Privacy Policy

Last updated: March 12, 2026

EventoraX ("we", "our", "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

• Account Data: Name, email address, organization details provided during registration.
• Event Data: Information about events you create, attendee registrations, certificates issued.
• Payment Data: Transaction IDs and payment proofs (we do not store card numbers).
• Usage Data: Pages visited, features used, IP addresses, browser type, timestamps.
• Communications: Emails and messages sent through our platform.

2. How We Use Your Information

• To provide and maintain the platform services
• To process subscriptions and verify payments
• To send service notifications and updates
• To generate certificates and event reports
• To improve our platform and user experience
• To comply with legal obligations

3. Data Storage & Security

Your data is stored on secure servers hosted in Pakistan. We implement industry-standard security measures including:

• AES encryption for sensitive data
• bcrypt password hashing (cost factor 12)
• CSRF protection on all forms
• TLS/HTTPS encryption in transit
• SQL injection prevention via prepared statements
• XSS protection on all outputs

4. Multi-Tenant Data Isolation

Each organization's data is completely isolated from other organizations. Tenant administrators can only access data belonging to their organization. We never share one organization's data with another.

5. Data Retention

We retain your data for as long as your account is active. Upon account termination, data may be retained for up to 30 days before deletion. Certificate records may be retained longer for verification purposes.

6. Third-Party Services

We use the following third-party services:

• JazzCash and Easypaisa for payment processing
• SMTP providers for email delivery
• Google Fonts for typography

7. Your Rights

You have the right to access, correct, or delete your personal data. Contact us at admin@eventorax.com for data requests.

8. Cookies

We use session cookies for authentication. These cookies are essential for platform operation and are deleted when you log out or close your browser. We do not use tracking or advertising cookies.

9. Contact Us

For privacy-related queries: admin@eventorax.com