Privacy policy

This explains what personal data Mehfil collects, why, and the choices you have under the Digital Personal Data Protection Act, 2023.

What we collect

• Mobile number, name, city and optional email, to create your account and send booking updates.
• Event details, messages, quotes and reviews you create on Mehfil.
• For artists: profile content, photos, PAN, bank account and optional GSTIN, to pay you and meet tax rules. Bank account numbers are stored encrypted.
• Payment status from our payment partner. We never see or store your card or UPI PIN.
• Basic technical logs (IP address, browser) to keep the service secure.

How we use it

• To run bookings: matching enquiries, holding payments, refunds, payouts and invoices.
• To send SMS codes and booking updates by SMS or WhatsApp.
• To prevent fraud and enforce our terms, including hiding contact details in chat before a booking.

Who we share it with

• The other side of a booking, once it's confirmed: name and phone number.
• Service providers who process data for us: payment gateway, SMS and WhatsApp providers, cloud hosting and storage.
• Authorities, when the law requires it.

We don't sell personal data.

Your rights

You can ask to see, correct or delete your data, and withdraw consent, by writing to us. Some records, such as invoices and payment records, must be kept for the period tax law requires even after you close your account.

Retention

We keep account data while your account is open, and booking and financial records for 8 years to meet accounting rules.