Last updated: June 27, 2026

1. Who we are

TicketDrop is operated by CavenX (https://cavenx.com), which acts as the data controller for personal data collected through this service. This policy explains how we handle your data when you buy tickets on TicketDrop.

2. What we collect

• Email — for ticket file delivery.
• Order data — event, seat, price, order ID.
• Payment metadata — transaction references from our payment partners. We never store full card numbers.
• Technical data — IP, browser, timestamps for fraud prevention.

We do not require accounts. We do not sell your data.

3. Why we process data

• Deliver ticket files and order confirmations
• Process payments and prevent fraud
• Handle support and disputes
• Comply with applicable law

4. Legal basis

EU/EEA & UK (GDPR / UK GDPR): Contract performance (Art. 6(1)(b)), legitimate interests in fraud prevention and service security (Art. 6(1)(f)), and consent where required (Art. 6(1)(a)).
United States: As permitted under applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) where applicable.

5. We do not sell your data

TicketDrop does not sell or share personal information for cross-context behavioral advertising. We do not use advertising or tracking cookies.

6. Payment partners

Card payments are processed by Razorpay. Crypto payments by NOWPayments. Each partner processes data under their own privacy policies. We share only what is needed to complete your transaction.

7. Retention

Order records are kept for dispute resolution and legal compliance. You may request deletion where applicable law permits.

8. Your rights

Depending on your location, you may have the right to access, correct, delete, or receive a copy of your data, and to object to or restrict certain processing.

• EU/EEA & UK: Contact us to exercise GDPR rights. You may lodge a complaint with your local supervisory authority (e.g. ICO in the UK).
• California residents: Rights to know, delete, and correct personal information. We do not sell personal information. Submit requests to privacy@cavenx.com.

9. International transfers

Your data may be processed in the United States and other countries where our infrastructure and payment partners operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

10. Children

TicketDrop is not directed at children under 16. We do not knowingly collect personal data from children. Contact us if you believe a child has provided data and we will delete it.

11. Security

TLS encryption in transit, PCI DSS-compliant payment processing, and access controls on order data.

12. Contact

Privacy: privacy@cavenx.com
General: pushkin@cavenx.com