1. General provisions
1.1. This document is an agreement between Orbit Lab LLC (the «Operator») and any person who opens the site of the service, signs up for events or runs them (the «User»).
1.2. The document has two parts. Sections 1–7 and 11–15 are the terms of use. Sections 8–10 are the policy on processing personal data. Both parts apply together.
1.3. Using the service means agreeing to these terms. If you do not agree with them, you should not use the service.
1.4. By signing up for an event or signing in to the service, the User consents to their personal data being processed on the terms of section 8.
2. Terms used
Service - the software and the site that make it possible to publish events, register guests, check them in at the door and write to them.
Event - a gathering published in the service by one of the Organizers.
Guest - a User who has signed up for an event.
Organizer - a User who created an event or was added to it as a host.
Administrator - a User to whom the Operator has granted control of the service as a whole.
Ticket - the unique code and QR code confirming a Guest’s registration for an event.
3. How the service works
3.1. The service is provided free of charge and «as is». The Operator charges nothing for running events and nothing per guest.
3.2. The service is a venue. The content of an event, how it is run, who its guests are and everything that happens at the gathering itself are determined by the Organizer, not by the Operator.
3.3. Some events are published openly and some are reachable only by a direct link. An event reachable by link is not indexed by search engines, but it is not secret either: anyone given the link can open the page.
3.4. The Operator may change what the service can do, and may suspend or discontinue it.
4. Account and signing in
4.1. Signing in is done through a Google account. The service neither creates nor stores a password of its own.
4.2. On signing in, the service receives from Google an email address, a name and a link to the profile picture. Signing in is possible only with a verified email address.
4.3. The name and picture from the Google account are filled in only when nothing has been set for that User in the service yet. Whatever the User has entered themselves takes priority.
4.4. An account belongs to one person. Access to it may not be passed to third parties.
4.5. A sign-in session lasts 60 days, after which signing in again is required. Signing out ends the session immediately.
4.6. Signing up for an event is possible without an account - a name and an email address are enough.
5. Signing up for events
5.1. Signing up for an event means an intention to attend. The Organizer may set a limit on seats, a waiting list and prior approval of requests.
5.2. After signing up, a letter with the ticket arrives at the email address. The ticket is a link, a code and a QR code; they are enough to open the ticket and get in at the door. The ticket should not be passed to other people.
5.3. A registration can be canceled from the ticket page until the Guest has been checked in at the door. The seat that is freed passes to the first person on the waiting list.
5.4. Giving somebody else’s email address when signing up is prohibited. If a registration on that address already exists, the service does not show somebody else’s ticket, but sends it again to the same address.
5.5. The Organizer may decline a request, cancel a registration, or cancel the event entirely. The service notifies everyone holding a seat when an event is canceled.
6. Rules of use
6.1. The User is prohibited from:
- giving somebody else’s data or data that is untrue;
- publishing content that breaks the law of the Republic of Uzbekistan, as well as calls to violence, insults, discrimination and harassment;
- publishing other people’s personal data without the consent of the person concerned;
- using the service to send advertising unrelated to an event, and for any mailing to people who have unsubscribed from it;
- creating events that are not in fact planned, in order to collect contacts;
- attempting to reach other people’s data, circumventing access restrictions, or enumerating page addresses, ticket codes or identifiers automatically;
- creating load that interferes with the service, including submitting forms in bulk.
6.2. The service limits how often the sign-up, cancellation and sign-in forms may be called. Beyond a reasonable rate, a request is temporarily refused.
6.3. Where the rules are broken, the Operator may restrict or end the User’s access to the service without prior notice.
7. The Organizer and their responsibility
7.1. The Organizer is solely responsible for the content of an event, its description and images, as well as for running the gathering and for what happens at it.
7.2. The Organizer receives access to the data of the guests of their own event: name, email address, phone number (if they asked for one), answers to the questions they asked, and the record of arrival. The Organizer must use that data only for running that event and for messages relating to it.
7.3. The Organizer is prohibited from passing guests’ data to third parties, merging it with unrelated databases, or using it for advertising unrelated to their own events.
7.4. In asking guests additional questions, the Organizer is responsible for the lawfulness of collecting what is asked for. Asking for data about health, religion, political views and other special categories of data is prohibited.
7.5. The number of letters an Organizer may send is limited. The limit does not apply to the service letters about the event itself - the ticket, the approval of a request, the reminder and the cancellation notice.
8. Personal data
8.1. Who processes it
The operator of personal data is Orbit Lab LLC, Tashkent, Republic of Uzbekistan. The Organizer of an event is a recipient of the data of the guests of that event, to the extent set out in clause 7.2.
8.2. What data is collected
When signing in with Google:
- the email address and whether it is verified;
- the name;
- a link to the profile picture.
When signing up for an event:
- the name;
- the email address;
- the phone number, if the Organizer asks for it;
- the answers to the Organizer’s additional questions.
If the User fills in a public organizer profile:
- the username for the page address, the description of themselves, a link to a website;
- social network account names;
- an uploaded photograph.
Created by the service automatically:
- the dates a person’s record appeared and of their last activity;
- records of events: the time of registration, its state, the ticket code, the time of check-in at the door and which organizer recorded it;
- the log of sent letters: the recipient’s address, the subject, the delivery state and the letter’s identifier at the mail provider;
- the session identifier in a cookie;
- the IP address of a request - used to limit how often forms may be called, and not kept in the database longer than that limit lasts.
Uploaded images (a profile photograph, an event cover, a logo) are stored on the service’s own server.
The service does not collect data about health, religion, ethnicity or political views, nor biometric data or payment card data.
8.3. Grounds and purposes of processing
Processing is carried out on the basis of the User’s consent, and insofar as it is necessary to provide the service the User asked for. The purposes are:
- to make it possible to sign up for an event and receive a ticket;
- to confirm the right of entry to an event by QR code;
- to report what concerns the event: approval, reminder, cancellation;
- to let the Organizer keep the guest list of their own event;
- to send mailings to those who have not opted out of them;
- to maintain an account and a sign-in session;
- to protect the service from abuse and excessive load;
- to count visits to the site in anonymised form.
8.4. Who the data is passed to
Data is passed to those who keep the service running, to the extent necessary for them to do their part:
- Google LLC - signing in with a Google account, and anonymised visit statistics;
- Brevo - delivery of email; the recipient’s address, the subject and the text of the letter are passed;
- Railway - hosting of the service and the database;
- The Organizer of an event - the data of the guests of that event, to the extent of clause 7.2.
The service uses an external language model to help the Organizer with the text of an event description and to determine which category an event belongs to. Only the text the Organizer wrote about the event is sent in such a request; guests’ personal data is not sent there.
The Operator does not sell personal data and does not pass it to third parties for their own advertising purposes.
8.5. Cross-border transfer
The servers the service runs on, and the servers of the providers named above, may be located outside the Republic of Uzbekistan. By using the service, the User agrees to their data being transferred to such servers to the extent necessary for the service to work.
8.6. Retention periods
- the sign-in session - 60 days from signing in;
- the temporary cookies that accompany signing in with Google - 10 minutes;
- information about a person and their registrations for events - while the service operates and while consent has not been withdrawn;
- the log of sent letters - while the service operates; it exists to answer the question of whether a guest received their ticket;
- the record of an opt-out from mailings is kept even after other data is deleted, since otherwise the opt-out could not be honoured.
8.7. Protection of data
Access to data is separated: an Organizer sees the guests of their own events only, and information about the community as a whole is available only to an Administrator. The connection to the site is encrypted. The session identifier is kept in a cookie that scripts on the page cannot read, and is transmitted only over a secure connection. The service stores no passwords, because it does not use any.
That said, no service can guarantee absolute security of information transmitted over the internet.
8.8. The User’s rights
The User has the right to:
- know what data has been collected about them - what is collected is described in clause 8.2;
- correct it - the name, description and links are changed in profile settings; the name and phone number given when signing up can be corrected by signing up again or by asking the Organizer;
- opt out of mailings - an «Unsubscribe» link is in every mailing; the opt-out takes effect immediately and does not cancel the service letters about events the User is registered for;
- cancel a registration - on the ticket page, until arrival has been recorded;
- withdraw consent and demand deletion of data - by contacting the Organizer of the event registered for, or the Operator.
Some information may be kept even after consent is withdrawn, where the law requires it or where it is needed in order to honour the opt-out from mailings itself.
10. Mailings
10.1. Service letters - the ticket, the approval of a request, a seat becoming free, the reminder the day before and the notice of a cancellation - go to everyone holding a seat. They are part of the service and cannot be opted out of separately: without a ticket there is no way in at the door.
10.2. Mailings - announcements from an Organizer or from the community - go only to those who have not opted out. Every such letter carries a link to opt out.
10.3. The notice that an event is canceled is sent to people who opted out of mailings as well: a canceled gathering somebody was planning to attend is not a mailing.
11. Rights in content
11.1. In publishing an event description, images and other materials, the Organizer confirms that they have the right to use them, and permits the Operator to show them on the pages of the service, in event lists and in the preview images for links.
11.2. The rights in the service itself - its design, its texts and its program code - belong to the Operator.
11.3. The Operator may remove materials that breach section 6, as well as events created in breach of these terms.
12. Limitation of liability
12.1. The service is provided «as is». The Operator does not guarantee uninterrupted operation and is not liable for losses arising from interruptions, errors or unavailability of the service.
12.2. The Operator is not the organizer of events and is not responsible for how they are run, for their content, for postponement or cancellation, nor for what participants do at the gathering itself.
12.3. The Operator is not responsible for how an Organizer handles the guest data they received in breach of clause 7.3.
12.4. The Operator is not responsible for the content of sites that Organizers link to.
13. Changes to the terms
13.1. The Operator may change this document. The current revision is always on this page, and the date of the revision is given at the top of it.
13.2. Continuing to use the service after the terms change means agreeing to the new revision.
14. Governing law
14.1. This document and the relations between the Operator and the User are governed by the law of the Republic of Uzbekistan.
14.2. Disputes not settled by negotiation are resolved in the court at the Operator’s location.
15. Details
Orbit Lab LLC
Tashkent, Republic of Uzbekistan