​

Privacy & Data Security Policy

​

1. Information We Collect

​

A. From Student Attendees

• Core Identity: Full Legal Name, Primary Email Address, and Phone Number.
• Academic Verification: University Name, Academic Department, and Official University Roll/Registration Number (e.g., 2022-CS-101).
• Transaction Proofs: Screenshots of manual bank transfers (JazzCash, EasyPaisa, IBFT) and transaction reference IDs (TxID) submitted during manual checkouts for organizer verification.

​

B. Cultural & Personal Privacy Protection

• No Facial Photo Display on Scanner Screens: Volunteer gate scanners never receive or display student photographs on their screens. This ensures full privacy and dignity for all students, including female students who observe hijab or niqab.
• Zero-Trust Token Verification: Ticket validation is performed using 15-second dynamic time-rotating cryptographic tokens and official university roll numbers, eliminating any need for facial recognition or photo scanning.

​

C. From Society Organizers & Presidents

• Official Identifiers: Society Name, Campus Handle, and Faculty Advisor credentials (Name, Title, Official Email).
• President KYC Documents: National ID Card (CNIC) Front and Back photographs submitted during society registration.
• Banking Credentials: Official Bank Account Title, Bank Name, and International Bank Account Number (IBAN) for ticket sales payout transfers.

​

2. How Your Data Is Used & Processed

1. Cryptographic Ticket Issuance: Generating dynamic, time-rotating security passes tied to your roll number and ticket ID.
2. Gate Check-in & Security: Displaying verified attendee Name, Roll Number, Department, and Ticket Tier on gate scanners for physical student card matching.
3. Financial Reconciliation: Verifying payment receipts against society accounts and executing direct wire payouts (IBFT).
4. Automated Waitlists & Notifications: Dispatching real-time notifications when tickets are confirmed, transferred, or reallocated.

​

3. Data Sharing & Disclosure Boundaries

• Society Access: When you reserve a ticket, the organizing society gains access to your Name, Roll Number, Email, Department, and Check-in Status for attendee management and .CSV manifest generation.
• Volunteer Scanner Isolation: Volunteer gate staff can only view your Name, Roll Number, and Ticket Tier during the split-second scan. They cannot download attendee manifests, export personal emails, or view financial ledgers.
• Legal Compliance: We reserve the right to disclose records to university administration or law enforcement if required by lawful authority in cases of fraud or campus safety threats.

​

4. Encryption & Data Storage

• In-Transit Encryption: All communication is encrypted using industry-standard TLS 1.3 / HTTPS.
• At-Rest Storage: User records, event data, and cryptographic tickets are stored securely inside encrypted cloud databases protected by strict Identity & Access Management (IAM) security boundaries.
• Financial & KYC Storage: Sensitive CNIC identity images and bank receipts are stored inside isolated, encrypted cloud object storage governed by short-lived, signed access tokens.

​

5. Your Data Rights & Deletion Requests

• Access & Corrections: You can update your profile details and password anytime inside /dashboard/profile.
• Account Deletion: You may request permanent deletion of your account and personal identifiers by contacting support@unitix.com. Financial audit records and completed payout logs are retained as required by financial regulations.