Legal

Privacy Policy

Last updated: 21 May 2026  ·  Effective: 21 May 2026

1. Who We Are

Sociatribe (“we”, “us”, or “our”) operates an online platform enabling community owners to manage members, host events, and accept payments. We are the data controller for personal information collected through sociatribe.com. Our contact for privacy matters is business@sociatribe.com.

2. Information We Collect

We collect the following categories of personal information:

We do not knowingly collect information from individuals under 18 years of age. If you believe we have inadvertently collected such information, please contact us immediately.

3. How We Use Your Information

We use your personal information for the following purposes:

• Service delivery: To create and manage your account, process payments, and provide platform features.
• Billing and payments: To generate invoices, manage subscriptions, and process refunds via Razorpay.
• Communications: To send transactional emails (receipts, password resets, account alerts) and, with your consent, product updates and announcements.
• Customer support: To respond to your queries and resolve disputes.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions and unauthorised access.
• Analytics and improvement: To understand how the platform is used and to improve our features and user experience.
• Legal compliance: To comply with applicable laws, regulations, and legal process.

4. Payment Processing and Razorpay

All payment transactions on the Sociatribe platform are processed by Razorpay Software Private Limited, a PCI-DSS compliant payment gateway authorised by the Reserve Bank of India. When you make a payment:

• Your card number, CVV, and other sensitive financial credentials are entered directly into Razorpay's secure environment and are never transmitted to or stored on Sociatribe's servers.
• We receive a transaction reference ID, payment status, and masked payment method details from Razorpay to record the transaction.
• Razorpay processes your data in accordance with their Privacy Policy and applicable RBI guidelines.

5. Sharing of Your Information

We do not sell your personal information. We share your data only in the following circumstances:

• Payment processors: Razorpay, to facilitate transactions (see Section 4).
• Cloud infrastructure: Hosting and database providers who process data on our behalf under strict data processing agreements.
• Email service providers: To deliver transactional and notification emails on our behalf.
• Analytics tools: Aggregated, anonymised usage data shared with analytics providers to improve the Service.
• Between Organizers and Members: Organizers can see member profiles and activity within their community; Members can see community content published by the Organizer.
• Legal obligations: When required by applicable law, court order, or governmental authority, including compliance with the IT Act and SPDI Rules.
• Business transfers: In connection with a merger, acquisition, or sale of all or substantially all of our assets, subject to appropriate confidentiality protections.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential cookies: Maintain your logged-in session and ensure the platform functions correctly. These cannot be disabled.
• Analytics cookies: Understand usage patterns to improve the Service. You can opt out by adjusting your browser settings or using a browser extension.
• Preference cookies: Remember your settings and preferences across visits.

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the platform.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. Specifically:

• Account data is retained until you delete your account, after which it is purged within 30 days, except where we are required to retain it by law.
• Payment transaction records are retained for 8 years in accordance with Indian financial record-keeping requirements.
• Log and usage data is retained for up to 90 days.
• Communications (support emails) are retained for up to 3 years.

8. Data Security

We implement reasonable security practices and procedures as required under the IT Act and SPDI Rules, including:

• Encryption of data in transit using TLS 1.2 or higher.
• Encryption of sensitive data at rest.
• Access controls limiting data access to authorised personnel on a need-to-know basis.
• Regular security reviews and vulnerability assessments.

While we take commercially reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that affects your sensitive personal data, we will notify you and the relevant authorities as required by applicable law.

9. Your Rights

Subject to applicable law, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to our legal retention obligations.
• Withdrawal of consent: Withdraw consent for processing activities that rely on your consent (e.g., marketing emails), without affecting the lawfulness of prior processing.
• Portability: Request your data in a structured, machine-readable format where technically feasible.
• Grievance redressal: Lodge a complaint with our Grievance Officer (see Section 11).

To exercise any of these rights, email us at business@sociatribe.com. We will respond within 30 days.

10. Cross-Border Data Transfers

Your data may be processed on servers located outside India (for example, cloud infrastructure hosted in data centres in Singapore or the United States). Where data is transferred internationally, we ensure appropriate safeguards are in place, such as contractual clauses requiring the recipient to protect personal data to the same standard as required under Indian law.

11. Grievance Officer

In accordance with the Information Technology Act, 2000, and the SPDI Rules, we have designated a Grievance Officer to address complaints regarding the processing of personal data:

Grievance Officer
Sociatribe
Mumbai, Maharashtra, India
Email: business@sociatribe.com
We will acknowledge complaints within 24 hours and resolve them within 30 days.

12. Third-Party Links

The platform may contain links to third-party websites or services. This Privacy Policy applies only to Sociatribe. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies before sharing any personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address associated with your account) or by posting a prominent notice on the platform before the change becomes effective. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:
Sociatribe — Mumbai, Maharashtra, India
Email: business@sociatribe.com