1. Who we are
This Privacy Policy explains how Tvarific Event Solutions ("Tvarific", "we", "us") collects and uses personal data when you visit tvarific.com, use the Tvarific client portal, or register for an event on a site built with Tvarific.
We have two roles:
- Controller for data about our own visitors and customers: people who browse tvarific.com, book a demo, create an account, buy a plan or set up payouts.
- Processor for data that event organisers collect through their event sites, such as attendee registrations. There the organiser decides how the data is used, and their privacy notice applies. We handle it only on their instructions and to run the Services.
2. What we collect
When you visit tvarific.com
- Visitor counting. Your browser stores a random visitor ID (in local storage, not a cookie). With each page you open, we record that ID, the page address and, if another site sent you, that site's host name. We do not store your IP address with these records and do not use them to identify you or for advertising. They tell us how many people visit and which pages they read.
- Book a demo. The name, work email, company and any other details you enter in the form.
- Technical data. Our servers and hosting providers briefly process your IP address, browser type and request details to deliver pages, prevent abuse (for example, rate limiting) and keep the service secure.
When you use the client portal
- Account details: name, email address, country, password (stored only as a secure hash) and one-time sign-in or reset codes.
- Workspace and team: the people you invite, their roles and permissions.
- Your content: event briefs and the files you attach, messages with our team, change requests, site pages, templates, domains and the settings you choose.
- Billing: your plan, trial dates, billing currency, amounts and payment status. Card and bank details are entered with Razorpay and stay with them; we keep only Razorpay's payment and subscription references.
- Payout account (Tvarific Payments): legal or business name, business type, contact name, email and phone, GSTIN if you have one, and bank details. Your full bank account number is sent to Razorpay or Stripe to verify you and send payouts; we keep only its last 4 digits, the IFSC and the account holder's name.
When you register for an event on a Tvarific site
- The details the organiser asks for: usually your name and email, the tickets you choose and answers to their booking questions (for example, dietary needs or a plus-one).
- Payment status and amounts. Card details are entered directly with Razorpay or Stripe; we do not see or store full card numbers.
- If the organiser installs analytics or advertising tools on their site, those tools may collect data under the organiser's control.
3. How we use it
- To provide the Services: run your account, build and host sites, process registrations and payments, send payouts and support you. (Basis: performing our contract with you.)
- To bill you: start trials, charge subscriptions, renew plans, issue invoices and keep financial records. (Contract and legal obligation.)
- To send service emails: sign-in codes, trial reminders, build updates, payment receipts and booking confirmations. These are not marketing and you cannot opt out while you have an account.
- To respond to demo requests and sales questions you send us. (Your request, and our legitimate interest in answering it.)
- To keep the Services secure: prevent fraud and abuse, verify payout accounts, enforce our Terms. (Legitimate interests and legal obligation.)
- To improve the Services: understand visitor numbers and feature use, mostly from aggregated data. (Legitimate interests.)
- Marketing: we may email you about new features if you are a customer or asked for a demo. Every marketing email has an unsubscribe link. (Consent or legitimate interests, as the law allows.)
4. Automated site generation
To build Autonomous sites and to suggest content, we send the brief you provide (event details, description and attached material) to an AI model provider, currently Google (Gemini), which generates draft copy and layouts. We may also read the public pages of a website you give us to pick up your brand colours and logo. We do not use your content to train our own models, and every generated site is reviewed by you before it is published. Avoid putting unnecessary personal data in briefs.
6. International transfers
Our providers may process data in India, the United States, the European Union and other countries. When data leaves the country where it was collected, we rely on the safeguards the law allows, such as standard contractual clauses, and choose providers that protect it to a comparable standard.
7. How long we keep it
- Account and workspace data: while your account is open, then up to 30 days so you can request an export, unless you ask us to delete it sooner.
- Billing, payment and payout records: as long as tax and accounting laws require, typically up to 8 years.
- Attendee registrations: as long as the organiser keeps their site and account, or until the organiser asks us to delete them.
- Demo requests: up to 2 years after our last contact.
- Visitor counts: kept as anonymous statistics; they do not identify you.
- Sign-in and reset codes: they expire after 5 minutes.
8. Security
We protect data with encryption in transit (HTTPS), passwords stored only as bcrypt hashes, sign-in codes that expire after 5 minutes, encrypted storage of payment gateway keys, role-based access for our team and your workspace, and rate limits against abuse. Card details are handled by our payment partners, which are certified under the PCI DSS card-security standard. No system is perfectly secure; if a breach affects your personal data, we will tell you and the authorities as the law requires.
9. Your rights
Depending on where you live, including under India's Digital Personal Data Protection Act 2023 and the EU and UK GDPR, you can ask to:
- access the personal data we hold about you and get a copy;
- correct or update it;
- delete it, unless we must keep it by law;
- object to or restrict some uses, and withdraw consent where we rely on it;
- move it to another service (portability);
- nominate someone to exercise your rights if you cannot.
Write to support@tvarific.com. We may need to verify your identity, and we reply within 30 days. If you registered for an event, contact the organiser first; we will help them answer your request. You can also complain to your data protection authority, such as the Data Protection Board of India.
10. Cookies and local storage
tvarific.com does not use advertising or third-party tracking cookies. We use your browser's local storage for:
- the anonymous visitor ID described above;
- keeping you signed in to the client and admin portals.
You can clear local storage in your browser settings at any time; you will then be signed out and counted as a new visitor. Event sites may use cookies or tracking tools that their organiser chooses; see the organiser's own notice.
11. Children
The client portal is for adults acting for themselves or an organisation; you must be 18 or older to create an account. Organisers who run events for children must obtain any parental consent the law requires before collecting a child's data.
12. Changes to this Policy
We will update this Policy when our practices or the law change, and post the new version here with a new "Last updated" date. If a change is significant, we will tell customers by email or in the client portal before it applies.
13. Contact and grievances
For privacy questions, requests or complaints, including grievances under Indian law, contact our privacy team at support@tvarific.com with "Privacy" in the subject line. We acknowledge grievances promptly and aim to resolve them within 30 days.