Privacy Policy
Last updated: 29 October 2026
This policy explains what personal data Holdspot collects, why, and what we do with it.
What we collect
- Customers: name, phone number, optional email, number of seats, and payment status/reference (from Razorpay).
- Organizers: email address, business name and WhatsApp number.
- Technical: a login cookie for organizers, and basic server logs (IP address, browser) for security.
We never receive or store card numbers, UPI PINs or bank passwords; Razorpay handles those.
Why we use it
- To create and confirm your booking and show it to the organizer of that event.
- So the organizer can contact you about the event (for example on WhatsApp) and check you in.
- To process payments and refunds, prevent fraud, and meet legal obligations.
Who we share it with
- The organizer of the event you booked (your name, phone, email and booking details).
- Service providers that run Holdspot: Razorpay (payments), Supabase (database and login), Vercel (hosting) and Resend (login emails).
- Authorities, if required by law.
We do not sell your data or use it for advertising.
How long we keep it
Booking records are kept for as long as needed for accounting and tax purposes (generally up to 8 years), then deleted.
Your choices
You can ask us to access, correct or delete your data by writing to abhayjain33@gmail.com. We may need to keep some records where the law requires it.
Contact / Grievance officer
TODO: Legal name (e.g. Abhay Jain, proprietor of Holdspot), TODO: Registered address, City, State, PIN. Email: abhayjain33@gmail.com. Phone: TODO: +91 XXXXX XXXXX. We respond within 30 days.