Last updated: 10 July 2026
This policy explains what data Yano (operated by Abhijeet Rai (sole proprietor), India) collects, why, and your choices. We follow the principle of collecting the minimum needed to run a ticketing service.
Organizers: name, organization name, email, phone, city, and encrypted payment-gateway API credentials you choose to connect (encrypted with AES-256; used only to create payment orders and verify payments on your own account).
Ticket buyers: name, mobile number, and optional email — collected at booking to issue, deliver, and recover tickets, and to allow gate staff to find a lost ticket.
Automatically: basic technical logs (IP, browser type, timestamps) for security and reliability.
We never receive or store card numbers, UPI PINs, or bank credentials. All payments are processed by the payment gateway (e.g. Razorpay) on the Organizer's own account; payment data stays with the gateway.
To operate the service: issuing tickets, sending ticket emails, gate check-in, fraud prevention (single-use QR validation), support, and legally required records (e.g. GST invoices). Buyer contact details are visible to the Organizer of the event they booked — the Organizer is responsible for using them lawfully. We do not sell personal data, and we do not use it for third-party advertising.
Data is stored with our infrastructure providers (Supabase — database hosted in the Asia-Pacific (Mumbai) region, Vercel — hosting, Resend — email delivery), protected by encryption in transit, encryption at rest for gateway credentials, row-level access controls, and signed single-use ticket tokens.
Ticket and order records are kept for as long as needed for the Organizer's records and legal/tax requirements. You may request deletion of your personal data (see below); we may retain what the law requires us to keep.
We use only functional storage: an authentication session for logged-in Organizers and a saved gate code on scanner devices. No advertising or cross-site tracking cookies.
You can request access to, correction of, or deletion of your personal data by writing to yano.business.support@gmail.com. Grievances are addressed by the operator named above in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023.
We will post updates to this policy on this page with a revised date.