Last updated: 2 October 2026
This policy explains what data Yano (operated by Yano Platform, India) collects, why, and your choices. We follow the principle of collecting the minimum needed to run a ticketing service.
Organizers: name, organization name, email, phone, city, and encrypted payment-gateway API credentials you choose to connect (encrypted with AES-256; used only to create payment orders and verify payments on your own account).
Ticket buyers: name, mobile number, and optional email — collected at booking to issue, deliver, and recover tickets, and to allow gate staff to find a lost ticket.
Yano app: if you sign in, the hosts you follow and whether you turned on their notifications, hosts you hid, reports you send, and a push-notification token for each phone you allow notifications on. Hosts see only how many people follow them, never who. The app does not track your location, read your contacts, or show ads. Photos you pick are uploaded only as event posters or your page banner.
Automatically: basic technical logs (IP, browser type, timestamps) for security and reliability.
We never receive or store card numbers, UPI PINs, or bank credentials. All payments are processed by the payment gateway (e.g. Razorpay) on the Organizer's own account; payment data stays with the gateway.
To operate the service: issuing tickets, sending ticket emails, gate check-in, fraud prevention (single-use QR validation), support, and legally required records (e.g. GST invoices). Buyer contact details are visible to the Organizer of the event they booked — the Organizer is responsible for using them lawfully. We do not sell personal data, and we do not use it for third-party advertising.
Data is stored with our infrastructure providers (Supabase — database hosted in the Asia-Pacific (Mumbai) region; Vercel — hosting; Cloudflare — DNS and event images; ZeptoMail by Zoho, with Resend as a backup — email delivery; Zoho Mail — our support mailbox), protected by encryption in transit, encryption at rest for gateway credentials, row-level access controls, and signed single-use ticket tokens.
Ticket and order records are kept for as long as needed for the Organizer's records and legal/tax requirements. You can delete your account yourself (see below). If you never ran an event, everything tied to your account is deleted. If you did, we keep only what your past guests and the law need — those events with their guest lists and your credit-purchase invoices (8 years), under your name and mobile number — and remove the rest.
We use functional storage (an authentication session for logged-in Organizers, a saved gate code on scanner devices, and small notes in your browser such as a booking you started) and Google Analytics to see which pages are used. No advertising cookies, and we don't sell or share data for advertising.
Yano can be used from AI apps such as Claude and ChatGPT through our connector at yano.club/mcp.
Finding and booking events (no sign-in): the AI app sends us what was asked (for example a city, dates or “dandiya”) and we reply with public event information and booking links. We keep basic technical logs for security. We never receive payment details through the connector, and booking and payment happen on yano.club.
Organisers who connect an AI app: when you sign in with Yano and allow an AI app, it can read your events, bookings and check-ins and create or change events and promo codes when you ask it to. It never receives your guests' phone numbers or emails through that connection. We record which tool the app used and whether it worked (not what was written), so you can see it in Settings, where you can also disconnect the app. If you use the older private link instead, it can also read your guest list; you can switch it off in Settings.
What we never share with AI apps: guests' phone numbers, emails or booking details through public tools, door codes, gateway credentials or payment data. What an AI app does with the answers we send is covered by that app's own privacy policy. Questions: support@yano.club.
You can delete your account in the Yano app (You → Delete my account) or at yano.club/account/delete. You can request access to, correction of, or deletion of your personal data by writing to support@yano.club. Grievances are addressed by the operator named above in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023.
We will post updates to this policy on this page with a revised date.