Your data, plainly.

• Account details — name, email, phone number, city, and a securely hashed password.
• Booking details — event type, date, venue and address, guest count, notes, and contact person.
• Payment records — amounts, status and provider references. Card and UPI details are handled by Razorpay; we never see or store full card numbers.
• Messages between hosts, artists and TAAL support on the platform.
• Artist verification — PAN, government ID, GSTIN and bank proof, stored privately and visible only to authorised TAAL staff.
• Technical data — a session cookie to keep you signed in, IP address for security and rate limiting, and basic logs.

We process personal data only for these purposes, on the basis of your consent or for legitimate uses permitted under Section 7 of the DPDP Act:

• Creating and managing bookings, payments, refunds and payouts.
• Letting hosts and artists communicate about a booking.
• Verifying artists, preventing fraud and keeping the platform secure.
• Sending service messages (confirmations, reminders, receipts) by email and, where you've provided a number, WhatsApp.
• Meeting legal obligations, including tax and accounting records.

We don't sell personal data, and we don't use it for third-party advertising.

• The other side of your booking — artists see the host's name, event details and venue; hosts see the artist's public profile. Phone numbers are shared only when needed for the event day.
• Data Processors acting on our instructions — Razorpay (payments), our email and WhatsApp providers, and our cloud hosting provider.
• Authorities — when required by law.

• Account data: while your account is active, then erased within 90 days of a deletion request, unless needed for an open booking or dispute.
• Booking, payment and invoice records: 8 years, to meet Indian tax and accounting requirements.
• Artist verification documents: while the artist profile is active, then 1 year after closure.
• Messages: 3 years after the related booking, for dispute resolution.
• Security logs: up to 180 days.

Under the DPDP Act you can:

• Ask for a summary of the personal data we process about you and with whom it has been shared.
• Ask us to correct, complete, update or erase your data.
• Withdraw consent at any time — as easily as you gave it. This doesn't affect processing already done, and some features (like an active booking) may stop working.
• Nominate another person to exercise your rights in case of death or incapacity.
• Raise a grievance with us, and then with the Data Protection Board of India if you're not satisfied.

Make a request via the contact form. We'll respond within 30 days.

Passwords are hashed, sessions are signed and can be revoked, verification documents are stored privately, and staff access is role-restricted and logged. If a personal data breach affects you, we will notify you and the Data Protection Board as the DPDP Act requires.

TAAL is for adults. We don't knowingly collect data from anyone under 18; if you believe we have, contact us and we'll delete it.

Name: [to be appointed before launch]
Email: [to be appointed before launch]
Address: [to be appointed before launch]

Until then, use the contact form and write “Privacy” in your message.