What we collect, and what we do not.

Who this is about

FlincByte operates behindscape.com. For the purposes of the Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for the personal data described here, and you are the Data Principal.

What we collect

Only what you type into a form. The early access form asks for a work email address, which is required, and optionally your name, company, city, WhatsApp number, roughly how many events you run a year, and a free text answer about what broke on your last season.

We do not ask for and have no use for financial details, identity documents, or anything about your clients or their guests. Do not put client names in the free text box.

Measurement, only if you agree. If you accept cookies we also receive standard analytics about which pages were visited and roughly where in the world from. If you decline, or ignore the banner, none of that loads at all. The cookie policy lists each one.

Server logs. Our host records IP addresses and request times as part of running the site securely. We do not use them for marketing.

Once you subscribe

When your company buys a plan, we also hold:

• Account details: the name, work email and phone number of each team member, and your company's billing name, address and GSTIN for the invoice.
• Payment records: what you bought, when, and whether it was paid. Card, UPI and bank details are entered on our payment provider's page and stay with them. We never see or store a full card number.
• Event data you add: vendors, clients, guests, budgets and invoices. Your company decides what goes in and why, so for this data your company is the Data Fiduciary and we process it only on your instructions, to run the service for you.
• Messages you send: the SMS and emails sent from your account, with the phone numbers and addresses they went to and whether they were delivered, so you can see what went out and we can bill your allowance correctly.
• Security records: sign-ins, and on the Scale plan an audit log of who changed what, so a company can check its own account.

We do not use your event data, your clients or their guests for our own marketing.

Why we hold it

• To email you when early access opens.
• If you subscribe, to run the service, deliver the messages you ask us to send, bill you correctly, and keep your account secure.
• To decide what to build first. If forty planners all say the same thing broke, we build that.
• To reply to you if you write to us.

We process it because you asked us to put you on a list, and on the basis of your consent, which you can withdraw at any time by asking us to remove you.

What we will never do

• Sell, rent or share the list with anyone.
• Send you anything other than what you signed up for.
• Use your answers publicly with your name attached without asking you first, in writing.

Who else processes it

We use a small number of providers. Each one only sees what it needs to do its job.

• FormSubmit relays the early access form to our inbox. Your submission passes through it.
• Hostinger hosts the site and holds the server logs.
• Google Analytics and Google Tag Manager, and Microsoft Clarity, measure site usage. These only run with your consent, and some of them process data outside India.
• Our email provider holds the messages you send us, as email providers do.
• Our payment provider takes the payment at checkout and holds the payment details you give it.
• SMS and email delivery providers carry the messages you send from BehindScape. They receive the recipient's number or address and the message itself, and nothing else.
• Our cloud hosting provider stores subscriber account and event data.

How long we keep it

Early access details: until you ask us to delete them, or until we decide not to launch, at which point we delete the list and tell everyone on it that we have. If you ask to be removed we do it within thirty days and confirm when it is done.

Subscriber data: for as long as your company has an account. After you cancel it stays readable for thirty days so you can export it, and is then deleted. Invoices and payment records are kept for eight years, because Indian tax law requires it.

Your rights

Under the DPDP Act, 2023 you can ask us to:

• tell you what we hold about you and who we have shared it with;
• correct anything that is wrong or incomplete;
• erase it;
• nominate someone to exercise these rights if you die or become incapacitated.

Email [email protected] and say what you want. We do not make you fill in a form or prove a reason.

Grievances

Our Grievance Officer is Jaydip Satani, reachable at [email protected]. We answer grievances within thirty days. If you are not satisfied you may complain to the Data Protection Board of India.

Children

This site is for people running event businesses. We do not knowingly collect data about anyone under eighteen. If you think we have, tell us and we will delete it.

Changes

If this policy changes in a way that affects what we do with data we already hold, we will email the list before it takes effect rather than quietly editing this page.