Spotlight
Comprehensive Privacy Policy
About Spotlight & Platform Architecture
Spotlight is a specialized college event discovery, ticketing, and student engagement platform. The ecosystem comprises:
- Spotlight Mobile App: Used by students to browse campus events, bookmark upcoming deadlines, register individually or in teams, and access digital entry ticket passes containing QR verification codes.
- Spotlight Club Dashboard: Used by authorized college student clubs and event organizers to create event listings, review registrations, verify payment transaction proofs, and validate student entry tickets.
Information We Collect
To provide event ticketing, eligibility verification, and communication services, Spotlight collects the following categories of data:
When you create an account or update your profile, we collect:
- Full Name: Used for event ticketing and club attendance logs.
- Email Address: Primary contact identifier for account authentication, password resets, and ticket notifications.
- Phone Number: Used by event organizers for urgent event communications and team coordination.
- University Seat Number (USN) / Roll Number: Unique student identifier used to confirm student status and prevent duplicate registrations.
- Academic Information: Branch/Department, Academic Year (1-4), and Semester (1-8) to verify event eligibility requirements.
- Authentication Data: Securely hashed passwords for manual account authentication.
- Participation Records: Records of events you register for, ticket status (Confirmed, Pending, Rejected), and digital QR ticket pass keys.
- Team Membership Data: Team names, leader/member relationships, and generated team passkeys.
- Bookmarks: List of event IDs saved to your personal bookmarks for deadline tracking.
For paid events, Spotlight facilitates direct registration verification by collecting:
- UPI Transaction Reference (UTR): The 12-digit transaction reference number entered during payment confirmation.
- Payment Proof Screenshots: Image files uploaded by the user to prove registration payment completion to the organizing club.
Automatically collected log data includes IP addresses, device hardware model, operating system version, and app version logs to diagnose technical errors and ensure network stability.
How We Use Collected Information
We process your data strictly for legitimate operational purposes:
- Account Authentication & Access: Managing secure sign-in and session verification.
- Event Ticket Issuance: Generating digital QR passes and managing event entry validation.
- Academic & Payment Verification: Allowing club organizers to verify student eligibility and payment proofs.
- Notification Alerts: Sending real-time push and email notifications regarding ticket approvals, registration updates, or schedule changes.
- Platform Security & Abuse Prevention: Preventing fraudulent ticket creation, unauthorized access, or duplicate registrations.
Data Sharing & Disclosure Policies
Spotlight respects student privacy and does not sell, rent, or monetize your personal information to third-party advertisers or data brokers.
When you register for a specific event, your profile data (Name, USN, Phone, Email, Branch, Year) and payment proof details are shared directly with the authorized organizing club via their secure Club Dashboard for attendance verification and event management.
We rely on trusted cloud infrastructure providers (e.g., Supabase Storage for secure image hosting, cloud database servers) operating under strict data security standards.
We may disclose user information if required by applicable law, college administration regulations, or legal processes to protect student safety and platform security.
Device Permissions Breakdown
The Spotlight mobile application requests specific device permissions to enable core features:
- Camera & Photo Gallery: Required to select and upload payment proof screenshots during event registration.
- Storage Access: Required to cache digital ticket QR passes and event banners locally for offline access.
- Clipboard Access: Enables one-tap copying of club UPI payment IDs and team registration passkeys.
Data Security & Encryption Protocols
We implement robust technical and organizational measures to safeguard your information:
- Encryption in Transit: All data transmitted between the mobile app, backend servers, and databases is encrypted using industry-standard HTTPS / TLS 1.3 encryption.
- Secure Token Authentication: User sessions are managed using encrypted JWT tokens and secure password hashing algorithms.
- Storage Access Rules: Uploaded payment proof images and event banners are stored in secure cloud buckets configured with strict row-level access permissions.
Data Retention Policy
We retain your personal information for as long as your Spotlight account remains active to provide ongoing access to your event tickets, registration history, and profile data.
Event participation records and payment verification logs may be retained for audit and record-keeping purposes by college event committees as required for institutional event verification.
Account & Data Deletion Policy
Spotlight respects your right to control your data. Users have the right to request permanent account deactivation and data deletion at any time.
Send an email to our support team at spotlightapp.help@gmail.com with the subject line "Account Deletion Request". Please include your registered email address and University Seat Number (USN).
Upon identity verification, your account, stored profile data, saved bookmarks, and associated personal records will be permanently removed from our active databases within 7 business days.
Children's & Student Privacy
Spotlight is designed primarily for college students and higher-education institution members. We do not knowingly collect personal information from children under the age of 13. If we become aware that a child under 13 has provided personal data without parental consent, we take immediate steps to delete such information.
Updates & Policy Changes
We may update this Privacy Policy periodically to reflect platform updates, feature additions, or regulatory changes. Any modifications will be posted on this page with an updated "Last Updated" date. Continued use of Spotlight following policy updates signifies your acceptance of the revised terms.
Contact & Support Information
If you have any questions, privacy concerns, or feedback regarding this Privacy Policy, please contact our support team: