KonfHub Data Principal Rights Policy

VERSION: 1.0

EFFECTIVE DATE: JULY 7, 2026

Purpose

KonfHub Private Limited ("KonfHub", "we", "our", or "us") respects the privacy rights of individuals whose personal data is processed through our platform.

This Data Principal Rights Policy explains the rights available to individuals ("Data Principals") under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), and the procedures for exercising those rights.

This Policy should be read together with our Privacy Policy, Consent Notice, and other applicable privacy documents.

Scope

This Policy applies to personal data processed by KonfHub in connection with:

  • Event registrations
  • Ticket purchases
  • Organizer accounts
  • Attendee management
  • AI Photo Gallery
  • AI Photo Booth
  • AI-powered networking features
  • Customer support
  • Marketing communications
  • Websites and mobile applications
  • Other services provided by KonfHub

Where KonfHub processes personal data on behalf of an event organizer, certain requests may be handled by the relevant Organizer.

Your Rights

Subject to applicable law, you may exercise the following rights.

Right to Access Information

You may request information regarding:

  • whether KonfHub is processing your personal data;
  • categories of personal data processed;
  • purposes of processing;
  • categories of recipients with whom personal data has been shared;
  • retention periods where applicable.

Where permitted by law, KonfHub may verify your identity before providing this information.

Right to Correction

If your personal data is inaccurate, incomplete, or outdated, you may request that it be corrected or updated.

Where possible, you may also update your information directly through your KonfHub account.

Right to Erasure

You may request deletion of your personal data where:

  • the personal data is no longer required for the purposes for which it was collected;
  • you withdraw consent where consent is the legal basis for processing;
  • retention is no longer required by law;
  • applicable law grants you the right to request deletion.

KonfHub may retain certain information where required for legal compliance, fraud prevention, accounting, taxation, dispute resolution, security, or enforcement of contractual rights.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect processing carried out before the withdrawal became effective.

Withdrawal may result in certain services or features no longer being available.

Right to Nominate

Where permitted under the DPDP Act, you may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.

KonfHub may require reasonable documentation before acting on such requests.

Right to Grievance Redressal

If you believe your personal data has been processed in violation of applicable law or this Policy, you may submit a grievance to KonfHub.

Our Grievance Officer will review and respond to your complaint in accordance with applicable legal requirements.

If you remain dissatisfied after completion of our grievance process, you may pursue remedies available under applicable law.

How to Exercise Your Rights

You may submit your request through Privacy Request Center page here: https://konfhub.com/privacyrequestcenter

You can also submit a request by contacting:

Privacy Officer

Email: privacy@konfhub.com

Website: https://konfhub.com

When submitting a request, please include:

  • your full name;
  • registered email address;
  • event name (if applicable);
  • description of your request;
  • any supporting information that will help us identify your records.

To protect your privacy, KonfHub may request reasonable verification of your identity before processing your request.

Requests Relating to Event Organizers

Many events hosted on KonfHub are managed by independent event organizers.

Where an Organizer determines the purposes and means of processing attendee personal data, requests relating to:

  • registration information;
  • attendee lists;
  • event communications;
  • networking data;
  • event surveys;
  • event-specific photographs;

may need to be handled by the relevant Organizer.

KonfHub will provide reasonable assistance to Organizers where required under applicable law or contract.

AI-Related Requests

Where AI-powered services such as AI Photo Gallery are enabled, individuals may request:

  • deletion of uploaded selfies, subject to applicable legal or contractual obligations;
  • removal of AI-generated facial templates where applicable;
  • information regarding AI processing as described in our AI Privacy Notice.

Certain requests may need to be coordinated with the relevant event Organizer.

Response Time

KonfHub will acknowledge receipt of your request and respond within the timelines prescribed by applicable law.

Where additional time is reasonably required due to the complexity or volume of requests, we will inform you of the expected timeline.

Circumstances Where Requests May Be Declined

KonfHub may refuse or limit a request where:

  • disclosure would adversely affect the rights of another individual;
  • the request is fraudulent or cannot be verified;
  • the information must be retained under applicable law;
  • compliance would compromise platform security;
  • another lawful exemption applies.

Where legally permitted, KonfHub will explain the reason for refusing or limiting a request.

No Fee for Standard Requests

KonfHub does not ordinarily charge a fee for processing legitimate privacy requests.

However, where permitted by law, KonfHub may charge a reasonable administrative fee for repetitive, excessive, or manifestly unfounded requests.

Security and Identity Verification

Before responding to a request, KonfHub may require reasonable evidence to verify the identity of the requester.

This verification helps protect personal data against unauthorized access or disclosure.

Record Keeping

KonfHub maintains records of privacy requests, including:

  • request date;
  • request type;
  • verification status;
  • actions taken;
  • response date;
  • resolution status.

These records are maintained in accordance with our Data Retention and Deletion Policy.

Related Policies

This Policy should be read together with:

  • Privacy Policy
  • Consent Notice (Privacy Notice)
  • Consent Management Policy
  • AI Privacy Notice
  • Cookie Policy
  • Organizer Data Processing Terms
  • Data Retention and Deletion Policy
  • Grievance Redressal Policy

Changes to this Policy

KonfHub may update this Policy from time to time to reflect changes in legal requirements, platform functionality, or business practices.

The latest version will always be available on our website.

Contact

For questions about this Policy or to exercise your privacy rights, please contact:

Privacy Officer
KonfHub Technologies Private Limited

Email: privacy@konfhub.com

Website: https://konfhub.com