Privacy Policy

This Privacy Policy explains what data Shownook collects, how we use it, who we share it with, and the choices you have.

1. Data We Collect

1.1 Information You Provide

• Account data: Name, email address, phone number, and password (stored hashed with bcrypt).
• Profile data: Profile picture and organiser details (for DIY portal users).
• Transaction data: Tickets purchased and booking IDs. Payment details are handled exclusively by Razorpay and never stored on our servers.

1.2 Information Collected Automatically

• Usage data: Pages visited, search queries, events viewed, and session duration.
• Device data: IP address, browser type, operating system, and device identifiers.
• Cookies & local storage: Used for session management and authentication. See Section 6.

2. How We Use Your Data

• To create and manage your account and authenticate your sessions.
• To process ticket purchases and send booking confirmations.
• To provide access to purchased live streams and on-demand content.
• To send transactional emails (booking confirmations, password resets, event reminders).
• To personalise event recommendations and search results.
• To detect fraud, abuse, and security threats.
• To comply with legal obligations.

We do not sell your personal data to third parties or use it for advertising purposes.

3. Data Sharing

We share your data only with:

• Razorpay: Our payment processor, under their own privacy policy (razorpay.com/privacy).
• Event Organisers: When you purchase a ticket, the Organiser receives your name and email to manage attendance. Organisers are bound by our data processing terms.
• Infrastructure providers: Cloud hosting and CDN providers who process data on our behalf under strict data processing agreements.
• Legal authorities: When required by applicable law or court order.

4. Data Retention

We retain your account data for as long as your account is active. Booking records are retained for 7 years to comply with financial regulations. You may request deletion at any time subject to legal retention obligations.

5. Data Security

• All data in transit is encrypted via TLS (HTTPS).
• Passwords are stored using bcrypt hashing with a strong salt factor.
• Session tokens are stored in HTTP-only, Secure cookies.
• Video streams are protected via DRM and JWT-based access control.
• Access to production systems is restricted to authorised personnel only.

6. Cookies

We use the following cookies:

• Authentication cookies (user_token): HTTP-only, Secure. Required for session management. Expires in 7 days.
• Preference cookies: Store your UI preferences such as category filters. These are non-identifying.

We do not use advertising or third-party tracking cookies. You can disable cookies in your browser settings, but this will prevent you from logging in.

7. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update inaccurate data via Account Settings or by contacting us.
• Deletion: Request deletion of your account and personal data.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing of your data in certain circumstances.

To exercise any of these rights, email privacy@shownook.com. We will respond within 30 days.

8. Children's Privacy

Our Platform is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or via a prominent notice on the Platform.

10. Contact

For privacy-related questions, email privacy@shownook.com.