Privacy Policy | Somavesh

1. Introduction

Somavesh is an event discovery, registration, and event management platform designed to make event management seamless, beautiful, and accessible for everyone from solo organizers to large enterprises.

This Privacy Policy explains how Somavesh may collect, use, disclose, store, and otherwise process personal information when you use somavesh.com, Somavesh services, event registration and ticketing features, organizer tools, check-in functionality, and related services.

In this Privacy Policy, "Somavesh," "we," "us," and "our" refer to Somavesh and its operator, subject to confirmation of the legal entity identified below. "You" and "your" refer to a person who visits or uses Somavesh, including participants, organizers, and other users.

This Privacy Policy applies to information processed through Somavesh. It does not necessarily apply to third-party websites, applications, payment providers, or other services that may be linked to or integrated with Somavesh.

Because Somavesh enables independent organizers to create and operate events, the privacy practices of a particular event may also depend on the information requested by that organizer and how the organizer uses information received through the platform.

2. Information We Collect

The information we collect depends on how you use Somavesh. You may browse some parts of the platform without providing an account, while other features require information to provide the requested service.

Depending on your use of Somavesh, we may collect the following categories of information.

2.1 Information You Provide Directly

You may provide information when creating an account, registering for an event, purchasing or requesting a ticket, creating an event, contacting us, or using other Somavesh features.

Depending on the service you use, this may include:

Full name
Email address
Phone number
Account credentials
Profile information
Organization information
Event information
Ticket information
Registration information
Registration form responses
Team or group information
Information required for event participation
Information provided when communicating with Somavesh support
Information submitted to an organizer through an event registration form
Payment-related information or transaction details

We do not necessarily collect every category of information from every user.

You should provide information that is accurate and appropriate for the purpose for which it is requested.

2.2 Information Collected Through Event Registration

Organizers may configure registration forms for their events.

Depending on the particular event, a registration form may request information needed for purposes such as:

Registering participants
Issuing or managing tickets
Confirming eligibility or participation
Managing event attendance
Communicating event information
Organizing teams or groups
Preparing certificates
Meeting event-specific requirements
Providing services associated with the event

The information requested through an event registration form may therefore differ from one event to another.

Organizers are responsible for determining what information they request through their event registration forms and for ensuring that their collection and use of that information comply with applicable law and their obligations to participants.

Somavesh provides the technology through which organizers may collect and manage this information, subject to the applicable relationship between Somavesh and the organizer.

2.3 Payment Information

Somavesh may support multiple payment methods and payment providers, which may include bKash, Nagad, Upay, Visa, Mastercard, and other supported payment methods.

Depending on the payment method selected, a payment may be processed by a third-party payment provider rather than directly by Somavesh.

When a third-party payment provider processes a payment, that provider may collect and process payment information under its own privacy policy and terms.

Somavesh may receive information such as:

Payment status
Transaction reference
Amount
Currency
Payment method
Transaction date and time
Other information necessary to confirm or reconcile a transaction

Somavesh does not state through this Privacy Policy that it stores full payment-card numbers, PINs, passwords, or other sensitive payment credentials unless specifically confirmed in the applicable implementation.

The exact payment providers, payment-processing arrangements, and information exchanged between Somavesh and those providers should be confirmed before publication.

2.4 Event, Ticket, and Attendance Information

When you register for or participate in an event, Somavesh may process information associated with your participation.

This may include:

Event registration status
Ticket status
Ticket identifiers
QR-code or ticket verification information
Check-in status
Attendance records
Event participation information
Certificate-related information
Information needed for event operations

This information may be used to issue and validate tickets, facilitate event access, operate check-in processes, maintain event records, and help organizers manage their events.

A QR code or ticket identifier may function as a way to identify or validate a registration or ticket. Its specific contents and technical implementation may vary by event and platform functionality.

2.5 Information Collected Automatically

When you access or use Somavesh, certain information may be collected automatically by Somavesh or by service providers supporting the platform.

Depending on the implementation, this may include:

IP address
Browser type
Device type
Operating system
Log information
Session information
Referrer information
Pages or features accessed
Platform interactions and usage information
Approximate location derived from technical information
Cookie information
Similar technical identifiers

The precise categories of automatically collected information depend on the technologies currently implemented on Somavesh.

3. How We Use Information

We may use information for the following purposes, depending on how you use Somavesh and the context in which the information was collected.

3.1 Providing and Operating the Platform

We may use information to:

Create and maintain accounts
Authenticate users
Provide event discovery features
Display event information
Process event registrations
Issue and manage digital tickets
Facilitate event participation
Support QR-based ticket verification and check-in
Provide organizer dashboards
Support event operations
Provide customer and technical support

3.2 Processing Transactions

We may use transaction-related information to:

Facilitate ticket purchases or other event-related transactions
Confirm payment status
Maintain transaction records
Reconcile transactions
Process refunds where applicable
Respond to payment-related inquiries
Detect and prevent payment-related fraud or abuse

Where a payment is processed by a third-party provider, that provider may independently process payment information under its own terms and privacy practices.

3.3 Communications

We may use information to send service-related communications, including:

Registration confirmations
Ticket information
Payment confirmations or status updates
Event updates
Changes to event information
Check-in information
Account notifications
Security notifications
Responses to support requests

These communications may be necessary to provide the services you requested and may continue even if you opt out of optional marketing communications.

3.4 Marketing Communications

Where Somavesh sends optional marketing or promotional communications, we may use your contact information for those communications where permitted by applicable law.

Where an applicable opt-out mechanism is provided, you may use it to stop receiving optional marketing communications.

Opting out of marketing communications does not necessarily stop essential service or transactional communications.

3.5 Improving Somavesh

We may use information to:

Understand how the platform is used
Improve usability and functionality
Improve platform performance
Diagnose technical problems
Develop and test new features
Understand event and platform usage patterns
Improve reliability and user experience

Where appropriate, we may use aggregated or otherwise de-identified information for analytical and product-development purposes.

3.6 Security and Fraud Prevention

We may process information to:

Detect suspicious activity
Prevent fraudulent registrations or transactions
Protect user accounts
Prevent unauthorized access
Protect organizers and participants
Investigate abuse or violations of platform rules
Monitor and respond to security incidents
Protect the availability and integrity of Somavesh

3.7 Legal and Compliance Purposes

We may process or disclose information when reasonably necessary to:

Comply with applicable law
Respond to valid legal process
Respond to lawful requests from competent authorities
Establish, exercise, or defend legal claims
Investigate suspected unlawful activity
Enforce applicable terms, policies, or agreements
Protect the rights, property, or safety of Somavesh, users, organizers, or others

4. How We Share Information

We do not treat all information held by Somavesh as information that is automatically available to every organizer or user.

Information may be shared with different recipients depending on why it was collected and what service is being provided.

4.1 Event Organizers

When you register for an event through Somavesh, certain information may be made available to the organizer of that event when necessary to operate the event.

Depending on the event and registration form, this may include information such as:

Name
Email address
Phone number
Ticket information
Registration responses
Team or group information
Registration status
Check-in or attendance status
Other information you submitted specifically for that event

The information available to an organizer depends on the event, the registration process, the organizer's configuration, and the functionality provided by Somavesh.

Organizers do not automatically receive unrestricted access to all personal information held by Somavesh.

4.2 Authorized Event co-organizer

Organizers may designate and authorize a co-organizer to perform operational functions.

Where applicable, an authorized co-organizer may receive or access information necessary for functions such as:

Checking tickets
Verifying QR codes
Confirming registrations
Managing attendance
Supporting participants
Operating the event

Access should be limited according to the functionality and permissions available to the organizer or co-organizer member.

4.3 Payment Providers

Payment-related information may be processed or shared with payment providers when necessary to facilitate a transaction.

These providers may include providers supporting payment methods such as bKash, Nagad, Upay, Visa, Mastercard, or other supported methods.

Payment providers may have their own privacy policies and terms governing their processing of personal and payment information.

4.4 Technology and Infrastructure Providers

Somavesh may use third-party service providers to operate and support the platform.

Depending on the implementation, these providers may support:

Cloud hosting
Email delivery
SMS delivery
Monitoring
Infrastructure management
Other technical services

These providers may process information on behalf of Somavesh where necessary to provide their services.

4.5 Legal and Regulatory Disclosures

We may disclose information where required by applicable law, valid legal process, or a lawful request from an authorized authority.

We may also disclose information where reasonably necessary to protect rights, safety, property, security, or the integrity of Somavesh and its users.

4.6 Business Transfers

If Somavesh or relevant business assets are involved in a merger, acquisition, restructuring, financing, reorganization, sale, or similar business transaction, information may be transferred or disclosed as part of that transaction, subject to applicable law.

Where appropriate, the receiving entity may become responsible for the information in accordance with the applicable transaction and privacy requirements.

5. Organizer-Provided and Organizer-Controlled Data

Somavesh is designed to connect organizers and participants.

Organizers may create events, publish event information, configure registration forms, manage participants, operate check-in, and perform other event-management activities through Somavesh.

When you submit information through an organizer's event registration form:

You provide information through the Somavesh platform.
The information may be made available to the relevant organizer for purposes connected with that event.
Somavesh may process and store that information to provide the platform and related services.
The organizer may use the information for legitimate event-related purposes, subject to applicable law and the organizer's own responsibilities.

Organizers are responsible for determining the information they request from participants and for handling information they receive through Somavesh in accordance with applicable law and their obligations.

For example, an organizer may need participant information to manage registration, issue certificates, organize teams, communicate event updates, or conduct event check-in.

Somavesh does not, however, transfer all responsibility for personal information to organizers. Somavesh remains responsible for its own processing activities and obligations relating to information it handles through its platform.

The exact allocation of responsibilities between Somavesh and an organizer may also depend on the applicable agreement between Somavesh and that organizer.

6. Cookies and Similar Technologies

Somavesh may use cookies and similar technologies to support the operation and security of the platform.

Depending on the technologies implemented, these may be used for:

Essential Functions

To enable core platform functionality, authentication, sessions, and other necessary features.

Security

To help detect unauthorized activity, abuse, or suspicious behavior.

Preferences

To remember certain settings or preferences where applicable.

Analytics and Performance

Where implemented, analytics technologies may help us understand how users interact with Somavesh and identify opportunities to improve performance and usability.

7. Data Retention

We may retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

Provide and maintain Somavesh services
Maintain account and event records
Maintain ticket and attendance records
Maintain transaction records
Support security and fraud prevention
Resolve disputes
Investigate abuse
Meet applicable legal, accounting, or regulatory requirements
Enforce agreements and protect legal rights

Retention periods may vary depending on the type of information, the purpose for which it was collected, the nature of the event or transaction, and applicable legal or operational requirements.

Closing an account does not necessarily result in the immediate deletion of every record associated with that account.

We may need to retain some information for legitimate business, security, dispute-resolution, or legal purposes.

8. Data Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, or misuse.

Depending on the system and information involved, security measures may include:

Access controls
Authentication mechanisms
Encryption where applicable
Secure infrastructure
Monitoring and logging
Restricted access to personal information
Security procedures
Measures designed to identify and respond to security incidents

However, no online service or electronic transmission can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your account credentials and should notify Somavesh if you believe your account has been accessed without authorization.

9. Your Privacy Choices and Rights

Depending on applicable law and the circumstances of the processing, you may have rights concerning your personal information.

These may include the right to:

Request access to personal information
Request correction of inaccurate information
Request updates to information
Request deletion of certain information
Withdraw consent where processing is based on consent
Object to or request restriction of certain processing
Request data portability where legally applicable

These rights are not absolute and may be subject to applicable legal or legitimate exceptions.

For example, Somavesh may need to retain certain information to comply with legal obligations, maintain transaction records, prevent fraud, resolve disputes, or protect security.

To make a privacy request, contact us using the information provided in the Contact Us section.

We may need to verify your identity before responding to certain requests.

10. Account Information

If you have a Somavesh account, you should keep your account information accurate and up to date.

Depending on available functionality, you may be able to:

View your account information
Update profile details
Change certain account information
Manage account settings
Request account closure

If a particular account-management function is not available directly through the platform, you may contact Somavesh support for assistance.

Account closure does not necessarily require or result in immediate deletion of every record associated with the account.

11. Communications

Somavesh may send communications that are necessary to provide services.

11.1 Transactional and Service Communications

These may include:

Registration confirmations
Ticket confirmations
Payment status
Event changes
Event reminders
Check-in information
Account notifications
Security alerts
Support responses

These communications may be necessary for the service and may not be subject to the same opt-out mechanisms as optional marketing messages.

11.2 Marketing Communications

Where Somavesh sends optional marketing communications, you may be provided with an unsubscribe or other opt-out mechanism where required or appropriate.

Opting out of marketing communications will not necessarily prevent Somavesh from sending essential service, transactional, account, or security communications.

12. Children's and Minors' Privacy

Somavesh may be used in connection with events that have different audiences, including events that may be attended by or designed for minors.

Somavesh does not establish a universal minimum participant age through this Privacy Policy unless applicable law, platform terms, or an event separately specify such an age requirement.

Some events may have their own age requirements or may require parental or guardian involvement.

Organizers are responsible for designing and operating their events and registration processes in accordance with applicable requirements concerning minors, including any requirements relating to parental or guardian consent where applicable.

Where Somavesh becomes aware that information has been collected in a manner that violates applicable requirements concerning minors, appropriate steps may be taken based on the circumstances and applicable law.

13. Third-Party Links and Services

Somavesh may contain links to or integrations with third-party websites, applications, payment services, communication services, social platforms, or other external services.

Those third parties may collect and process information independently from Somavesh.

Their privacy practices are governed by their own privacy policies and terms.

We encourage you to review the privacy practices of third-party services before providing information to them.

14. International Data Processing

Somavesh is initially focused on Bangladesh and may use third-party infrastructure or service providers that operate in different locations.

Depending on the platform's technical architecture and service providers, personal information may potentially be processed or stored outside Bangladesh.

Where applicable, international transfers or processing will be handled in accordance with applicable law and the relevant contractual and technical arrangements.

The specific countries, hosting providers, and international transfer mechanisms should be confirmed before this section is finalized.

15. Data Deletion

You may request deletion of certain personal information by contacting Somavesh using the contact information provided below.

Depending on the circumstances, we may be able to delete or anonymize information that is no longer required for legitimate purposes.

However, deletion may not be immediate or absolute.

We may retain certain information where necessary to:

Complete or document transactions
Maintain event records
Prevent fraud or abuse
Maintain security
Resolve disputes
Establish or defend legal claims
Comply with applicable law
Meet legitimate record-keeping requirements

Information contained in backup systems may also remain for a limited period while those systems are securely overwritten or otherwise managed according to applicable retention practices.

16. Security and Fraud Prevention

Somavesh may process information to protect the platform and its users.

This may include processing information to:

Detect suspicious account activity
Prevent fraudulent registrations
Detect potentially fraudulent ticket transactions
Prevent unauthorized access
Protect organizer accounts
Protect participant accounts
Investigate abuse
Identify attempts to misuse the platform
Respond to security incidents

Where appropriate, automated or technical systems may be used to identify suspicious activity. Such systems may be supplemented by human review or other safeguards depending on the circumstances.

17. Legal Basis and Applicable Law

Somavesh may process personal information where permitted or required by applicable law.

Depending on the jurisdiction and circumstances, processing may be necessary to:

Provide a service requested by you
Perform or administer an agreement
Operate and secure the platform
Comply with legal obligations
Protect legitimate interests
Prevent fraud and abuse
Respond to legal requirements
Obtain or rely on consent where consent is legally required

The specific legal basis for processing may differ depending on the user, jurisdiction, information, and purpose.

Somavesh initially operates in the Bangladesh context and does not make a blanket claim through this Privacy Policy that it is subject to any particular foreign data-protection regime.

18. Changes to This Privacy Policy

Somavesh may update this Privacy Policy from time to time.

When we make changes, we will publish the updated version on the Somavesh website and update the "Last Updated" date.

For significant changes, we may provide additional notice where appropriate or required by applicable law.

Your continued use of Somavesh after an updated Privacy Policy becomes effective will be subject to the updated policy to the extent permitted by applicable law.

19. Contact Us

If you have questions about this Privacy Policy, want to make a privacy request, or have concerns about how personal information is handled, please contact Somavesh.

Support Email: [email protected]

When contacting us about a privacy request, please provide enough information for us to understand your request. We may request additional information to verify your identity where appropriate.