Privacy Policy

1. Overview

FOLK Life Event Management System ("we", "our", "us") is committed to protecting the personal information of event participants, volunteers, and administrators. This policy explains what data we collect, how we use it, and your rights.

2. Information We Collect

• Name — for event registration and check-in identification
• Phone number — for WhatsApp QR code delivery and OTP-based password reset
• Email address — for admin/volunteer account login
• Check-in time and status — for attendance tracking during events
• FOLK Guide assignment — for group management purposes

3. How We Use Your Information

• Send your unique QR code via WhatsApp for event entry
• Track attendance and check-in status during live events
• Generate event reports for organizers
• Authenticate admin and volunteer users
• Send OTP for password recovery via WhatsApp

4. WhatsApp Messaging

We use the Interakt WhatsApp Business API to deliver QR codes and event information to registered participants. By registering for an event, you consent to receiving WhatsApp messages from FOLK Life on the phone number provided. We do not use your number for marketing without explicit consent.

5. Data Storage & Security

• All data is stored in a secure Turso (SQLite) edge database
• Passwords are hashed using bcryptjs and never stored in plain text
• Authentication uses JWT tokens with a 7-day expiry
• API keys and credentials are never exposed to the browser
• The application is hosted on Vercel with HTTPS enforced

6. Data Sharing

We do not sell or share your personal data with third parties, except as required to operate the service (e.g., WhatsApp delivery via Interakt). Event reports containing attendance data are accessible only to authorized FOLK Life administrators.

7. Data Retention

Event and participant data is retained for the duration of the event and a reasonable period thereafter for reporting purposes. You may request deletion of your data by contacting us directly.

8. Your Rights

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of WhatsApp communications

9. Public QR Pages

The /qr/[entryId] page is publicly accessible via the link sent to participants. It displays event details and participant names for that entry. Anyone with the link can view this page — please do not share your QR link publicly.