We keep subscription and invoice records afterwards only where tax law requires it.
A website enquiry that never becomes an account is kept only as long as it takes us to follow up and for a reasonable period after, then deleted. Ask us to delete one sooner and we will.
Getting your data out
At any time, and without asking us first, you can export everything you have put in as a multi-sheet Excel workbook — customers, menu, quotations, bookings, payments, expenses, staff and the activity log. Password hashes and any stored email credentials are deliberately excluded.
Who else touches it
A short list, kept current on the sub-processors page. We will tell you before it changes.
Security
Each business gets its own database schema rather than sharing tables. Sign-in passwords are hashed and unrecoverable. Stored email credentials are encrypted. The full description is on thesecurity page, including the automated test suite that checks isolation on every change.
Your rights under India's DPDP Act
You can ask us what personal data we hold about you, ask for it to be corrected, ask for it to be erased, and nominate someone to exercise these rights on your behalf. Write toinfo@eventznest.com and we will respond.
Where you are using EventzNest to hold your own customers' data, those requests come toyou, not to us — and the export, deletion and audit features exist so you can answer them without needing our help.
Children
Academies using EventzNest routinely hold records for students who are minors, entered by a parent or the academy. That data is the academy's responsibility as the business holding it; ours is to keep it isolated, encrypted in transit, exportable and deletable. We do not market to children and no child ever creates an EventzNest account.
Changes
If this page changes in a way that affects you, we will email you rather than quietly updating the date at the top.
Your cookie choice
Analytics on this site that use no cookies run for everyone. Advertising and session-analysis cookies run only if you agreed to them. You can change that decision at any time: