Privacy Policy

Nili runs Nili and is responsible for your personal data as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act). This policy applies to the Nili website and app. It doesn't cover a host's or venue's own handling of data at their events.

• To run your account and sign you in.
• To sell and issue tickets, take payments, send tickets and receipts, and handle cancellations, refunds and transfers.
• To let hosts and their door staff check you in and manage their guest list.
• To show you to other guests and let you poke, match and chat, if you choose to be visible.
• To show parties near you and ones you might like.
• To keep Nili safe: preventing fraud, ticket touting, spam and abuse, and enforcing our Terms and Community Guidelines.
• To understand how Nili is used and improve it, mostly with aggregated data.
• To meet legal duties, such as tax and accounting records, and to respond to lawful requests from authorities.
• To send you service messages about your bookings. We'll only send marketing if you've agreed to it, and you can opt out at any time.

We process your data with your consent, which you give when you sign up and use these features, or where the DPDP Act allows it without consent, such as when you've shared data for a specific purpose like a booking, or to comply with the law.

We share personal data only as needed to run Nili:

• Hosts and their door staff, for parties you book or ask to join, as described above.
• Service providers who work for us under contract: Supabase (database and sign-in), Vercel (hosting and privacy-friendly analytics), Razorpay (payments, refunds and payouts to hosts), Resend (email) and Google (if you sign in with Google). They may only use your data to provide their service to us.
• Address search, for hosts: the text you type in a party's address field, and your rounded location if you shared it, goes from our servers to our address search service, Google Maps Platform or Photon by Komoot (a public OpenStreetMap search). It isn't linked to your name or account.
• Tax authorities, for hosts: the tax we withhold or collect on payouts (TDS and GST TCS) is reported under your PAN and GSTIN, as the law requires.
• Authorities, when the law requires it, or to protect someone's safety or rights.
• A buyer or successor, if Nili is sold or merged, who must keep protecting your data as this policy describes.

Some providers store data outside India. Where they do, we rely on the safeguards in our contracts with them and the DPDP Act's rules on transfers.

• Your account and profile: until you delete your account.
• Messages, pokes and blocks: until you delete your account, or the other person deletes theirs.
• Tickets, orders, payments, refunds and host payouts: as long as tax and accounting law requires, usually up to 8 years. After you delete your account, the name and email on tickets for past parties stay on that party's records, and the rest is unlinked from you. A host's payout account link is deleted with their account.
• Venue partner contacts: while the venue is listed with us, then for as long as the law requires for our records.
• Logs: for a short period, for security and fixing problems.

Under the DPDP Act and other Indian law, you can:

• See and correct your details in your profile and Settings.
• Get a copy of your data: use “Download my data” in Settings.
• Delete your account and its data from Settings, after cancelling or sending tickets for upcoming parties.
• Withdraw consent, for example by hiding from guest lists or opting out of marketing. This doesn't affect what we did before, and some features need the data to work.
• Ask us about how your data is processed and who we've shared it with.
• Nominate someone to exercise your rights if you die or can no longer do so yourself.
• Complain to our Grievance Officer, and if you're not satisfied, to the Data Protection Board of India.

To use a right we haven't built into the app yet, write to privacy@niliparty.app. We may need to check it's really you first.

We use your browser's storage to keep you signed in and to remember small preferences, such as the party you're scanning tickets for. Our analytics are cookie-free and count visits without building a profile of you. We don't use advertising cookies. You can clear this storage in your browser, but you'll be signed out.

Your data is sent over encrypted connections, access to it is limited to the people and systems that need it, and only our servers can read chats, pokes and other guests' details. No service is perfectly secure; if a breach affects you, we'll tell you and the Data Protection Board as the law requires. Please use a strong, unique password.

Nili is for adults. You must be 18 or older to use it, and we don't knowingly collect data from children. If you think a child has an account, tell us and we'll remove it.

We'll update this policy when what we collect or how we use it changes. We'll change the date at the top and, for significant changes, tell you in the app or by email first.

Privacy questions and requests: privacy@niliparty.app.

Questions or complaints about these pages, your account or a booking can go to support@niliparty.app.

Grievance Officer, grievance@niliparty.app. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.

Nili.