Privacy Policy

This Policy applies to:

• Event attendees, guests and customers who use AtomX cashless payments (wristbands, cards, QR).
• Event organisers, venue owners and vendors who engage AtomX services.
• Visitors to atomx.in and related subdomains, and users of our demos, forms and support channels.
• Job applicants and business contacts.

If you are an organiser or vendor using our services, separate contractual terms will supplement this policy (data processors / controllers responsibilities).

We only collect data necessary to run events and operate our platform. Typical categories:

Identity & Contact

Name, job title, business name, email, telephone, postal address for demo requests, contracts, vendor onboarding, and support.

Event Attendee Data

Wristband/card IDs, optional profile (name, email, phone if provided), top-up history, purchase history, consumption categories, session/check-in timestamps, and QR code validation logs.

Financial & Transactional

Payment instrument token (not raw card data), payer name, transaction amounts, refunds, vendor settlement details. (We use PCI-compliant payment processors; AtomX does not store full card numbers.)

Device & Technical

IP address, browser/device type, cookies and tracking identifiers, geolocation where explicitly provided (for logistics), system logs, and event device telemetry.

Communications

Messages you send to us (email, chat, support tickets), meeting notes, and marketing preferences.

Recruitment / Business

CVs, professional references, billing and company details.

• Directly from you: demo/contact forms, onboarding, support, KYC for vendors.
• From organisers: event attendee lists (where provided) and vendor setup files.
• From devices & systems: wristband readers, POS terminals, access points, kiosks, and dashboards.
• From third parties: payment processors, marketing platforms (when you opt in), and analytics providers.
• Automatically: cookies, analytics, server logs.

We process personal data for specific, limited purposes:

To Provide the Service

Process payments, handle top-ups/refunds and vendor settlements. Validate tickets and control access at gates. Reconcile transactions and generate vendor/organiser reports.

(Lawful basis: contract performance, legitimate interests)

To Communicate and Support

Respond to demo requests, customer support, onboarding.

(Lawful basis: contract performance, legitimate interests, consent for marketing)

To Improve Products & Safety

Aggregate analytics, fraud detection, operational monitoring and product improvement.

(Lawful basis: legitimate interests; anonymised data used where possible)

To Comply with Law

Retain records for accounting, audit, tax and regulatory purposes; respond to lawful requests.

(Lawful basis: legal obligation)

For Marketing (Optional)

Send product updates, event recommendations and newsletters where you consent to receive them.

(Lawful basis: consent / legitimate interest where allowed)

We use cookies and similar technologies on atomx.in to operate the site and measure usage.

• Essential cookies — required for site functionality (forms, session).
• Analytics cookies — aggregated usage data to improve the site and product.
• Marketing cookies — used only with consent for advertising and remarketing.

You can manage cookie preferences via the cookie banner or browser settings. Disabling analytics cookies won't prevent you from using the site but will reduce personalised experiences.

We share personal data only as necessary and under strict controls:

Service Providers & Processors

Payment processors (PCI-compliant), cloud hosting, analytics, CRM, email and communications providers. These parties act under contract and only process data to provide their services.

Event Customers

Organisers and vendors receive transactional data for vendor settlement and event reporting. Organisers may receive anonymised attendee insights unless attendees have explicitly consented to share contact details.

Legal & Safety

Where required by law, subpoena, or to protect legal rights, safety, or security.

Business Transfers

In a sale or merger, personal data may be transferred as part of business assets. We will notify affected users where required.

We never sell personal data for third-party advertising.

We retain personal data only as long as necessary for the purpose collected, and to meet legal, accounting and security obligations.

Typical retention periods (may vary by contract / law):

• Demo / sales leads: up to 3 years after last contact (unless you request deletion).
• Event transactional records and vendor settlements: retention in line with accounting/tax laws (commonly 6–7 years) or as required by contract.
• Analytics & aggregated logs: retained in aggregated or anonymised form; raw logs for operational troubleshooting are retained for a limited period (e.g., 90–365 days).
• Marketing: until you withdraw consent.

If you request deletion, we will remove your personal data unless we are legally required to keep it.

Depending on local law, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccuracies (rectification).
• Request deletion (right to be forgotten) subject to legal or contractual exceptions.
• Port your data in a machine-readable form (data portability).
• Restrict or object to processing (including direct marketing).
• Withdraw consent at any time for marketing.
• Lodge a complaint with a data protection authority.

To exercise any right, contact dataprotection@atomx.in. We will respond within the time frame required by applicable law.

We maintain administrative, technical and physical safeguards to protect personal data from unauthorized access, loss or misuse, including:

• Encryption at rest and in transit where appropriate.
• Network and application security monitoring.
• Access controls and least-privilege policies.
• Regular security testing and audits.

No system is 100% secure; in the unlikely event of a data breach that creates risk to rights and freedoms, we will notify affected individuals and relevant authorities as required by law.

AtomX operates internationally. Your data may be transferred and processed outside your country (for example, India ↔ cloud providers or service partners). Where transfers occur, we put safeguards in place (e.g., standard contractual clauses, adequate protections, or other lawful mechanisms) to ensure continued protection.

Our services are not intended for children under 16 (or the age required by local law to consent). We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us and we will take steps to delete it.

Our site may include links to third-party sites. This Privacy Policy does not apply to third parties — review their privacy notices before using them.

We may update this Privacy Policy to reflect product or legal changes. When we do, we will publish the revised policy on this page with a new "Last updated" date. For material changes affecting your rights, we will provide more direct notification where required.

Questions, requests or complaints: hello@atomx.in

If you are not satisfied with our response, you may also raise your concern with your local data protection authority.

If you are an EU/EEA resident, you may have additional protections under the GDPR (e.g., right to object, automated decision-making restrictions).

California residents: you may have rights under the California Consumer Privacy Act (CCPA); contact dataprotection@atomx.in for details about your rights and how to exercise them.

This policy is a general statement of practice. Local laws may require additional notices — AtomX will provide contractually required and region-specific privacy notices where applicable.