KwikUp

Legal

Privacy Policy

Last updated 25 October 2026

We collect only what we need to run forms, events and payments, we never sell your data, and you can ask us to access, correct or delete it.

1. Who this applies to

This policy explains how Haronex Technology Pvt. Ltd. (“KwikUp”) handles personal data when you use our website and apps — as an organiser with an account, or as an attendee filling in a form or buying a ticket.

Organisers decide what their forms ask. For responses to an organiser’s form, the organiser is responsible for that data (the “data fiduciary”) and KwikUp processes it on their behalf. Contact the organiser about their use of your answers; we’ll help where we can.

2. What we collect

  • Account details: name, email, phone, password (stored hashed), profile photo, and Google account basics if you sign in with Google.
  • Organiser details: business name, bank account and KYC details needed for payouts.
  • Form and registration data: the answers and files you submit, tickets, check-ins and certificates.
  • Payment records: amount, status and Razorpay payment/order IDs. Card, UPI and bank credentials are handled by Razorpay and never reach us.
  • Usage data: IP address, device and browser type, pages viewed and form views, used for security and analytics.
  • AI page builder: the description and answers you enter when you generate a page.

3. How we use it

  • To run KwikUp: host pages, take registrations, process payments and refunds, send tickets, reminders and certificates, and pay organisers.
  • To keep it safe: prevent fraud and abuse, and meet legal, tax and accounting obligations.
  • To support you and improve the product, using aggregated usage data.
  • To send service emails. We send marketing emails only if you opt in, and every one has an unsubscribe link.

4. Who we share it with

We don’t sell personal data. We share it only as needed to provide the service:

  • The organiser of a form or event you register for receives your answers and registration details.
  • Service providers working for us: Razorpay (payments and payouts), Cloudinary (file and image storage), our email delivery provider, our cloud hosting and database providers, Google (sign-in, and the Gemini API for the AI page builder) and Google Maps (venue maps).
  • Authorities, when the law requires it or to protect people from harm or fraud.

Some providers may process data outside India, with safeguards required by law.

5. Cookies and local storage

We use essential cookies and browser storage to keep you signed in, remember drafts and settings, and protect against abuse. We don’t use advertising cookies. With your permission (the banner shown on your first visit) we use Google Analytics cookies on our own website to see which pages are useful; they are never used on organisers’ event pages, forms, tickets or certificates, or in your account. If you decline, analytics stays off. You can change your choice by clearing this site’s data in your browser. You can clear them in your browser settings, but you may need to sign in again.

6. How long we keep it

  • Account data: while your account is open, and up to 90 days after you close it.
  • Form responses: until the organiser deletes them or their account.
  • Payment and invoice records: 8 years, as required by Indian tax and accounting law.
  • Security logs: up to 180 days.

7. Security

Data is encrypted in transit (HTTPS). Passwords are hashed, access to production systems is restricted, and payments are processed by a PCI-DSS compliant gateway. No system is perfectly secure; if a breach affects you, we will notify you and the authorities as the law requires.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 you can ask to access, correct or erase your personal data, withdraw consent, and nominate someone to act for you. Organisers can export or delete responses from their dashboard; you can update your profile in Settings.

To make a request, contact us using the details below. We may need to verify your identity, and some records (such as payment records) must be kept by law.

9. Children

KwikUp is not meant for children under 18 to use on their own. Organisers collecting data about children (for example, for a school event) must get verifiable consent from a parent or guardian.

10. Contact and grievances

For privacy questions or complaints, contact our Grievance Officer at support@kwikup.in or on WhatsApp at +91 95745 10371. We aim to respond within 7 days and resolve complaints within 30 days.

If you’re not satisfied, you can complain to the Data Protection Board of India.

11. Changes

We’ll update the date at the top when this policy changes, and notify account holders of significant changes. See also our Terms of Service.