Privacy Policy

This policy covers Personalidy, operated by [ENTITY NAME] (“we”, “us”), of [ENTITY ADDRESS]. It explains what personal data we collect when an organiser orders event badges and when their attendees submit a photo, and what happens to it afterwards.

What we collect

• From the organiser (order form): organisation name, contact name, email, phone (optional), event name and date, expected headcount, style choice, and any notes.
• From attendees (roster upload or their own signed link): name, email, role, and — only if they choose to submit one — a photo used to render their badge.

Why we collect it

Order details are used to quote, plan, and produce your event's badges. Attendee names and photos are used solely to render that attendee's own badge — never sold, never reused for another event, and never used to train any model. Submitting a photo is optional; a badge still prints without one.

Who we share it with

We use the following processors to run this service — each only receives what it needs to do its job, and none may use your data for its own purposes:

• Supabase (storage) — hosts attendee photos and event rosters in a private bucket, not publicly readable.
• Resend (email) — sends order notifications and organiser receipts.
• Vercel (hosting) — runs the application and its server logs.

We do not sell personal data, and we do not share attendee photos with anyone other than the organiser who requested that event's badges.

How long we keep it

Attendee photos and event rosters are deleted 30 days after the event date supplied for that order — enough time for reprints or a dispute, not longer. Order enquiry records (organiser name, email, organisation) are kept longer as our business and accounting record.

Your rights

You can ask us to access, correct, or erase your personal data, or to tell you who we've shared it with, by writing to the contact below. Attendees can also ask their event's organiser to forward a deletion request on their behalf. We'll respond within a reasonable time and, where legally required, confirm once it's done.

Grievance Officer

Under India's Digital Personal Data Protection Act, 2023, our Grievance Officer is [GRIEVANCE OFFICER NAME], reachable at [ENTITY CONTACT EMAIL].

Security

Attendee photos are stored in a private, access-controlled bucket. Access is limited to what the application needs to render a badge; we don't publish attendee photos or rosters.

Contact

Questions about this policy, or a request to access/correct/erase your data: [ENTITY CONTACT EMAIL].