Privacy Policy

Last updated: 2026-05-07

MedEventz is operated as a non-profit initiative by Champions Educational and Medical Society (R) and Amogh Foundation (collectively, “MedEventz”, “we”, “us”). This policy describes what personal information we collect when you use our platform at medeventz.org, why we collect it, and the choices you have. By using MedEventz, you agree to this policy.

1. Information we collect

We collect the following categories of information:

Account information — email address, name, professional title, specialty, medical council registration number (if you provide it), and any details you add to your profile.
Event interaction data — events you register for, abstracts you submit, certificates issued to you, sessions you attend.
Payment information— when you register for a paid event, payment is processed by Razorpay or, in direct-payment mode, by the organizer’s UPI/bank account. We store the payment reference (transaction ID) and amount, but we do not store card numbers, CVVs, UPI PINs, or bank credentials.
Communications — emails you send to us and email engagement metadata (delivered, opened) when you receive transactional or campaign emails from an event you registered for.
Cookies and session data — we set httpOnly authentication cookies via Supabase to keep you signed in. We do not use third-party advertising cookies.

2. How we use your information

To provide the platform: account creation, event registration, ticketing, certificate issuance, abstract submission, communications about events you join.
To verify identity and prevent fraud.
To respond to your queries and grievances.
To improve the platform and diagnose technical issues.
To comply with legal obligations.

3. Lawful basis

We process your data on the basis of (a) your consent (account creation, optional marketing communications), (b) the performance of a contract (registering you for an event you booked), and (c) compliance with legal obligations.

4. Sharing with third parties

We share data only with service providers that help us operate the platform, and only as needed:

Supabase— database, authentication, file storage. Your account and event data are stored in Supabase’s infrastructure.
Razorpay— payment processing for events using platform checkout. Razorpay’s own privacy policy applies to payment-related data.
Vercel and Cloudflare — hosting, content delivery, DNS, and email routing for our admin inbox.
Email transport providers — Gmail SMTP / Resend / similar, used to deliver transactional emails.
Event organizers — when you register for an event, the organizer of that event receives your name, email, professional details, and registration status so they can run their event. They do not receive payment-card details.

We do not sell your personal information. We do not share your data with advertisers.

5. Data retention

We retain account and event data for as long as your account exists, plus a reasonable period afterwards for accounting and legal-compliance purposes. You can request deletion at any time (see Section 7).

6. International transfers

Our service providers may store and process data outside India. We rely on the contractual safeguards each provider offers under their respective regional frameworks.

7. Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

access the personal data we hold about you,
correct inaccurate or incomplete data,
request deletion of your account and associated data,
withdraw consent for processing, where processing is based on consent,
nominate another individual to exercise these rights in case of your death or incapacity,
register a grievance with us; if unresolved, with the Data Protection Board of India.

To exercise any of these rights, contact us at the email below.

8. Security

We use industry-standard measures including TLS in transit, encrypted storage, httpOnly cookies for authentication, row-level security policies on the database, and payment processing only via PCI-DSS-compliant providers. No system is perfectly secure; if you become aware of a security issue, please report it to us immediately.

9. Children

MedEventz is intended for medical professionals, students of medicine and allied health sciences, and the broader medical community. The platform is not directed at children under 18. We do not knowingly collect data from children under 18. If you believe we have, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the latest revision. Material changes will be notified via email or a prominent notice on the platform.

11. Contact and grievance officer

For privacy-related queries, requests, or grievances, contact our Grievance Officer:

Email: admin@medeventz.org
Operating entities: Champions Educational and Medical Society (R) and Amogh Foundation

We endeavor to acknowledge complaints within 24 hours and resolve them within 30 days.

Last updated: 2026-05-07

1. Information we collect

We collect the following categories of information:

Account information — email address, name, professional title, specialty, medical council registration number (if you provide it), and any details you add to your profile.

Event interaction data — events you register for, abstracts you submit, certificates issued to you, sessions you attend.

Payment information— when you register for a paid event, payment is processed by Razorpay or, in direct-payment mode, by the organizer’s UPI/bank account. We store the payment reference (transaction ID) and amount, but we do not store card numbers, CVVs, UPI PINs, or bank credentials.

Communications — emails you send to us and email engagement metadata (delivered, opened) when you receive transactional or campaign emails from an event you registered for.

Cookies and session data — we set httpOnly authentication cookies via Supabase to keep you signed in. We do not use third-party advertising cookies.

2. How we use your information

To provide the platform: account creation, event registration, ticketing, certificate issuance, abstract submission, communications about events you join.

To verify identity and prevent fraud.

To respond to your queries and grievances.

To improve the platform and diagnose technical issues.

To comply with legal obligations.

4. Sharing with third parties

We share data only with service providers that help us operate the platform, and only as needed:

Supabase— database, authentication, file storage. Your account and event data are stored in Supabase’s infrastructure.

Razorpay— payment processing for events using platform checkout. Razorpay’s own privacy policy applies to payment-related data.

Vercel and Cloudflare — hosting, content delivery, DNS, and email routing for our admin inbox.

Email transport providers — Gmail SMTP / Resend / similar, used to deliver transactional emails.

Event organizers — when you register for an event, the organizer of that event receives your name, email, professional details, and registration status so they can run their event. They do not receive payment-card details.

We do not sell your personal information. We do not share your data with advertisers.

7. Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

access the personal data we hold about you,

correct inaccurate or incomplete data,

request deletion of your account and associated data,

withdraw consent for processing, where processing is based on consent,

nominate another individual to exercise these rights in case of your death or incapacity,

To exercise any of these rights, contact us at the email below.

8. Security