The short version
- We collect what we need to review your application, verify you, and contact you about it. Nothing more.
- Only the EventHumans staff who need it can see it. Identity documents are limited to the people who check them.
- We never sell your data. Nothing about you is made public unless you separately agree.
- You can download your data, turn optional choices off, withdraw your application or delete your account yourself, from your account page.
- We delete data on a fixed schedule, listed below, and we tell you if a breach affects you.
Who we are
EventHumans.in is run by Funked Media and Entertainment Private Limited, registered at 3rd Floor, Unit No. 3B, H. No. 1 Soniram Bora Path, Ulubari, Kamrup, Assam, India - 781007. We decide how and why your personal data is used, which makes us the “Data Fiduciary” under the DPDP Act. In this notice “we” means EventHumans and “you” means anyone whose data we hold: applicants, approved EventHumans, people who contact us, and the people at event companies who join early access.
For any question about your data, contact our Grievance Officer, Sourav Deb, at Souravdeb1003@gmail.com.
What we collect and why
We only collect what you give us, what our team adds while reviewing your application, and basic security records.
When you log in
- What we collect
- Your email address, and a one-time code to confirm it.
- If you choose Google: your name, email address and Google account number. Nothing else from your Google account.
- A record of each login: when, how, your IP address and your browser type.
- Why
- To create your account, log you in securely, show you your application, and spot misuse.
- On what basis
- You give it to us so you can log in. Logging in creates your account.
When you apply
- What we collect
- Your name, date of birth, mobile and WhatsApp numbers, email address, city, state and, if you choose, your address.
- The roles you’re applying for, your event experience, skills, languages, transport, travel range and availability.
- A profile photo, and any optional CV, event photos or certificates you upload.
- Your consent choices, with the time and the version of the wording you agreed to.
- Which campaign link brought you to us, only if you’ve allowed analytics.
- Why
- To check you meet the age requirement (18+), review your application, contact you about it and make a decision.
- On what basis
- Your consent, given with the required box on the last step of the form.
If you’re shortlisted
- What we collect
- If we ask you to verify your identity, through a secure link we send you: a government-issued ID of your choice (Passport, Voter ID, Driving licence or Aadhaar), and your PAN and PAN card. If you choose Aadhaar, its first 8 digits are blacked out automatically before it’s saved. We never keep your full Aadhaar number or your biometrics.
- The outcome of our identity check.
- Interview arrangements, and notes our team makes about your application and interview.
- Why
- To confirm you are who you say you are, and to decide whether to approve you. Your ID and PAN are used for nothing else.
- On what basis
- Your consent to the review of your application and, for ID and PAN, a separate consent you give on the upload page before adding them. They are deleted 30 days after the check.
If you’re approved
- What we collect
- An internal talent record with an EH ID, built from your application, showing which details our team has verified.
- Why
- To match you with event work when the platform launches, and to contact you about opportunities.
- On what basis
- Your consent to the review of your application. A public profile needs a separate yes, which you can turn off at any time.
Your profile
- What we collect
- What you add to your profile yourself: a headline, a few lines about you, experience, posts, event photos, certificates and achievements.
- Photos or PDFs you upload as proof of a certificate or achievement. Only our team sees these.
- Reports visitors send about something on your profile, and what our team decided.
- Events an approved organiser adds you to, your answer, and the stars and comments they give you.
- Whether you’ve chosen to be listed in Find EventHumans, the directory for approved organisers.
- Your level (Rising, Trusted or Top EventHuman). We work it out automatically from your organiser reviews, the events you’ve worked, the checks our team has done, your recent posts and how complete your profile is.
- Why
- To show organisers, and anyone you share the link with, the work you've done; to let organisers our team has checked find you, if you choose, with the best-rated first; to show your level on your profile; to mark entries our team has checked as verified; and to take down anything that breaks our rules.
- On what basis
- Your consent. You choose what to add, and the profile is only public while you keep it switched on. Photos are re-saved without their location data. Deleting an entry or photo deletes it from our server straight away.
From event companies
- What we collect
- Company name, your name, work email or phone, city, the kind of events you run, your crew needs and the roles you're interested in.
- Why
- To contact you about early access and understand your staffing needs.
- On what basis
- Your consent, given with the boxes on the early-access form.
If you register an organisation
- What we collect
- Your organisation's name, kind, city, website and description; your name and mobile number; the events you add, the EventHumans you add to them and the reviews you give.
- Why
- To check your organisation before approving it, to run your organiser account, and to show your reviews on the profiles of the people you review, under your organisation's name.
- On what basis
- Running the organiser account you asked for, under the organiser rules you agreed to. Your mobile number is only ever seen by our team.
When you browse or contact us
- What we collect
- Strictly necessary cookies, and server records of requests (IP address, browser type, page and time) used to protect the site.
- Visit and click counts, only if you allow analytics. These never include your name, number, email or uploads.
- The emails you send us and our replies.
- Why
- To keep the site working and secure, understand which pages help people, and answer you.
- On what basis
- Security records are needed to protect the service and meet the law. Analytics needs your permission.
We don’t ask for your religion, caste, health, family, bank or card details, or biometrics, and we don’t buy data about you from anyone else.
Who can see your data
- Our team, and only the parts their role needs. For example, staff who run interviews or look after the website don’t see your date of birth or address, and identity evidence is limited to the staff who verify it. Every time staff open a sensitive file, it’s logged.
- Service providers who run parts of the service for us and may only use your data to do that:
- Website hosting, and storage for the files you upload: Hostinger
- Database: Supabase, with your data stored in Mumbai, India
- Email delivery: Resend (United States)
- Video interviews, if yours is a video call: Google Calendar and Google Meet (United States). The meeting invitation holds your email address and application reference, and is deleted if your interview is cancelled or your data is erased.
- Visit and click counts, only if you allow analytics: Google Analytics, through Google’s Firebase (United States)
- Google, if you choose to log in with Google. Google tells us who you are; logging in this way doesn’t send Google anything about your application.
- Authorities, when the law requires it, such as a court order or a lawful request from a government agency.
We don’t sell your personal data. If you switch your profile on, anyone with its link can see it; it isn’t listed on search engines. If you also choose to be listed in Find EventHumans, event organisers our team has approved can find it there. Organisers never see your phone number, email, address or identity documents: to work with you, they go through our team.
Where it’s stored
Our database is stored in Mumbai, India. The files you upload are kept, encrypted, on our website server at Hostinger, in India. Some providers, such as our email and analytics providers, process data outside India. We only use countries the Government of India hasn’t restricted under section 16 of the DPDP Act, and our contracts require those providers to protect your data.
How long we keep it
We keep personal data only as long as we need it for the purpose you gave it for, or as the law requires. When a period ends, our systems delete the data or anonymise it. Anonymising means we overwrite your name, contact details, date of birth, address and written answers, and delete your files, so what’s left can’t be linked back to you.
How long we keep each kind of data| Data | How long we keep it |
|---|
| One-time login codes | Valid for 10 minutes, stored only in scrambled form, deleted within a day |
|---|
| Login sessions | 30 days, or until you log out |
|---|
| Files uploaded to an application you didn't submit | 24 hours |
|---|
| Your application draft, kept in your own browser | Up to 30 days, or until you submit or log out |
|---|
| Secure document-upload links | 7 days |
|---|
| ID proof and PAN card files, and your PAN | 30 days after we check them. We keep only the outcome of the check |
|---|
| An application you withdraw, or your account if you delete it | Erased straight away |
|---|
| An application we decline, or close because we couldn't reach you | 1 year after the decision, then anonymised |
|---|
| Approved EventHumans | While you're part of the network, and 2 years after you become inactive, then anonymised |
|---|
| Company early-access requests | 1 year after we close them, or 2 years without any activity, then deleted |
|---|
| Accounts with no application, early-access request or organisation | 2 years after the last login, then deleted |
|---|
| Copies of the emails and text messages we send you | 1 year |
|---|
| Security and activity logs | 2 years. The law requires at least one year |
|---|
| Records of what you consented to, and when | Kept as proof of your choices, without your contact details once your data is erased |
|---|
If a law requires us to keep something longer, such as for a legal claim, we keep only what’s needed for that.
How we protect it
- Everything travels over encrypted connections, and every uploaded file is encrypted before it’s stored.
- Files are stored privately and are never available at a public web address.
- Location and camera details are removed from photos when you upload them.
- Staff accounts need a password and an authenticator app, and their access depends on their role.
- We record who did what in our systems, so any misuse can be traced.
If something goes wrong. If a breach affects your data, we’ll tell you without delay: what happened, what it means for you, what we’re doing about it and what you can do to protect yourself. We’ll also report it to the Data Protection Board of India and to CERT-In, as the law requires.
Your rights and how to use them
Most of these take a few seconds on your account page. For the rest, email Souravdeb1003@gmail.com from the email address or phone number you used with us, and include your application reference (it starts with EH-AP) if you have one, so we can be sure it’s you.
- See your data. Download a copy from your account page, or ask us for a summary of what we hold, what we do with it and who we’ve shared it with.
- Correct or update it. Email us and we’ll fix it and confirm.
- Withdraw consent. Turn off updates or the public-profile permission on your account page, or withdraw your application, which erases it. It’s as easy as agreeing was. Withdrawing doesn’t affect what we did before.
- Erase it. Delete your account from your account page, or ask us to. We erase your data unless the law requires us to keep part of it.
- Nominate someone. Tell us who can use these rights for you if you die or become unable to. Email us their name and contact details.
- Complain. Contact our Grievance Officer (below). If you’re not satisfied with our answer, you can complain to the Data Protection Board of India.
In return, the law asks you to give accurate information, not to pretend to be someone else, and not to make false or frivolous complaints.
Questions and complaints
Grievance Officer: Sourav Deb
Email: Souravdeb1003@gmail.com
Post: Funked Media and Entertainment Private Limited, 3rd Floor, Unit No. 3B, H. No. 1 Soniram Bora Path, Ulubari, Kamrup, Assam, India - 781007
We reply within 30 days. If you’re still not satisfied, you can then complain to the Data Protection Board of India. Details are published by the Ministry of Electronics and Information Technology.
Cookies and analytics
We use a few strictly necessary cookies to keep you logged in and keep sign-in secure. Analytics (Google Analytics) stays off unless you allow it, and you can change your mind any time. Our cookies page lists every cookie and storage item, what it does and how long it lasts.
Age, language and changes
Age. Applications are open to people aged 18 and over. We don’t knowingly collect data from anyone younger. If we find we have, we delete it.
Language. You can ask for this notice in Hindi, Assamese, Bengali or any other language listed in the Eighth Schedule of the Constitution. Email Souravdeb1003@gmail.com and we’ll send it to you.
Changes. When we change this notice, we update the version number and date below. If a change affects something you agreed to, we’ll tell you and ask again before it applies to you.
Version 2026-11-03-draft, last updated 4 November 2026. See also our terms of use and cookies page.