Privacy Policy

1. Overview & Introduction

Welcome to WeMeet ("we," "our," or "us"), accessible at https://www.wemeet.asia. WeMeet provides modern event access, digital ticketing, WhatsApp/SMS pass delivery, and turnstile verification services for event organizers and attendees.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, create an account, purchase event passes, or register for an event managed through WeMeet.

2. Information We Collect

We collect information in the following categories:

• Event Organizers & Account Holders: When you sign up via Email or Google OAuth, we collect your full name, email address, profile picture (if provided via Google), and account credentials.
• Event Attendees: When an organizer invites you or when you register for an event, we process your name, mobile phone number, email address, badge tier (e.g., VIP, Speaker, General), and check-in timestamp.
• Gate & Turnstile Scan Data: When passes are scanned at the venue gate, our system logs the scan timestamp, gate identifier, staff identifier, and verification status (Admitted, Duplicate, Invalid).
• Device & Technical Information: IP address, browser type, device identifiers, and session cookies necessary for authentication and security.

3. How We Use Your Information

We use the collected information strictly for legitimate operational purposes:

• Delivering digital event passes and verification links directly to your WhatsApp or SMS.
• Providing 2-Factor Authentication (2FA OTP) codes to ensure only authorized attendees can access their tickets.
• Enabling organizers and ushers to verify legitimate entry at event turnstiles in sub-second latency.
• Preventing duplicate ticket scans, counterfeit codes, and ticket scalping.
• Maintaining organizer account access, analytics, and billing records.

4. Third-Party Service Providers & Data Processors

To provide reliable global event delivery, WeMeet partners with trusted, industry-leading cloud infrastructure providers:

• Google Identity Services / OAuth: For secure, 1-click organizer authentication without storing plaintext passwords.
• Meta WhatsApp Cloud API:For dispatching verified pass cards and registration notifications to attendees' WhatsApp chats.
• Twilio: For fallback SMS pass delivery when WhatsApp is unavailable.
• Supabase & PostgreSQL: For high-availability, encrypted database storage and access control.
• Vercel: For secure edge-rendered web hosting with global TLS/HTTPS encryption.

5. Data Protection & Security

We implement enterprise-grade technical and organizational measures to safeguard your data. Digital passes utilize cryptographic HMAC signatures to prevent alteration or forgery. All data in transit is encrypted using modern TLS 1.3 encryption. Passwords and OTP codes are salted and hashed using standard cryptographic algorithms (bcrypt and SHA-256).

6. Your Rights & Data Deletion

You have the right to access, update, or request the deletion of your personal data at any time. If you wish to delete your organizer account or remove your attendee registration record from an event roster, you may contact us directly or reach out to the specific event organizer.