Privacy Policy

Book My Beats ("Book My Beats", "we", "us" or "our") operates the bookmybeats.com website and the Book My Beats mobile app (collectively, the "Platform"), which lets people discover and book tickets for live events and sports venues, and lets organisers ("Hosts") create, list and sell tickets to their own events. This Privacy Policy explains what information we collect, how we use it, who we share it with, the legal grounds we rely on, and the choices and rights you have.

This Policy is primarily written for users in India and is designed to align with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), which is the law that principally governs our processing of personal data. If you access the Platform from another country, additional local rights may apply to you and we'll honour them where required by law.

By using the Platform you agree to the collection and use of information as described here. If you don't agree, please don't use the Platform.

1. Scope

This Policy applies to:

• Visitors who browse the Platform without creating an account
• Users who register, book tickets, or otherwise attend events via the Platform
• Hosts who create, list and sell tickets to their own events, and receive payouts through the Platform

It doesn't cover third-party sites or services linked from the Platform (for example a Host's own website or social media, or the payment page hosted by Cashfree) - those are governed by their own privacy policies.

2. Information we collect

2.1 Account & profile information

We authenticate you with a one-time password (OTP) sent via WhatsApp to your mobile number - we don't offer email/password or Google/ Facebook sign-in, so your phone number is the core identifier for your account. Once you're signed in, we store a profile linked to your account, which may include your name, email address, date of birth, bio, profile photo, username, website URL and selected city.

2.2 Location information

To show you events and venues nearby, we ask for your city. You can pick it manually from the city list, or let your browser/device share your precise coordinates - we reverse-geocode those coordinates into a city and state using a third-party geocoding service (OpenStreetMap Nominatim) and remember that label so we don't have to ask again every visit. See Section 5 (Cookies) for exactly where this is stored.

2.3 Booking & transaction data

When you book tickets we record the event, ticket tiers and quantities, any discount code applied, the base amount, platform fee, applicable taxes (GST), the final amount charged, and the resulting payment and booking status. Confirmed bookings are issued as an M-Ticket with a unique QR code used for entry at the venue.

2.4 Payment information

Payments are processed by our payment partner, Cashfree (a DPDP/RBI-regulated Indian payment aggregator). We do not collect or store your full card number, UPI PIN or net-banking credentials - Cashfree handles that directly on its own checkout and shares only the payment status and transaction references with us.

2.5 Host & payout information

If you create events and sell tickets as a Host, we collect additional information needed to onboard you as a payout vendor with Cashfree and meet tax obligations: your legal/business name, email (optional), phone, account type (individual or business), PAN (optional), business type, GSTIN (optional), payout schedule preference, and either your bank account number, IFSC code and account holder name, or your UPI VPA. Bank account numbers are masked wherever we display them back to you.

If a Host's event venue is set by pasting a Google Maps link, that link is resolved into an address and coordinates using the Google Maps Platform (server-side) - Google processes the link and returns location data back to us; it does not receive any other information about you.

2.6 Content you upload

Profile photos, event banner images, event descriptions, FAQs, story media and similar content you upload are stored in our cloud storage (Amazon S3, hosted in the Mumbai, India region) and may be shown publicly on event or profile pages.

2.7 Social & activity data

We keep track of organisers you follow, events you mark as "Interested", stories you view, tickets you split or share with others, and suggestions you submit (e.g. for event FAQs or attributes), so we can personalise your feed and make these features work.

2.8 Support communications

If you contact us by email, phone, WhatsApp or social media, we keep a record of that conversation to help resolve your query and improve our support.

3. Cookies & similar technologies

We use browser cookies and local storage only for essential, operational purposes - we don't run any third-party analytics, advertising or tracking scripts on the Platform today.

• Session cookies (bmb_at, bmb_rt) keep you signed in across visits and let our servers render pages that need to know who you are.
• Location cookie (bmb-location-coords) mirrors your last-known city coordinates so pages can be server-rendered with nearby events without asking your browser for location again.
• Local storagecaches your selected city label (so we don't re-prompt you every visit) and, if you arrived via a promotional or referral link, a short-lived attribution code (kept for up to 30 days) so we can credit the right link if you later book a ticket.

You can clear cookies and local storage from your browser settings at any time; doing so will sign you out and reset your saved city.

4. How we use your information

• Create and manage your account, and authenticate you securely
• Show you relevant events, venues and categories near your selected location
• Process bookings and payments, issue M-Tickets, and let venues scan them for entry
• Let Hosts create, publish and manage events, tickets, discounts and payouts
• Send booking confirmations, reminders, approval updates and (if enabled) offers and notifications
• Provide customer support and respond to your requests
• Detect, investigate and prevent fraud, abuse, and violations of our' Terms & Conditions
• Comply with tax, accounting and other legal obligations (e.g. GST record-keeping)

5. Legal grounds for processing

Depending on the context, we process your data because it is:

• Necessary to provide a service you asked for - e.g. creating your account, processing a booking, or onboarding you as a Host
• Necessary to comply with a legal obligation - e.g. GST, tax and accounting record-keeping
• Based on your consent - e.g. sharing your precise location, or receiving optional promotional notifications, both of which you can decline or withdraw at any time without affecting the core service
• Necessary for our legitimate interests - e.g. keeping the Platform secure, preventing fraud, and improving reliability - balanced against your right to privacy

6. Who we share information with

We don't sell your personal information. We share it only in the following situations:

• Event Hosts - when you book a ticket, the organiser can see your name, contact details, ticket tier and approval status so they can manage attendance and check you in
• Service providers- Cashfree (payments and payouts), Meta's WhatsApp Business Platform (OTP delivery), Amazon Web Services (cloud storage), and Google Maps Platform (resolving venue addresses supplied by Hosts), each of whom processes data only as necessary to provide their service to us
• Legal & safety - where required by law, regulation, legal process, or to protect the rights, property or safety of Book My Beats, our users, or the public
• Business transfers - if Book My Beats is involved in a merger, acquisition or asset sale, your information may be transferred as part of that transaction

7. International data transfers

Our infrastructure and core service providers (Cashfree, Amazon Web Services) are based and store data in India. Meta, which delivers our WhatsApp OTP messages, is a US-headquartered company and may process message content and your phone number outside India as part of delivering that message. We only share what's strictly needed for that purpose.

8. Data retention

We retain your account and booking data for as long as your account is active, and afterwards for as long as needed to resolve disputes, enforce our agreements, and meet tax, accounting and other legal obligations (for example, invoices and payout records are typically retained for several years to comply with Indian tax law).

9. Your choices & rights

Subject to applicable law (including the DPDP Act), you have the following rights over your personal data:

• Access & correction - update your name, photo, bio and other profile details any time from your profile settings, or ask us for a copy of the data we hold about you
• Withdraw consent - for anything we process based on your consent (like precise location or promotional notifications), you can withdraw it at any time without affecting the lawfulness of processing already done
• Location - you can deny or revoke location permission in your browser/device settings and select your city manually instead
• Notifications - booking reminders and offer notifications can be toggled off from your profile preferences
• Erasure & grievance redressal - see our Data Deletion Instructions for how to delete your account and data, or contact our Grievance Officer (Section 13) with any complaint about how we handle your data

10. Data security

We use industry-standard safeguards - including encryption in transit, access controls, and masking of sensitive fields like bank account numbers - to protect your information. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

11. Children's privacy

The Platform is not directed at children under 18. We don't knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we'll remove it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above, and for material changes we'll provide a more prominent notice (such as an in-app message).

13. Grievance Officer & contact us

If you have questions about this Privacy Policy or want to exercise any of the rights above, reach out to our Grievance Officer at' support@bookmybeats.com or call +91 90337 17372 (Mon–Sat · 10 AM – 7 PM IST). We aim to acknowledge every request promptly and resolve it as quickly as reasonably possible.