Your event is personal. So is your data.
An event holds names, phone numbers, schedules, photographs and private conversations. That information exists to make your event work, not to become an advertising product. Here is what that means in practice.
This page is a plain-language summary. Our Privacy Policy is the full, binding document.
Six things we hold ourselves to
We never sell your data
Not guest lists, phone numbers, event details or photographs. Not to advertisers, not to anyone.
No advertising profiles
Private event information is never used to build ad profiles or for unrelated marketing.
Data stays with its event
A guest’s phone number added for an RSVP is used for that event, not turned into a marketing contact.
Your photos remain yours
Uploading a photograph does not transfer ownership. We only store and show it the way you ask us to.
You can delete it
Delete your account from inside the app. Your personal data is removed within 15 days.
You pay for the service
Our model is useful software, not selling attention. Your private event data is not the product.
What we process, and why
We collect what’s reasonably needed to run events, keep accounts secure, provide support and fix problems.
Account
- Name
- Mobile number (used to sign in with a one-time code)
- Email, if you add one
Events
- Event and function details
- Venues and schedules
- Tasks, notes and documents
Guests
- Guest names and phone numbers
- RSVP status
- Preferences a host chooses to record
Teams & vendors
- Contact and role details
- Service information
- Event-related messages
Media
- Photographs, videos and albums
- Documents you upload
Technical
- Device and app version
- IP address and security events
- Crash and diagnostic logs
How we use your data
We use personal information to operate, maintain, and improve EventSathi and to provide our services. We do not sell personal information. Any future changes to how we use personal information will be reflected in our updated policies, with notice and choices provided where required by applicable law.
Everyone sees only what their role needs
Access is set per event and per role, so a vendor never sees the family conversation and a guest never sees the budget.
Host
Administrative authority over the event.
Planner
Broader operational access, as granted by the host.
Vendor
Only what’s needed to perform their service.
Guest
Only information intended for guests.
Security in place today
- Encryption of data in transit (HTTPS/TLS)
- Hosted on secure, professionally managed cloud infrastructure
- Phone-number and one-time-code sign-in, with rate limiting on code requests
- Role-based and event-level permissions
- Private media delivered through expiring links
- Access and audit logs for security review
- Separate development and production environments
What we’re building next
- Watermarking for private galleries
- Field-level encryption for the most sensitive personal fields
We list these separately on purpose. We’ll move something into “in place today” only once it’s live.
Our goal is reasonable, appropriate safeguards that we keep improving, and honesty with you if something ever goes wrong.
Photos & private media
Private galleries are protected with sign-in, permissions and expiring links, and we keep strengthening them, with watermarking on our roadmap. As with any photo you share, we recommend sending it only to people you trust.
Children & family events
Events often involve children. Hosts are responsible for having the right to share anyone’s details, including a child’s. Please avoid uploading sensitive information about children. Under-18s may use EventSathi only with a parent or guardian’s consent.
AI & your event data
We don’t use private event information to build advertising profiles or as unrestricted training data. If we introduce AI features, we’ll say what is processed, whether an outside provider is involved, whether it’s kept or used for training, and what controls you have, before launch.
Straight answers
- Built with privacy in mind
- EventSathi is built with responsible data handling, secure development and privacy-conscious design considered throughout the product.
- Service providers
- We use trusted providers for cloud hosting, monitoring, and message and notification delivery. They receive only what they need, under contractual and security controls. See the Privacy Policy for the current list.
- Retention and deletion
- You can delete your account in the app, and your personal data is removed within 15 days, except what we must keep for legal, fraud-prevention or security reasons. How to delete your account.
- International users
- EventSathi is built first for India and Indian law. Where users or events involve other countries, we apply additional rules such as the GDPR where they apply.
Your event. Your memories. Your data.
Privacy questions, requests, or a vulnerability to report responsibly: privacyandsecurity@eventsathi.com. When you write, tell us enough to find the account or event, but please don’t send sensitive personal data by email.