Privacy Policy

EventUtils is an event finance management platform operated from India that helps organizers collect contributions, track expenses and share transparent ledgers for events. For the purposes of the DPDP Act, EventUtils is the Data Fiduciary — the entity that determines why and how your personal data is processed. You are the Data Principal.

We collect only what is needed to run the service:

• Account data — your name, email address and profile photo when you sign in (including via Google sign-in).
• Event data you create — event names, dates, locations, descriptions, banners, logos, budgets and expense records.
• Participant data — names, phone numbers and email addresses of people you add to events or to your People list (including via Excel/CSV import).
• Payment records — amounts, payment method (UPI, cash, cheque, DD, bank transfer), transaction references and payment screenshots you or participants upload.
• Memories — photos and captions uploaded to event memory walls.
• Usage data — basic technical logs such as device type, browser and pages visited, used to keep the service secure and reliable.

We do not collect sensitive personal data such as financial account passwords, government ID numbers, health data or precise location, and we do not knowingly collect data of children under 18 without verifiable parental consent.

• To create and manage your account and events.
• To record contributions and expenses, generate receipts, reports and ledgers, and show payment status to event participants.
• To let organizers invite team members and share events with them.
• To read payment screenshots you upload with AI assistance, solely to extract the amount, reference and date for the organizer's review.
• To send service-related communications (for example event reminders) where you have asked for them.
• To prevent fraud, secure the platform and comply with legal obligations.

We use your data only for these purposes. We do not sell your personal data, and we do not use it for advertising.

Under the DPDP Act we process your personal data on the basis of your consent, given when you sign up and when you submit information (for example when a participant records a payment on a public event page), and for certain legitimate uses permitted by the Act, such as responding to your requests and meeting legal obligations.

You may withdraw consent at any time by writing to us (see Grievance section). Withdrawal does not affect processing already done, but some features may stop working — for example we cannot show your payment status after your data is erased.

• Event organizers and their invited team — if you join or pay towards an event, the organizer and admins of that event can see your name, contact details and payment records for that event.
• Other participants — public event pages may show participant names and payment status, unless the organizer has chosen to keep money details private.
• Service providers (Data Processors) — cloud hosting, database, authentication and AI providers that process data on our instructions under contract. They may not use your data for their own purposes.
• Legal authorities — where disclosure is required by law, court order or government request.

Where data is transferred outside India, it is done only as permitted under the DPDP Act and to providers with adequate safeguards.

We keep personal data only as long as needed for the purposes above or as required by law. When you delete an event, its participants, payments, expenses, memories and related records are permanently removed. When you delete your account, your personal data is erased or anonymised, except records we must retain for legal, tax or fraud-prevention reasons.

As a Data Principal you have the right to:

• Access — ask what personal data we hold about you and how it is used.
• Correction and erasure — ask us to correct inaccurate data or erase data that is no longer needed.
• Withdraw consent — at any time, with effect going forward.
• Grievance redressal — raise a complaint with us and have it addressed.
• Nominate — name another person to exercise these rights on your behalf in case of death or incapacity.

To exercise any of these rights, email support@eventutils.com from the address linked to your account. We respond within 30 days.

We use reasonable technical and organisational safeguards: encrypted connections (HTTPS), row-level access controls so users only see data they are allowed to, private storage for payment screenshots and event images with time-limited access links, and audit logs of changes made by event team members. No system is perfectly secure, but we work to protect your data and will notify affected users and the Data Protection Board of India of any personal data breach as required by law.

We use only essential cookies and browser storage — to keep you signed in and remember your preferences (such as theme and the name you selected on an event page). We do not use advertising or third-party tracking cookies.

If you have a question or complaint about how your personal data is handled, contact our Grievance Officer:

Email: support@eventutils.com
Subject line: “DPDP Grievance”

We will acknowledge your grievance within 48 hours and resolve it within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.

We may update this policy from time to time. The “Last updated” date at the top shows the current version, and significant changes will be announced in the app. Continued use after an update means you accept the revised policy.