Privacy policy

This policy explains how Axpeiron Entertainment Private Limited handles personal data on Xortal.

When you buy a ticket we collect your name, email and phone number, and the details of your order. We share these with the organiser of the event you booked, who uses them to deliver your tickets, manage entry and contact you about that event. Payment card and UPI details are handled by Razorpay; we never see or store them.

When organisers and their staff use the platform we store account details, activity logs (sales, scans, logins) and the data needed to run their events.

We use your data to provide the service, send tickets and service emails, prevent fraud and meet legal obligations. We don't sell personal data. We don't send marketing emails unless you agree to them.

Data is stored with our infrastructure providers (database, hosting and email delivery) under appropriate safeguards. We keep order records for as long as required for tax and accounting.

How we protect it: all connections are encrypted (HTTPS). Bank account and PAN details are encrypted before storage. Passwords and staff PINs are stored only as one-way hashes. Access to dashboards is limited by role, logins are rate-limited, and the platform owner's account uses 2-step login. Staff phones used for offline scanning hold only ticket codes and guest names, not emails or phone numbers.

Cookies and tracking: we use only the cookies needed to keep you logged in. Events you save and tickets bought on your phone are remembered in your browser's storage on that phone only; they are not sent to us. We don't use advertising trackers or third-party analytics, and our fonts are served from our own site. Ticket links are private and signed so they can't be guessed. Search engines can list only our public pages (events, help and these policies). Tickets, logins, My tickets and dashboards are marked so they never appear in search results, and we add no tracking code for search engines.

Retention: after an event, buyers' names, emails and phone numbers may be removed from our records after a set period, while the order amount, number and date are kept for accounts.

Your rights: under India's Digital Personal Data Protection Act, 2023 you can ask to see, correct or erase your personal data, or withdraw consent. In My tickets you can download your data and erase your details from orders for events that are over; for anything else write to hello@xortal.net.