Privacy Policy
Our Core Privacy Commitments
We do not track continuous background GPS or sell your location data to advertisers.
Payment card numbers, UPI PINs, and banking credentials never touch Inlo servers.
You can request complete account and data erasure anytime through our support desk.
1. Scope and Applicability
This Privacy Notice is issued in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. It applies to all personal data processed by Inlo Technologies Private Limited ("Data Fiduciary") when you use our mobile and web applications.
2. Personal Data We Collect
A. Account & Identity Data
Mobile number, full name, email address, and profile preferences collected during sign-up for account creation and authentication via OTP.
B. Activity & Booking Data
Session reservation history, redeemed activity passes, venue attendance check-in timestamps, and credit ledger balance.
C. Transaction & Billing Data
Payment transaction IDs, pack purchase amounts, GST invoice numbers, and payment status. Card details are processed directly by RBI-licensed payment aggregators.
D. Locality Preferences
Selected pilot neighborhoods (e.g. Indiranagar, Domlur, Koramangala) chosen by you to filter venue discovery.
3. Purpose of Processing (Lawful Basis)
We process your personal data strictly for specified, explicit, and legitimate purposes:
- To fulfill booking reservations and provide digital check-in passes to venue partners.
- To manage your prepaid credit ledger and process secure membership transactions.
- To communicate transactional updates (booking confirmations, schedule changes, refunds).
- To comply with statutory financial accounting and taxation mandates under Indian law.
4. Data Sharing & Third Parties
We do not sell, rent, or trade your personal data. Personal data is shared only with:
- Partner Venues: Only the necessary attendee name, booking reference, and single-use check-in token for venue admission.
- Payment Aggregators: PCI-DSS compliant payment gateways (e.g. Razorpay) to process payments securely.
- Cloud Infrastructure: Secured cloud database infrastructure located within India in compliance with data residency best practices.
5. Your Rights as a Data Principal
Under Chapter III of the DPDP Act 2023, you have the following enforceable rights:
Right to Access: Request a summary of personal data being processed and identities of parties with whom it has been shared.
Right to Correction & Completion: Request correction of inaccurate personal data or completion of incomplete profiles.
Right to Erasure: Request deletion of your account and personal data, subject to legal record-keeping obligations (e.g., GST audit requirements).
Right to Grievance Redressal: Avail of expeditious redressal of any grievance regarding our processing of your personal data.
Data Protection Officer / Grievance Officer
In accordance with the DPDP Act 2023 and Information Technology Act rules, the Data Protection Officer can be reached at:
Designation: Data Protection Officer (DPO)
Inlo Technologies Private Limited
Indiranagar, Bengaluru, Karnataka 560038, India
Email: privacy@inlo.tech · Response SLA: 48 business hours