Velora is a technology platform operated by Hidden Talent R&D Private Limited (India) and Dhaasu LLC (United States). This policy explains what personal data we collect, why we collect it, who we share it with, and the rights you have over it.
It is written to meet our obligations as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").
1. The most important thing to understand
Events on Velora are run by independent Organizers, not by Velora. When you register for, buy a ticket to, or take part in an event, we pass the information that event needs to the community, company, club or institution running it (the "Organizer").
From that point the Organizer holds your data as a separate and independent Data Fiduciary, in their own right. What they do with it is governed by their privacy policy and their own obligations under law, not by this one. Velora does not control, and is not responsible for, how an Organizer uses data once we have passed it to them.
Before you share data with an event, check who the Organizer is. We show their identity and contact details on the event, and you may ask them directly how they handle your data.
Where we decide how and why your data is processed (your account, the app itself, our own communications), we are the Data Fiduciary and this policy governs. Where an Organizer decides that, they are.
2. Information we collect
- Account information: name, email, phone number, profile image, bio
- Event and ticketing data: registrations, RSVPs, tickets held, attendance and check-in records, and the responses you submit to an Organizer's forms
- Social activity: likes, comments, shared posts, community memberships
- Planning data: trips and events attended, preferences, interests
- Behavioural signals: connections, tags, browsing patterns, interaction history
- Device and usage information: IP address, browser type, device identifier, cookies, crash logs
- Transaction records: what you paid for, when, the amount, and the status of the payment
We do not collect or store your full card number, CVV, UPI PIN, or net-banking credentials. Those are captured directly by our PCI-DSS compliant payment gateway partners. We receive only a transaction reference, the outcome, and a masked instrument identifier.
3. How we use your information
- To run the platform: accounts, event participation, ticketing, messaging and group features
- To pass an Organizer the information they need to admit you to their event and to contact you about it
- To process payments, issue receipts, and carry out refunds an Organizer instructs
- To personalise your feed, recommendations and search results
- To show advertising, subject to section 6 below
- To detect fraud and abuse, secure the platform, and meet our legal obligations
4. Who we share it with
Organizers
When you register for or buy a ticket to an event, we share with that Organizer the data needed to run it: typically your name, contact details, ticket and registration details, your responses to their forms, and your attendance record. Organizers need this to admit you, to contact you about changes, and to handle your cancellation or refund request.
An Organizer is contractually required to use that data only for their event and to comply with the DPDP Act. We cannot guarantee that they will, and we are not liable for their failure to do so. Complaints about an Organizer's handling of your data should go to that Organizer. You may also raise them with us under section 10, and with the Data Protection Board of India.
Others
- Other users you interact with, according to your visibility settings
- Payment gateways, to take payment and to process refunds and chargebacks
- Cloud, analytics, communication and support providers acting as our Data Processors under contract
- Advertisers, in anonymised or pseudonymised form only
- Law enforcement, regulators and courts, where required by law, subpoena, court order or equivalent legal process
We do not sell your personal data.
5. Where your data is stored
We host primarily in India. Some of our providers, and Dhaasu LLC for United States operations, process data outside India. Where we transfer personal data across borders we do so only as permitted by the DPDP Act and under contractual safeguards.
6. Advertising and personalisation
We use your profile and activity to personalise recommendations and advertising. You can limit this in your privacy settings, including personalised ad targeting and location-based recommendations. Disabling them may reduce how well parts of the platform work.
We do not carry out behavioural tracking, behavioural monitoring, or targeted advertising directed at any user we know or reasonably believe to be under 18, as required by section 9(3) of the DPDP Act.
7. Your rights
Under the DPDP Act you may:
- Access a summary of the personal data we hold about you and who we have shared it with
- Correct data that is inaccurate, and complete or update data that is incomplete or out of date
- Erase your data, where we are no longer required to keep it for a legal purpose
- Withdraw consent at any time, with effect going forward
- Nominate another person to exercise these rights if you die or become incapacitated
- Complain to us under section 10, and then to the Data Protection Board of India
Most of this is self-service in Settings: update your profile, control personalisation, download your data, or delete your account. For anything else, write to the addresses in section 10.
Rights you exercise with us do not travel to Organizers automatically. If an Organizer already holds your data, exercise your rights with them directly.
8. Children
Velora requires users to be at least 13. Under the DPDP Act a "child" is anyone under 18. If you are under 18 you may use Velora only with the consent of a parent or lawful guardian, and we process children's personal data only where we have verifiable parental consent, and only in ways that are not detrimental to the child's wellbeing.
We do not knowingly collect data from children under 13. If you believe a child under 13 has given us data, write to us and we will delete it.
9. Retention and security
We keep your data while your account is active, and after that only as long as needed for legal, tax, accounting, fraud-prevention or dispute-resolution purposes. Transaction and tax records are kept for the period Indian law requires, which is longer than the life of your account.
We use encryption in transit and at rest, access controls, logging and monitoring. No platform is completely secure and we cannot guarantee absolute security. We will notify you and the Data Protection Board of a personal data breach as the DPDP Act requires.
10. Grievance redressal and contact
For any privacy question, request or complaint, contact our Grievance Officer:
- Grievance Officer: Mohit Jagetia
- Email: mohit@hiddentalent.tech
- Privacy requests: privacy@velora.events
- Post: Mohit Jagetia, Grievance Officer, Hidden Talent R&D Private Limited, Shastri Nagar, Bhilwara, Rajasthan 311001, India
- Phone: +91 99299 42881
We acknowledge complaints within 24 hours and aim to resolve them within 15 days. If you are not satisfied with the outcome, you may complain to the Data Protection Board of India.
11. Changes to this policy
We may update this policy. Material changes will be notified in-app or by email before they take effect. The version and date at the top of this page always identify the current text.