Last updated: June 27, 2026

1. Who we are

TicketDrop is operated by CavenX, with registered office at Gorakhpur, Uttar Pradesh 273007, India and operating office at 2nd Floor, 4th Block, Koramangala, Bangalore, Karnataka 560034, India. This policy explains how we collect, use, and protect your personal data when you purchase tickets on TicketDrop.

2. What we collect

• Email address — provided at checkout for ticket delivery and receipts.
• Order data — event, seat, price, order ID, and delivery status.
• Payment metadata — transaction references from Razorpay (fiat) or NOWPayments (crypto). We do not store full card numbers.
• Technical data — IP address, browser type, and timestamps for fraud prevention and security.

We do not require accounts. We do not sell your data.

3. Why we process data

• Deliver tickets and send order confirmations
• Process payments and prevent fraud
• Handle support requests and disputes
• Comply with applicable law, including the DPDP Act 2023

4. Legal basis (DPDP Act 2023)

We process personal data based on your consent (email at checkout), performance of contract (ticket delivery), and legitimate interests (security and fraud prevention). You may withdraw consent or exercise your rights as described below.

5. Data localization

CavenX hosts institutional and operational data in India. TicketDrop order and payment records are stored on infrastructure compliant with CavenX's data localization commitments.

6. Payment partners

Fiat payments are processed by Razorpay. Crypto payments are processed by NOWPayments. Each provider has its own privacy practices governed by their terms. We share only the data required to complete your transaction.

7. Retention

Order records are retained for dispute resolution, accounting, and legal compliance. You may request erasure where the DPDP Act or applicable law permits, subject to legal retention obligations.

8. Your rights

Under the DPDP Act 2023, you may:

• Access and correct your personal data
• Request erasure where applicable
• Nominate another person to exercise rights on your behalf in certain circumstances
• Lodge a grievance with our Data Protection Officer

9. Security

We use TLS encryption in transit and industry-standard access controls. CavenX maintains end-to-end encrypted communications infrastructure and SOC 2 Type II certification for its platform operations.

10. Contact

Privacy / DPDP grievances: privacy@cavenx.com
General: hello@cavenx.com
Security: security@cavenx.com