Privacy Policy
Effective Date: January 1, 2027 • Fanloop Inc. (fanloop.online)
Fanloop strictly guarantees that Customer Data, Organizer Event Analytics, and Attendee Interactions are never utilized to train, retrain, or fine-tune public foundation AI models (e.g., AWS Bedrock, Anthropic, OpenAI, or external LLMs). Your data remains 100% private to your tenant.
1. Information We Collect
Fanloop Inc. ("Fanloop", "we", "us", or "our") collects information necessary to deliver high-velocity ticketing, viral referral cashback tracking, fraud prevention, and entry verification. This includes:
- Account & Booking Data: Name, business email, mobile number, government ID type (for age-restricted VIP ingress), and transaction identifiers.
- Organizer Business Data: Legal business entity, GSTIN / VAT number, and verified bank account information for automated daily rolling settlements.
- Technical Telemetry: Device identifiers, IP addresses, and encrypted session tokens used solely for fraud prevention and sub-second gate validation.
2. Encryption Standards & Cloud Architecture
All data processed by Fanloop is hosted on enterprise-grade AWS cloud infrastructure (AWS us-east-1 & ap-south-1) with the following safeguards:
All data in transit is encrypted using modern TLS 1.3 protocols with Perfect Forward Secrecy.
All primary databases, backups, and storage volumes are encrypted at rest with AWS KMS managed keys.
3. 100% Customer Data Ownership & Payment Security
Event Organizers retain exclusive ownership of their attendee databases. Fanloop does not sell, rent, or monetize your audience data to third-party advertisers or data brokers.
Payment transactions are processed through Level 1 PCI-DSS certified payment processors (Stripe, Razorpay, Cashfree). Raw card numbers and CVVs never touch or reside on Fanloop application servers.
4. GDPR, CCPA, and India DPDP Rights
Under GDPR (EU/UK), CCPA/CPRA (California), and the Digital Personal Data Protection Act (India), users have the following enforceable rights:
- Right to Access & Portability: Request a complete JSON/CSV export of all personal data held.
- Right to Rectification: Update inaccurate contact or billing details in the user profile.
- Right to Erasure ("Right to be Forgotten"): Request permanent deletion of personal records, subject to mandatory tax retention regulations.
- Right to Opt-Out: Opt out of marketing notifications and non-essential cookie tracking at any time.