Legal
Privacy Policy
Last updated: June 2026
Who we are
NM Horizon (“we”, “us”) is the cultural festival of DY Patil RAIT, organized by the Student Union Council. This policy explains what we collect, why, and your rights. We comply with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP).
What we collect
- Account data: name, email, phone number, and a display name.
- Purchase data: the pass you bought, amount paid, promo code used, and the city you’re travelling from.
- Event registrations: which competitions and events you sign up for.
- Technical data: standard request logs (IP, browser) used for security and abuse prevention.
How we store it
Authentication is handled by Firebase. Your profile, orders, registrations, promo usage, and admin logs are stored in Supabase (PostgreSQL), protected by Row Level Security. Transactional emails are sent through Google SMTP. Uploaded images live in Firebase Storage.
Third-party services
- Firebase (Google) — authentication and file storage
- Supabase — database
- Google SMTP — transactional email delivery
Each processor handles data under their own privacy frameworks. We only share what is necessary to run these functions.
Your rights
Under the DPDP Act you may request access to your data, correction of inaccurate data, and erasure of your data. To exercise any of these, email us. We respond within 30 days.
Consent
By creating an account you consent to this policy. You may withdraw consent by requesting account deletion; note this does not affect passes already purchased or legal obligations to retain records.