Privacy Policy

1. Information We Collect

We collect the following information when you use Tikora:

• Account information: Name, email address, phone number, city
• Booking information: Events booked, tickets purchased, payment details
• Usage data: Pages visited, search queries, device information, IP address
• Communication data: Reviews, messages, support tickets
• Payment data: Processed securely through payment gateways. We do not store full card numbers.

2. How We Use Your Information

• To process bookings and deliver tickets
• To send booking confirmations, reminders, and updates
• To personalize event recommendations
• To improve our platform and features
• To prevent fraud and ensure platform security
• To communicate important service updates
• To process refunds and resolve disputes

3. Data Sharing

We share your information only with:

• Event organizers: Name and contact info for attendee management
• Payment gateways: For processing transactions (Razorpay/Stripe)
• Email services: For sending transactional emails
• Analytics: Anonymized usage data for platform improvement
• We do NOT sell your personal data to third parties

4. Data Security

• Passwords are hashed using bcrypt (never stored in plain text)
• Authentication uses secure JWT tokens with HTTP-only cookies
• All API communications are encrypted
• Database access is restricted and monitored
• Regular security audits are conducted

5. Cookies

We use essential cookies for authentication and session management. We use analytics cookies to understand platform usage. You can disable non-essential cookies in your browser settings.

6. Your Rights

• Access: You can view all your data in your profile
• Update: You can edit your profile information anytime
• Delete: You can delete your account from Settings
• Export: Contact us to request a copy of your data
• Opt-out: You can manage notification preferences in Settings

7. Data Retention

We retain your data for as long as your account is active. Booking records are kept for 3 years for tax and legal compliance. After account deletion, personal data is removed within 30 days, except where legally required to retain.

8. Children

Tikora is not intended for users under 13 years of age. We do not knowingly collect data from children under 13.

9. Changes

We may update this policy from time to time. Significant changes will be notified via email or platform notification.

10. Contact

For privacy-related queries, contact us at privacy@tikora.com