EarnOn Privacy Policy

This Privacy Policy explains how Bizionic Technologies Midwest INC and its affiliate, Bizionic Technologies Pvt. Ltd. (“EarnOn,” “we,” “us,” or “our”), collect, use, disclose, and protect personal data when you access or use our website, our iOS and Android apps, and our Progressive Web App (“PWA”) — including the core EarnOn.ai creator platform, EarnOn Events, our physical event ticketing and hosting service, and EarnOn’s Brand Hub Marketplace (collectively, the “Services” or “Platform”). EarnOn Events and Brand Hub Marketplace are each governed by their own Terms of Service, separate from the core platform’s Terms of Service; this Privacy Policy covers personal data handling across all three.

This policy applies to all users, including visitors, registered users, creators, subscribers, event hosts, event guests, brands and businesses using Brand Hub Marketplace, and anyone who otherwise interacts with EarnOn. By accessing or using the Services, you acknowledge that you’ve read, understood, and agreed to the practices described here.

To make this policy easier to navigate, we’ve organized it into the sections below. Summaries are provided for convenience but are not part of the binding policy — read the full section for complete detail.

Contents: 1. Information We Collect · 2. How We Use Your Information · 3. Legal Basis for Processing · 4. Cookies & Tracking Technologies · 5. Data Sharing & Disclosure · 6. Data Retention · 7. Your Choices · 8. Your Data Rights · 9. California Privacy Rights · 10. International Data Transfers · 11. Children’s Privacy · 12. Security Measures · 13. Policy Updates · 14. Contact Us

1. Information We Collect

Summary: We collect information you give us directly (account details, event listings, verification documents), information collected automatically as you use the Platform (device data, usage logs, and — specifically for EarnOn Events — your location during check-in), and information from other sources like payment processors and social login.

1.1 Information You Provide to Us

Account & Profile Information - Full legal name, email address, mobile number - Username and encrypted password - Date of birth (for age eligibility — 18+ platform-wide, with additional per-event age gates such as 21+ where a host sets one) - Profile photo, biography, and public profile details

Identity Verification - Government-issued identification document, submitted where required for host verification tiers, fraud prevention, age-gated event eligibility, or regulatory compliance - A photo of you holding that ID next to your face, used solely so a member of our verification team can manually confirm it’s the same person and that the ID appears genuine. We don’t run this comparison through automated facial-recognition or face-matching software, and we don’t extract or generate a biometric template, faceprint, or other biometric identifier from either image. If you submit an Aadhaar card (Indian Users), we mask/redact the Aadhaar number in storage.

Creator & Host Content - Creator uploads, descriptions, tags, and metadata (core EarnOn platform) - Event listings you create as a host — title, description, venue address, coordinates, ticket tiers, pricing, house rules, and any pre-event photos or videos you upload - Post-event proof media — photos or videos a host uploads after an event concludes, used to confirm the event took place as described and to resolve disputes if raised

Financial & Transaction Data - Payment method references or tokens (we do not store complete card numbers or bank credentials — all payments run through our compliant payment processing partner) - Wallet balances (in US Dollars or another currency we support) and payout logs - EAON purchase and spending history (which Creator Interaction it was spent on, which Creator received it, when, and its US$-equivalent value), used to credit Creator Earnings and for the fraud/AML purposes described in Section 2.1 - Ticket purchase records, including tier, add-ons, and price paid - Ticket transfer records, including sender, recipient, and any transfer amount

Brand Hub Marketplace — Business/Brand Profile - Business name, business registration or tax ID, industry category, and a business contact person’s name, email, and phone number - Business verification documents, where we require them to confirm a brand or business is legitimate before it can list campaigns or contact Creators - Payment method references for funding a campaign, held under the same restrictions as other Financial & Transaction Data above

Brand Hub Marketplace — Campaign & Deal Data - Campaign briefs, deliverable requirements, and creative guidelines a brand provides - Deal terms agreed between a brand and a Creator, including price, deliverable dates, and usage rights for the resulting Content - Deliverables a Creator submits for a campaign, and any approval, revision request, or rejection a brand records against them - Messages exchanged between a brand and a Creator in connection with a campaign

1.2 Information We Collect Automatically

Log & Device Information. Browser type, access timestamps, IP address, device model, operating system, and the page or screen you accessed before ours.

Geolocation Information — including EarnOn Events check-in. We collect device location in two distinct contexts, and treat them differently:

•             General location, based on your consent (for example, enabling location services to see nearby events), used to improve recommendations.

•             Precise check-in geolocation, collected specifically when you use the “I’m here” self check-in feature at a physical event. This is a latitude, longitude, and accuracy reading captured at the moment you check in, used exclusively to confirm you were physically present at the venue before your ticket is marked checked in. This location data may also be used as evidence if a dispute is later raised about that event (for example, comparing a buyer’s check-in location against the venue address). We do not track your location continuously, and check-in location data is not used for advertising.

Cookies and Similar Technologies. Small data files and pixel tags that help us maintain sessions, remember preferences, and understand usage. See our Cookie Policy for full detail.

1.3 Information We Collect From Other Sources

•             Payment processor. Our integrated payment partner shares transaction confirmations, payout status, and limited account-matching data (such as the email associated with a payment) necessary to complete ticket purchases, refunds, and host payouts.

•             Social media services, if you register or log in through a third-party account.

•             Other members. If another user tags you, mentions you in a review, or reports content involving you, we receive that information.

•             Corporate affiliates, including between Bizionic Technologies Midwest INC and Bizionic Technologies Pvt. Ltd., for account administration across our dual entity structure.

2. How We Use Your Information

Summary: We use your information to operate the Platform (including running EarnOn Events’ escrow, check-in, and dispute systems), to communicate with you, and to improve our services. We do not use it for purposes incompatible with why it was collected.

2.1 Operating the Platform

•             Create, authenticate, and manage your account

•             Enable content creation, publishing, subscriptions, and monetization on the core platform

•             Process ticket purchases, hold funds in escrow, and release payouts to hosts according to our Cancellation, Refund & Dispute Policy

•             Verify your location during event check-in to confirm attendance and prevent fraudulent check-ins

•             Review dispute evidence — including check-in geolocation, post-event proof media, and chat transcripts between host and guest — when a “Raise an issue” case is filed

•             Verify identity, age eligibility, and host verification tier

•             Detect, investigate, and prevent fraud, abuse, or policy violations, including cap-violation attempts on ticket resales

•             Verify a business’s identity before allowing it to list campaigns or contact Creators on Brand Hub Marketplace

•             Match brands with Creators for sponsorship and campaign opportunities, and facilitate the deal, deliverable-review, and payment process between them

•             Provide customer support and respond to inquiries

•             Improve Platform performance and develop new features

•             Perform accounting, tax, and legal administration

2.2 Communicating With You

•             Respond to your questions and provide support

•             Send you updates about products, services, and events, according to your notification settings

•             Notify you of check-in window openings, reschedule notices, dispute outcomes, and transfer offers — these are transactional notifications tied to a ticket you hold, not marketing, and cannot be fully disabled while you hold an active ticket

•             Send technical notices, security alerts, and administrative messages

2.3 Other Uses

•             Personalize event and creator recommendations

•             Facilitate sponsorships or promotions where applicable

•             Deliver relevant advertising, subject to your choices described in Section 7

•             Combine information collected for the purposes described in this policy

3. Legal Basis for Processing

If you’re in a jurisdiction that requires a specific legal basis for processing personal data, our basis depends on the type of data and context:

•             Contractual necessity — to provide the Services you’ve requested, such as processing a ticket purchase or running the escrow and check-in systems that make a ticket valid.

•             Consent — for example, precise geolocation for check-in requires your active consent at the moment you tap “I’m here”; general location for recommendations requires consent via device settings; ID verification requires your consent as described in Section 7 of the core platform Terms of Service.

•             Legal obligation — to meet tax, financial recordkeeping, or regulatory requirements tied to payment processing.

•             Legitimate interests — for fraud prevention (including detecting ticket-transfer price-cap violations), platform security, dispute resolution, and improving the Services, balanced against your rights.

Where you submit identity verification documents or check-in location data, this may constitute sensitive personal data in some jurisdictions. We process it only for the specific verification or check-in purpose stated, under explicit consent or legal obligation, and do not repurpose it for advertising.

4. Cookies & Tracking Technologies

We use cookies and similar technologies to maintain login sessions, secure your account, remember preferences, and analyze usage trends. You can manage cookie preferences through your browser settings; disabling cookies may limit certain Platform features. Full detail, including how to opt out of any cookies used for advertising, is in our Cookie Policy.

5. Data Sharing & Disclosure

Summary: We share data only in limited circumstances: with service providers who help run the Platform, with the other party to a transaction (host/guest), when legally required, in a corporate transaction, or with your direction. We do not sell personal data.

5.1 Between Hosts and Guests

•             A host sees a guest’s name, ticket tier, add-ons purchased, and check-in status for their own event, and — where a dispute is raised — the evidence submitted as part of that case.

•             A guest sees a host’s public profile, verification tier badge, and event details.

•             If you transfer a ticket, the recipient sees your name (or the identifier you provided) as the sender; you see theirs.

5.2 With Service Providers

We use service providers for payment processing, cloud hosting, email and push notification delivery, and customer support. We perform identity verification ourselves, in-house (see Section 1.1); we don’t use a third-party identity-verification vendor. Our service providers may access information about you only as needed to perform their functions, under confidentiality obligations.

5.3 Legal Compliance and Protection

We may disclose information to government authorities or other parties if we believe disclosure is required by law, regulation, or legal process, or if necessary to protect the rights, property, or safety of EarnOn, our users, or the public — including investigating fraud, ticket-cap circumvention, or violations of our Cancellation, Refund & Dispute Policy, Terms of Service, or Acceptable Use Policy. This includes reporting child sexual abuse material and related conduct to NCMEC, Indian law enforcement, and other competent authorities as required by law.

5.4 Corporate Transactions and Affiliates

Information may be shared with our current or future corporate parents, subsidiaries, or affiliates — including between Bizionic Technologies Midwest INC and Bizionic Technologies Pvt. Ltd. — and may be transferred as part of a merger, acquisition, financing, or sale of assets.

5.5 Aggregated and De-Identified Data

We may share information that has been aggregated or de-identified such that it no longer identifies you. This information is not subject to this Privacy Policy.

EarnOn does not sell personal data.

6. Data Retention

We retain personal data only as long as necessary to: - Provide the Services, including keeping your ticket and event history accessible to you - Resolve open disputes — data submitted as dispute evidence (including check-in geolocation and proof media) is retained through resolution and for a reasonable period afterward in case of appeal - Provide a refund if you’re entitled to one under our Cancellation, Refund & Dispute Policy - Maintain accurate financial and payout records for hosts, for accounting and tax purposes - Detect and prevent fraud or repeated policy violations - Meet legal, tax, or regulatory recordkeeping requirements

Account deletion. If you delete your core platform account, it follows the schedule in our Terms of Service, Section 22: a 60-day window in which you can restore it, after which your profile, Content, messages, ID document photo, and verification photo are permanently deleted. A limited verification-outcome record (not the photos themselves) and transaction/tax/AML records may be retained longer where law requires it, as described in the Terms of Service, Sections 7 and 22.

We may deactivate accounts inactive for an extended period. Once we no longer have a legitimate business need to retain your information, we delete it or take steps to de-identify it in accordance with applicable law.

7. Your Choices

Account Information. Update or correct your account details in your profile settings, or request a change by contacting us as described in Section 14.

Location Information. You control location sharing through your device settings. - General location (used for recommendations) can be turned off at any time via your device’s location permissions, without affecting your ability to buy or use tickets you already hold. - Check-in geolocation is requested only at the moment you actively tap “I’m here” to check in — declining this permission means you won’t be able to complete self check-in for that event and would need to use a host’s manual override instead, where available.

Cookies. Manage cookie preferences through your browser or our Cookie Settings panel, as described in our Cookie Policy.

Marketing Communications. Opt out of promotional messages via the unsubscribe link in any marketing email, or through your notification settings. You’ll continue to receive transactional messages tied to an active ticket or event you’re hosting (check-in window opening, dispute updates, reschedule notices) — these aren’t marketing and can’t be disabled while the underlying ticket is active.

8. Your Data Rights

Depending on your jurisdiction, you may have the right to: - Access the personal data we hold about you - Correct inaccurate information - Delete your personal data, subject to the retention needs described in Section 6 (for example, we may need to retain transaction records for a completed, disputed, or recently refunded event before deletion) - Restrict or object to certain processing - Request portability of your information - Withdraw consent at any time where processing is based on consent — this won’t affect the lawfulness of processing carried out before withdrawal - Opt out of marketing communications, as described in Section 7 - Complain to your local data protection authority about our handling of your information — including, for Indian Users, the Data Protection Board of India once established under the DPDP Act, and for EU/UK Users, your local supervisory authority or the ICO respectively

To exercise any of these rights, contact us as described in Section 14, or — for content or platform grievances specifically — our Grievance Officer at grievance@earnon.ai. We may need to verify your identity before processing a request. We will not discriminate against you for exercising these rights, though some Platform features may become unavailable as a result (for example, deleting your account means you can no longer access ticket history for events you’ve attended).

Note on organizer/host deletion requests. If you’re a host with upcoming events, active listings, or funds in escrow, deleting your account may be delayed until those events conclude and any pending payouts or disputes resolve, since deletion cannot come at the expense of a guest’s ability to receive a refund they’re entitled to.

9. California Privacy Rights

California residents have rights to access, correct, and delete their personal information, and to request details about our data practices, under the CCPA and related law. We do not consider our data-sharing practices described in Section 5 to constitute a “sale” of personal information under California law. To exercise these rights, see Section 8. We may verify your request by asking for additional identifying information. We will not charge different prices or provide a different quality of service for exercising your rights, except where legally permitted.

We currently do not respond to browser “do-not-track” signals, due to the lack of a consistent industry standard for interpreting them.

10. International Data Transfers

EarnOn operates through Bizionic Technologies Midwest INC (United States) and its affiliate Bizionic Technologies Pvt. Ltd. (India). Depending on where you’re located and which entity’s services you use, your information may be transferred to, stored, and processed in the United States, India, or other countries where our service providers operate. These countries’ data protection laws may differ from those of your home country. Where required, we use appropriate safeguards — such as standard contractual clauses — to ensure your information remains protected consistent with this Privacy Policy regardless of where it’s processed.

11. Children’s Privacy

EarnOn’s Services are not directed to individuals under 18, and our Terms of Service require that all users be at least 18 years old. We do not knowingly collect personal data from anyone under 18. If we learn that we’ve collected personal data from someone under 18, we will delete it promptly. If you believe a minor has provided us with personal data, contact us at the address in Section 14.

12. Security Measures

We implement administrative, technical, and organizational safeguards designed to protect your information from unauthorized access, loss, misuse, or alteration — including encryption of stored passwords, access controls limiting employee access to personal data to what’s needed for their role, and security review of the systems handling payment and check-in data specifically, given the financial and location-sensitive nature of that data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You’re responsible for keeping your password confidential. If you believe your account has been accessed without authorization, contact us immediately.

13. Policy Updates

We may update this Privacy Policy from time to time. When we do, we’ll publish the current version and revise the “Last updated” date at the top of this page. For material changes, we’ll provide additional notice — such as an email or a prominent in-app notice — before the changes take effect. Continued use of the Services after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

For privacy-related questions, requests, or complaints:

•             Email: privacy@earnon.ai

•             General support: support@earnon.ai

•             Content or platform grievances (including our India Grievance Officer, Mohd Hussaini): grievance@earnon.ai

If you are located in a jurisdiction with a designated data protection authority and believe we haven’t adequately addressed your concern, you have the right to lodge a complaint with that authority directly.