Eventixy

01 Protecting Your Account

Eventixy uses security measures designed to help protect your account, including:

✓ Secure password storage.
✓ Email or mobile OTP verification where applicable.
✓ Session and authentication controls.
✓ Account access restrictions.
✓ Protection against unauthorized login attempts.
✓ Secure account recovery and password reset processes.

You are responsible for keeping your password, OTPs, and other authentication information confidential. Never share your OTP or password with another person, including someone claiming to be an Eventixy representative.

02 Password Security

Passwords are not intended to be stored in plain text. Eventixy uses appropriate password-protection mechanisms to reduce the risk of unauthorized access if account data is compromised.

For your protection, we recommend:

✓ Using a unique password for Eventixy.
✓ Avoiding easily guessable passwords.
✓ Not sharing your password.
✓ Changing your password if you suspect unauthorized access.

03 OTP and Account Verification

Eventixy may use one-time passwords (OTPs) to verify accounts and support authentication or password recovery. OTPs are temporary and should be kept confidential.

Eventixy will not ask you to disclose an OTP for purposes unrelated to the verification process.

04 Data Protection

We take reasonable measures to protect personal information submitted through Eventixy. Depending on the nature of the information and service, security measures may include:

✓ Access controls.
✓ Secure authentication.
✓ Encryption where appropriate.
✓ Secure communication protocols.
✓ Server and infrastructure security.
✓ Monitoring and logging.
✓ Regular security improvements.

Access to information may be restricted based on the user's role and the requirements of the service.

05 Role-Based Access

Eventixy may use role-based access controls to limit access to information and platform functionality. For example:

✓ Participants can access information associated with their own accounts and registrations.
✓ Organizers can access information necessary to manage their events.
✓ Organization administrators may access information related to their organization.
✓ College or institution administrators may access information permitted for their role.
✓ Platform administrators may have broader access where required to operate, secure, and support the platform.

Access is intended to be limited according to legitimate operational requirements.

06 Payment Security

Payments for paid events may be processed through third-party payment gateways. Eventixy may not directly store complete payment credentials such as card numbers, CVV information, or banking passwords when payment processing is handled by an external payment provider.

Payment providers may apply their own security controls and terms. Users should always verify that they are using the official Eventixy payment flow before entering payment information.

07 Document and File Security

Eventixy may allow users or organizers to upload documents for purposes such as:

✓ Student verification.
✓ Organization verification.
✓ College verification.
✓ Event participation.
✓ Other platform services.

We take reasonable measures to restrict unauthorized access to uploaded files. Users should only upload legitimate documents requested by Eventixy or an authorized event organizer.

08 Platform Security

We take reasonable steps to protect the Eventixy platform against common security threats. These measures may include protections related to:

✓ Unauthorized access.
✓ Malicious requests.
✓ Injection attacks.
✓ Cross-site scripting.
✓ Cross-site request forgery.
✓ Automated abuse.
✓ Unauthorized file uploads.
✓ Session-related attacks.
✓ Other common web application threats.

Security controls may be improved or updated as the platform evolves.

09 Monitoring and Logging

Eventixy may maintain security and system logs to:

✓ Detect suspicious activity.
✓ Investigate security incidents.
✓ Troubleshoot technical problems.
✓ Protect the platform.
✓ Prevent fraud and abuse.
✓ Maintain service reliability.

Security logs may contain technical information such as IP addresses, timestamps, device information, and activity records where necessary.

10 Account and Access Monitoring

Eventixy may monitor certain account and platform activities for security and fraud-prevention purposes. Suspicious activity may result in additional verification, temporary restrictions, account suspension, or other appropriate security measures.

11 Keeping Eventixy Secure

Security is a shared responsibility. You can help protect your account by:

✓ Using a strong, unique password.
✓ Never sharing your password or OTP.
✓ Logging out from shared or public devices.
✓ Keeping your browser and operating system updated.
✓ Avoiding suspicious links or files.
✓ Reporting suspicious account activity immediately.
✓ Using only official Eventixy websites and services.

12 Reporting a Security Issue

If you discover a potential security vulnerability, suspicious activity, unauthorized access, or other security issue involving Eventixy, please report it to us as soon as possible. When reporting a security issue, please provide:

✓ A description of the issue.
✓ The affected Eventixy feature or page.
✓ Steps required to reproduce the issue, if applicable.
✓ Relevant screenshots or technical information.
✓ Your contact information for follow-up.

Please do not attempt to access, modify, delete, or disclose another user's information.

13 Responsible Disclosure

We encourage responsible reporting of genuine security vulnerabilities. If you discover a security issue, please report it privately rather than publicly disclosing sensitive technical details before we have had a reasonable opportunity to investigate and address the issue.

We may acknowledge valid security reports and may contact the reporter for additional information. Unless explicitly authorized by Eventixy, security testing must not:

✓ Access another user's account or information.
✓ Modify or delete data.
✓ Disrupt Eventixy services.
✓ Perform denial-of-service attacks.
✓ Send spam or automated traffic.
✓ Attempt to obtain payment credentials.
✓ Install malicious software.
✓ Access systems or data beyond what is necessary to demonstrate the vulnerability.

14 Security Incidents

If Eventixy identifies a security incident affecting personal information or platform security, we will take reasonable steps to:

Investigate the incident.
Contain and mitigate the issue.
Restore affected services where necessary.
Assess potential impact.
Take corrective measures.
Provide notifications where required by applicable law.

15 Third-Party Services

Eventixy may rely on third-party providers for services such as:

✓ Payment processing.
✓ Email and OTP delivery.
✓ Cloud hosting.
✓ Storage.
✓ Analytics.
✓ Security infrastructure.
✓ Other technical services.

Third-party providers may have their own security practices and policies. Eventixy takes reasonable steps to work with service providers that are appropriate for the services they provide.

16 Limitations

While we take reasonable measures to protect the Eventixy platform and information, no website, application, server, network, or online transmission can be guaranteed to be completely secure.

We continuously review and improve our security practices as technology, threats, and platform requirements change.

17 Updates to This Security Policy

We may update this Security page from time to time to reflect changes to our security practices, platform features, technology, or applicable requirements.

Any updates will be published on this page along with the revised "Last Updated" date.

18 Contact Us

For general security questions or to report a security concern, please contact:

Eventixy Security Team

Email: support@eventixy.com

Website: https://eventixy.com