Updated at : Aug 06, 2026
Welcome to spotlyte’s Privacy Policy
This User Privacy Policy applies to personal data handled by Spotlyte in connection with the attendee-facing Platform. It should be read with the User Terms & Conditions and the privacy information shown at booking, marketing consent, or any feature that collects additional data.
1. Scope and responsibility
1.1.Spotlyte determines the purposes and means of processing personal data needed to operate accounts, bookings, payments, communications, support, fraud prevention, and the Platform. In those activities, Spotlyte acts as the responsible business under applicable data protection law.
1.2.Organisers may receive Attendee data needed to deliver and manage an Event. An Organiser may be independently responsible for its Event operations and any separate data use it determines, subject to its obligations to Spotlyte and applicable law.
1.3.This policy does not govern an independent Organiser website, venue system, sponsor form, transport service, or third-party service that collects data directly from you outside Spotlyte.
2. Personal data we may collect
2.1.Account and identity data, such as name, display name, age or date-of-birth information where needed for age-restricted Events, and login or authentication information.
2.2.Contact data, such as mobile number, email address, postal address where required, and communication preferences.
2.3.Booking and Ticket data, such as Event, Ticket category, quantity, Attendee names, Order value, booking status, QR or Ticket identifiers, transfer status, check-in status, and related Event instructions.
2.4.Payment and transaction data, such as payment method type, amount, currency, gateway or bank reference, payment status, refund status, chargeback status, and limited billing information. Payment credentials are processed by payment service providers under their own security controls.
2.5.Support and communication data, including emails, chats, WhatsApp or SMS interactions, call details, complaints, refund requests, screenshots, uploaded evidence, and responses.
2.6.Device and usage data, such as IP address, browser, operating system, device identifiers, session data, pages viewed, clicks, referral source, approximate location derived from IP, and technical logs.
2.7.Safety, fraud, and compliance data, such as suspected misuse, failed payments, account risk indicators, duplicate Tickets, chargeback records, security alerts, and lawful authority requests.
2.8.Optional data you choose to provide through reviews, surveys, marketing preferences, accessibility requests, waitlists, promotions, or other features where enabled.
3. How data is collected
3.1.Directly from you when you register, book, enter attendee details, contact support, request a refund, check in, join a waitlist, respond to a survey, or use another Platform feature.
3.2.From the person making a booking for you, where one buyer provides details for multiple Attendees. The buyer must have authority to provide those details and should share this policy with the Attendees.
3.3.From Organisers and Event staff, including Event changes, guest-list updates, admission issues, attendance or check-in records, and Event-specific support information.
3.4.From payment gateways, banks, communication providers, anti-fraud tools, analytics providers, device technologies, and other service providers used to operate the Platform.
4. Why we use personal data
4.1.To create and secure accounts, authenticate users, manage guest bookings, and maintain preferences.
4.2.To process Orders, confirm payments, issue Tickets, enable transfers where permitted, verify Tickets, and record Event check-in.
4.3.To send booking confirmations, Event reminders, entry instructions, schedule or venue updates, cancellation or postponement notices, refund updates, and service messages.
4.4.To share necessary booking and Attendee data with the Organiser so the Event can be delivered, supported, and administered.
4.5.To provide customer support, investigate complaints, correct records, process eligible refunds, and resolve payment or Ticket disputes.
4.6.To detect, prevent, and respond to fraud, unauthorised access, duplicate Tickets, payment abuse, chargebacks, unlawful activity, safety concerns, and breaches of Platform rules.
4.7.To maintain, troubleshoot, analyse, secure, and improve the Platform and develop new features.
4.8.To comply with tax, accounting, payment, consumer protection, data protection, legal, regulatory, and lawful authority requirements.
4.9.To send optional promotions or personalised recommendations where permitted and based on the consent or choice provided.
5. Consent and other lawful processing
5.1Spotlyte will obtain consent where applicable law requires it, including for optional marketing or a feature that is not necessary for the booking or service requested.
5.2You may withdraw consent for optional processing through the method provided or by contacting Spotlyte. Withdrawal does not affect processing already completed and may not stop processing that is necessary or permitted for booking administration, fraud prevention, legal compliance, or disputes.
5.3Where processing is necessary to provide the service you request, failure to provide required data may prevent account creation, payment, Ticket issue, admission verification, support, or refund processing.
6. When data is shared
6.1.With the Organiser and authorised Event staff, to the extent reasonably needed for attendee lists, Ticket validation, check-in, Event communications, support, refunds, safety, and Event delivery.
6.2.With payment gateways, banks, financial service providers, tax or invoicing providers, fraud and chargeback services, and auditors for payment processing, reconciliation, compliance, and disputes.
6.3.With cloud hosting, database, analytics, customer support, email, SMS, WhatsApp, notification, security, identity, and other vendors that process data for Spotlyte under contractual and security requirements.
6.4.With professional advisers, insurers, auditors, or prospective business transaction parties where reasonably necessary and subject to confidentiality or legal safeguards.
6.5.With courts, regulators, police, tax authorities, payment networks, or other competent authorities where required by law or reasonably necessary to protect rights, safety, payments, or Platform integrity.
6.6.Spotlyte does not sell Attendee personal data. Organisers are prohibited from selling Attendee data received through Spotlyte or using it for unrelated marketing without separate permission.
7. Organiser communications and marketing
7.1.An Organiser may use Attendee data received from Spotlyte to deliver, administer, and communicate about the booked Event.
7.2.Event-specific messages may include entry instructions, timing changes, venue directions, safety notices, attendee support, cancellation, postponement, and refund information.
7.3.An Organiser may send unrelated marketing only where the Attendee has separately consented and applicable law permits it. Report suspected misuse to complaints@spotlyte.app.
8. Cookies and similar technologies
8.1Spotlyte may use cookies, local storage, software development kits, pixels, and similar technologies for login, security, session continuity, preferences, performance, analytics, fraud prevention, and, where enabled and permitted, marketing.
8.2.Essential technologies may be required for the Platform to function. Non-essential technologies should be controlled through the consent or settings mechanism made available on the website or app.
8.3.Browser or device settings may block some technologies, but doing so may affect checkout, login, Ticket display, or other features.
9. Data retention
9.1.Spotlyte retains personal data only for as long as reasonably necessary for the purposes described in this policy, including account operation, Event administration, payment reconciliation, refunds, chargebacks, fraud prevention, tax, consumer complaints, legal claims, and regulatory compliance.
9.2.Retention periods may differ by record type. Transaction, tax, consent, complaint, security, and dispute records may be retained after account deletion where required or permitted by law.
9.3.When data is no longer needed, Spotlyte will delete, anonymise, or securely isolate it in accordance with applicable requirements and operational processes.
10. Security
10.1.Spotlyte uses reasonable technical and organisational measures intended to protect personal data against unauthorised access, alteration, loss, misuse, or disclosure.
10.2.No internet, messaging, payment, or storage system can be guaranteed completely secure. You should protect passwords, one-time passwords, devices, email accounts, Ticket links, and QR codes and notify Spotlyte of suspected compromise.
10.3.Where a personal data breach requires notice under applicable law, Spotlyte will take the steps and provide the notifications required.
11. International and cross-border processing
11.1.Some service providers may process or store data in locations outside your state or country. Spotlyte will use providers and safeguards consistent with applicable law and any government restrictions on cross-border transfer.
12. Your choices and rights
12.1.You may access or correct certain account information through the Platform or by contacting support.
12.2.Subject to applicable law and verification, you may request information about processing, correction, completion, updating, erasure, withdrawal of consent, or grievance redressal.
12.3.Spotlyte may decline or limit a request where the law permits, including where data must be retained for tax, payment, fraud prevention, security, disputes, legal claims, or the rights of another person.
12.4.You may opt out of optional marketing using the method in the message. Booking, Event, security, payment, refund, legal, and policy communications cannot be disabled while relevant to an active transaction or account
12.5.Spotlyte may require identity or account verification before responding to a rights request and may ask for information needed to locate the relevant records.
13. Children and minor Attendees
13.1.Paid booking accounts are intended for adults unless Spotlyte expressly enables another lawful process.
13.2.Where an adult books for a minor, Spotlyte may process the minor's name, age category, Ticket, guardian information, check-in status, and Event-specific information reasonably needed for booking and admission.
13.3.Parents or lawful guardians should not provide more information about a child than the booking or Event requires and should contact Spotlyte regarding an incorrect or unauthorised minor record.
14. Policy changes
14.1.Spotlyte may update this policy to reflect changes in law, Platform features, providers, or data practices. The current version will state its effective date.
14.1.Material changes will be notified through the Platform, registered contact details, or another reasonable method where appropriate.
15. Contact and grievance redressal
Spotlyte
993/44A1, South Weavers Colony, Nesamony Nagar, Nagercoil - 629003, Kanyakumari, Tamil Nadu, India
Support: support@spotlyte.app | +91 75300 99945
Grievance Officer: Vikram | complaints@spotlyte.app
Website: https://www.spotlyte.app