Privacy Policy

1. Overview and Scope

The North Axis ("we", "us", or "our") operates the event discovery and ticketing platform available via our website (thenorthaxis-golem1.vercel.app) and the North Axis mobile application for Android. This Privacy Policy outlines our transparent practices regarding the collection, processing, storage, and protection of personal data when you create an account, register for events, purchase tickets, or use our mobile and web applications.

2. Personal Data We Collect

We collect only data necessary to fulfill event registrations, issue valid tickets, verify check-ins, and maintain platform security:

• Account and Profile Information: When you sign up via email or Google OAuth, we collect your full name, email address, and optional phone number. Passwords are cryptographically salted and hashed by Supabase Auth; we never see or store plaintext passwords.
• Event Registration Details: When registering for an event, we collect the parent or registrant name, contact phone number, email address, residential society or community (selected from our community list), school or institution name (optional), and event-specific form responses (e.g., child age group, category, or notes as specified for the event).
• Ticketing & Check-In Records: Each confirmed registration generates a unique cryptographic ticket token and QR payload. When scanned at the venue, we record check-in status, timestamp, device identifier, and the authorized volunteer/staff user ID.
• Payment Transaction Metadata: For paid registrations, payments are conducted via our integration with Razorpay. We store transaction references including Razorpay Order ID, Razorpay Payment ID, payment verification signature, amount in INR, currency, and payment status (e.g., paid, pending, refunded).

3. Payment Processing & Gateway Information

We verify the authenticity of transactions server-side using HMAC-SHA256 signatures before issuing confirmed tickets. In the event of payment failure or seat expiration, hold records automatically expire without saving sensitive payment data.

4. Third-Party Service Providers

We rely on trusted third-party technology providers strictly to operate our platform:

• Supabase: Managed PostgreSQL database, authentication, user storage, and serverless Edge Functions hosted in secure data centers.
• Razorpay: Payment processing, order creation, signature verification, and automated refund fulfillment.
• Google Identity Services: Optional single sign-on authentication, strictly limited to obtaining your verified name and email address with your explicit permission.
• Vercel: Web hosting, content delivery, and server-side rendering for our website.
• Expo / EAS: Mobile application infrastructure and preview build management.

5. Data Protection, Security & Retention

We implement technical and organizational safeguards including encrypted HTTPS/TLS in transit, Row Level Security (RLS) in PostgreSQL, and chunked SecureStore on mobile devices.

Retention Policy: Account profile information is retained as long as your account remains active. Event attendance and registration logs are maintained to facilitate past ticket access and event verification. Transaction and payment logs are retained for statutory retention periods mandated under applicable Indian tax and financial reporting laws.

6. Your Rights and Account Deletion

You have the right to access your stored data, correct inaccurate profile details, and request deletion of your account and personal data.

To submit an account or data deletion request, please visit our dedicated Account Deletion Page. We review and process deletion requests in accordance with statutory guidelines while preserving legally required audit and accounting archives.

7. Contact & Grievance Redressal

If you have questions, feedback, or grievance requests concerning this Privacy Policy or our data practices, please contact Deepak Taneja (The North Axis) directly at thenorthaxiscc@gmail.com or visit our Contact & Grievances Page.