Privacy Policy

When you create an account, we collect:

• Your name, email address and phone number. These three are required before you can join a gathering. We use them to confirm who you are and to reach you about an event.
• Optionally: your date of birth, gender, profession, city and locality, a short bio, and a profile photo.
• Your answers to our optional questionnaire, if you choose to fill it in.

When you request a spot or attend, we also hold:

• Which gatherings you requested, were approved for, attended, or cancelled.
• The amount you paid and a payment reference from Razorpay.
• Your ticket code.

We never see or store your card number, UPI ID, CVV or bank details. Those go directly to Razorpay, which is regulated by the RBI as a payment aggregator and has its own privacy policy.

• To create and run your account.
• To decide on your request for a spot, and to run the gathering.
• To take payment and issue your ticket.
• To email you about a gathering you asked to join: approval, ticket, or a decline.
• To keep gatherings safe, including acting on reports about someone's conduct.
• To meet legal and tax obligations.

We do not sell your data. We do not use it for advertising, and we do not send marketing emails unless you separately ask us to.

• Other attendees see only what you choose to put on your public profile. Your email address, phone number and date of birth are never shown to them.
• The host of a gathering you've requested sees your name, contact details and your request, so they can decide and reach you on the day.
• Our service providers: Supabase (database and authentication), Vercel (hosting), Resend (email) and Razorpay (payments). They process data on our instructions.
• Anyone we're legally required to disclose to: for example a lawful request from the police or a court.

Our database and files are hosted with Supabase, and the site runs on Vercel. Some of this infrastructure sits outside India, which the DPDP framework permits. We choose providers who encrypt data in transit and at rest.

• Your profile: while your account is open, and for a reasonable period after you close it in case of a dispute.
• Attendance and payment records: retained after an event, because we need them for tax records and to resolve any payment or conduct dispute.
• Records relating to someone removed for their conduct: kept so we can enforce a ban.

You can ask us to:

• Tell you what personal data we hold about you and who we've shared it with.
• Correct anything that's wrong or out of date. Most of this you can edit yourself in your profile.
• Erase your data and close your account.
• Withdraw your consent, at any time and as easily as you gave it.
• Nominate someone to exercise these rights if you die or become incapacitated.

Write to our Grievance Officer and we'll respond. If you're not satisfied, you can complain to the Data Protection Board of India.

Some data survives an erasure request, like payment records we're required to keep for tax, and the record behind a ban. We'll tell you if that applies.

Access to personal data is restricted, connections are encrypted, and our database enforces row-level rules so one member cannot read another's contact details.

No system is perfect. If a breach affects your personal data, we'll notify the Data Protection Board and tell you what happened, what was exposed, and what you should do.

Yaranaa is for people aged 21 and above. We don't knowingly collect data from anyone under 21. If you believe someone under 21 has created an account, tell us and we'll delete it.

We use only what the site needs to work: a session cookie that keeps you signed in. No advertising or third-party tracking cookies.

We may update this policy. The date at the top shows when it last changed. If a change materially affects how we use your data, we'll tell you by email.