Privacy Policy

RigPass, powered by VantaFox · Last updated 23 October 2026

RigPass is a booking and cafe-management platform run by VantaFox. Independent gaming cafes use it to take bookings and run their PCs; each cafe also sees the data of its own customers (below). Questions or requests: amstudio678@gmail.com.

What we collect

Sign-in: with Google we receive your name, email address and Google account id (we do not store your Google password or photo). With an email code we store your email address. If WhatsApp login is offered, we store your WhatsApp number.
Phone number: the number you type in your profile, so staff can contact you about a booking. It is not verified and is not used for SMS.
Profile (optional): display name, username, profile photo, posts and photos you upload, and your choice to hide your activity.
Bookings and sessions: station, date and time, extensions, check-in and end times, food and drinks added, bills, membership hours, reward points, cancellations and booking bans.
Payments: the ₹ advance is paid through Razorpay. Your card, UPI or bank details go to Razorpay, not to us; we keep the Razorpay order and payment ids and the amount.
Chat and friends: messages you exchange with staff, friend requests and in-app notifications. Friends can see your name, username, photo and play stats; you can hide your activity.
Alerts: if you turn on notifications, we store your browser's push subscription (a technical address and keys from your browser) to send booking alerts. Turning alerts off or logging out removes it.
Gaming PCs: while you play, the RigPass Client on the cafe PC applies cafe rules (for example blocking some apps, new game installs and downloads) and sends staff requests to unlock them. It does not record your screen, keystrokes or game accounts.
Technical: your IP address is used briefly to limit repeated login attempts. For cafe staff sign-ins we keep a log of attempts (login name, time, IP address, success or not) so the cafe owner can spot misuse. Our host keeps normal server logs.

How we use it

To run your bookings, check you in, bill you, apply memberships, rewards and cancellation rules.
To send booking alerts you asked for (push notifications, email login codes, and WhatsApp messages only if the cafe has set WhatsApp up).
To keep the cafe's records (booking spreadsheets for the cafe's own accounts) and to keep the app secure.

We do not sell your data, and we do not use it for advertising.

Location

"Near me" uses your device location only when you tap it, and only in your browser, to sort venues by distance. We do not store your location. Venue maps use OpenStreetMap tiles, and the tile server sees your IP address.

Reviews, venues and owners

Your review shows your display name and rating publicly. The venues you book with see your booking details, your contact phone and your bill, so they can serve you. A cafe sees only its own bookings and customers: staff can find a customer by full phone number, but browsing by part of a number only shows people who booked or bought a membership at that cafe. Venue owners and staff sign in with email or Google and a cafe login code, and we keep their role and actions (for example who closed a bill or changed a setting) for the venue's reports.

Who else handles it

Google (sign-in), Resend (sending login code emails), Razorpay (payments), your browser's push service (for example Google, Apple or Mozilla) for alerts, Meta WhatsApp only if enabled, Render (our hosting) and Turso (our database storage).
Booking records may be copied to the cafe's own spreadsheet or booking software.
We may share information if the law requires it.

Google Places: for venues that link a Google listing, our server fetches the rating and keeps it for up to 30 minutes. Your data is not sent to Google for this. Payments for the advance are handled by Razorpay. Emails (sign-in codes, owner reports) are sent through Resend when it is enabled.

How long we keep it

We keep your account and booking history while you have an account, and billing records as long as Indian tax and accounting rules require. Login codes expire within 10 minutes and are deleted after use.

Your choices

Edit your name, username, photo and phone in Profile; delete your posts; hide your activity from friends; turn alerts off in your browser.
Email amstudio678@gmail.com to get a copy of your data, correct it, or delete your account. We reply within 30 days. Billing records we must keep by law are kept until that period ends.

Children

The app is for people aged 13 and over. If you are under 18, use it with a parent's or guardian's permission.

Changes

If this policy changes, we update the date above and show the new version here.