Privacy Policy
Version 1.0 · Effective 2026-09-16
This policy explains what personal data VYBEX collects, why, who else handles it, and what you can ask us to do with it. It describes what our systems actually do. If something here is unclear or looks wrong, write to contact@vybex.co.in.
Who we are
VYBEX, a sole proprietorship operated by Shourya Patil, operating from Kolhapur, Maharashtra, India. We decide how the data described here is used, which makes us the data fiduciary under India's Digital Personal Data Protection Act, 2023.
Privacy and data-deletion contact: contact@vybex.co.in · +91 84464 67701
What we collect and why
| Data | When | Why we need it |
|---|---|---|
| Your name, email address and phone number | When you book tickets | To send your tickets, and to contact you about that event or a refund |
| Attendee names | When you book tickets | Tickets are issued per named attendee and checked at the door |
| Payment reference: Razorpay order ID, payment ID, amount, status | After a payment | To confirm your booking and handle refunds or disputes |
| Your name, email, phone and anything you write in the enquiry form | When you use the contact form | To reply to you. This is emailed to us and is not stored on the website |
| Your IP address | On every request to our booking and contact endpoints | To limit abuse. It is held briefly in server memory, is not written to our logs, and is not used to identify you |
| Email, name and role of VYBEX staff | When an admin account is created | To control who can manage events and registrations |
We never receive your card, UPI or bank details. Payments are completed inside Razorpay's own checkout. We only ever see the reference IDs listed above.
We do not use analytics, advertising, tracking pixels, session recording or fingerprinting, and we do not profile you. We do not use AI systems to process your data.
Our legal basis
When you book a ticket, we process your details because they are necessary to provide the ticket you asked for. When you contact us, we process what you send because you asked us to reply. We do not send marketing email, so we do not ask for marketing consent. If that ever changes, we will ask you separately and you will be able to withdraw at any time.
Who else handles your data
| Service | What they receive | Why |
|---|---|---|
| Razorpay Software Private Limited (India) | Your name, email, phone and payment details you enter with them | To take the payment |
| Google Firebase / Google Cloud | Booking and attendee records, admin accounts | Database and admin sign-in |
| Vercel Inc. | Requests to the website as they are served | Website hosting |
| Resend | Your name, email, ticket details, or your enquiry | To deliver ticket and enquiry emails |
| Cloudinary | Event photos and videos we publish — not your personal data | Image and video hosting |
Google and Vercel operate infrastructure outside India, so your data may be stored or processed outside the country. We do not sell your data, and we do not share it with anyone who is not listed above.
How long we keep it
We keep booking, attendee and payment records while they are needed for the event and afterwards for accounting and any dispute about a payment. Enquiry emails stay in our inbox until they are no longer needed.
We are honest about a limitation here: deletion is currently done by hand when you ask, not automatically on a timer. We are working towards scheduled deletion. In the meantime, you can ask us to delete your data at any time and we will.
Your rights, and how to use them
You can ask us to give you a copy of your data, correct it, or delete it. You can also withdraw any consent you have given and complain to the Data Protection Board of India.
Write to contact@vybex.co.in with the email address or booking reference you used. We aim to respond within 30 days and will tell you when it is done. We may ask a question or two to check the request is really from you — we will not ask for identity documents to delete a booking.
Deleting a booking removes its attendee records and its payment reference. If a refund is still in progress, we will tell you before deleting anything.
Cookies and browser storage
We do not use advertising or analytics cookies, so there is no consent banner. The small amount of storage we do use is listed on the Cookies & Storage page.
Children
This website is not directed at children. We do not knowingly collect personal data from anyone under 18, and under the DPDP Act we would need verifiable parental consent to do so. Individual events may have their own age restrictions set by the venue. If you believe a child's data has been submitted to us, write to contact@vybex.co.in and we will delete it.
Security
Payments are handled by Razorpay and verified on our server before a booking is confirmed. Admin access requires a sign-in and is checked on the server for every action. We do not put personal data in our logs. No system is perfectly secure, and we do not claim otherwise. To report a security problem, see our security contact.
Changes to this policy
If we change how we handle your data, we will update this page, change the version and date at the top, and — for anything material — tell affected people by email before it takes effect.
Change history: version 1.0 (2026-09-16) — first published.