Book a demo

Trust centre

Data protection and India’s DPDP Act

Under India’s Digital Personal Data Protection Act 2023, the organiser is usually the Data Fiduciary for participant data and Sociana is its Data Processor. We give organisers scoped access and full exports, and participants can delete their account inside the app.

Roles

DataData FiduciarySociana’s role
Participants’ profiles, posts, attendance, hospitality details, step dataThe organiserProcessor, acting on the organiser’s instructions and set-up
Organiser accounts and billingSociana (Alien Brains Private Limited)Fiduciary
Enquiries sent through this websiteSocianaFiduciary; used only to reply to and follow up on your enquiry

What we do as your processor

  • Process participant data only to run the event you set up, on your instructions.
  • Give your team access scoped by role and event, and exports of every module.
  • Let participants delete their account from inside the app.
  • Delete or return your event data when you ask, and confirm it in writing.
  • Tell you promptly about any security incident affecting your data, so you can meet your own duties.

Participant rights

Participants can ask the organiser, or us, for access to, correction of or deletion of their data. Email hello@sociana.in with “Privacy” in the subject and we will help, working with the organiser where the data belongs to their event.

Website enquiries: our notice as Data Fiduciary

  • What and why: your name, email, optional mobile number and what you are planning, so we can reply and follow up. Details are on the privacy policy, including the cookies, the salted IP hash and the providers involved (Cloudflare, Brevo, AiSensy, and OpenAI or Anthropic when the website assistant is on).
  • How long: deleted automatically 24 months after the enquiry arrives, or sooner when you ask.
  • Withdrawing consent: email hello@sociana.in with “Privacy” in the subject, or reply STOP on WhatsApp. We stop contacting you and delete the enquiry.
  • Your rights: access, correction, completion and erasure of your data, and nominating someone to act for you.
  • Grievance contact: hello@sociana.in, with “Grievance” in the subject.
  • Complaints: if you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Sensitive features are opt-in

Step tracking needs the participant’s own permission on their phone, and Smart Lens face matching is off unless the organiser switches it on and the participant chooses to use it. See health data and Smart Lens.

FAQ

Common questions

Is Sociana a Data Fiduciary or a Data Processor under the DPDP Act?

For participant data in your event, you, the organiser, are normally the Data Fiduciary and Sociana is your Data Processor, acting on your instructions. For enquiries on this website and for organiser accounts, Sociana is the Data Fiduciary.

Can we sign an NDA or data-processing terms?

Yes. We sign NDAs, and enterprise contracts can include data-processing terms aligned with the DPDP Act. Ask your Sociana contact or email hello@sociana.in.

What about participants from the EU or UK?

For destination weddings or international delegates we act as the organiser’s processor under contract. Sociana does not hold any GDPR certification.

Questions from your IT or legal team?

Send your security questionnaire to hello@sociana.in with “Security” in the subject, or book a call with our team.

Talk to us