Privacy Policy

1. Who is responsible

For event guest data, the event organizer generally decides why the information is collected and how it is used. YallaPass processes that information to provide the platform on the organizer’s instructions. KALA Group is responsible for account, platform-security, billing, and service-operation data it controls.

Questions about an event, invitation, guest list, ticket, cancellation, or admission decision should normally be directed to the event organizer first.

2. Information we process

The information depends on how you use YallaPass.

• Organizer account details, such as name, work email, role, organization, assignments, and authentication records.
• Event and guest information, such as names, phone numbers, email addresses, language preferences, ticket categories, payment-confirmation status, and consent records.
• Ticket and entrance records, including ticket references, secure credentials, delivery attempts, check-ins, reversals, and audit history.
• Technical and security information, such as session identifiers, timestamps, request metadata, errors, and records needed to prevent misuse.

3. Why information is used

We use personal data to operate YallaPass, create and deliver tickets, verify admission, support organizers and guests, secure accounts, prevent duplicate or fraudulent use, maintain audit records, measure platform usage, and meet legal obligations. We do not sell guest personal data or use guest lists for unrelated advertising.

4. Sharing and service providers

Information may be available to the relevant organizer and its authorized staff. It may also be processed by infrastructure, messaging, file-storage, security, and wallet-pass providers where needed to provide the requested service. Providers must only receive information appropriate to their role. Information may be disclosed where required by law or necessary to protect users, the platform, or others.

5. Retention and security

Data is retained only as long as reasonably needed for event operations, organizer instructions, security, dispute handling, accounting, and applicable legal requirements. Retention periods can differ by record type. YallaPass uses role-based access, event-level assignments, encrypted or hashed credentials, session controls, audit records, and other safeguards, but no system can guarantee absolute security.

6. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, or information about processing. Event guests should contact the organizer identified on the event page or ticket. Organizer account holders should use KALA Group’s official published business contact channel. We may need to verify identity and retain information where law, security, accounting, or a dispute requires it.

7. International processing and children

Where a provider processes information outside the country in which it was collected, appropriate contractual and technical safeguards should be used as required by applicable law. YallaPass is not designed for children to create organizer accounts. Organizers are responsible for having an appropriate lawful basis and guardian authorization where an event collects children’s data.

8. Updates

We may update this policy as the service, providers, or legal requirements change. Material changes will be identified by a revised effective date or an appropriate in-product notice.