Privacy Policy

Last updated: 11 September

DropRSVP ("DropRSVP," "we," "us," or "our") operates a platform that helps people discover, book, and host events across Malaysia. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the choices you have. It applies whether you use DropRSVP as an attendee, an event organizer, or simply as a visitor to our website or app.

By using DropRSVP, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our services.

1. Who This Policy Covers

This policy applies to:

Attendees, people who browse events, create accounts, and buy or RSVP to tickets
Organizers, people or businesses who list events, sell tickets, and manage guests
Visitors, anyone browsing DropRSVP without an account

2. Information We Collect

2.1 Information you give us directly

Account details such as your name, email address, phone number, and password
Payment information when you buy tickets, such as billing details processed through our payment provider
Event details submitted by organizers, such as event descriptions, dates, venues, pricing, and seating layouts
Bank account details submitted by organizers for receiving payouts
Communications you send us, such as support requests, feedback, or messages to event organizers

2.2 Information collected automatically

Device information such as browser type, operating system, and device identifiers
Log data such as IP address, access times, and pages viewed
Location data (city level) used to show relevant nearby events
Cookies and similar technologies, described further in Section 8

2.3 Information from third parties

Payment confirmation data from our payment processing partners
Information from login providers if you choose to sign in using a third party account (such as Google or Facebook)

3. How We Use Your Information

We use personal data to:

Create and manage your account
Process ticket purchases and generate your secure QR pass
Let organizers check you in at events using your QR code
Show you relevant events based on your city and interests
Process payouts to organizers
Send transactional messages, such as ticket confirmations, event reminders, and refund updates
Send marketing communications, where you have opted in, which you can unsubscribe from at any time
Detect and prevent fraud, abuse, or unauthorized use of the platform
Improve our platform through analytics and product development
Comply with legal obligations, including Malaysia's Personal Data Protection Act 2010 (PDPA)

4. How We Share Your Information

We do not sell your personal data. We share information only in the following circumstances:

With event organizers: if you RSVP or buy a ticket to an event, the organizer receives your name, contact details, and ticket information so they can manage attendance and communicate with you about the event.
With service providers: we work with payment processors, cloud hosting providers, and analytics services that help us operate DropRSVP. These providers only access the data needed to perform their function.
For legal reasons: we may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of DropRSVP, our users, or the public.
In a business transfer: if DropRSVP is involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to this policy or its successor.

5. Payments

Ticket payments are processed through licensed third party payment providers. DropRSVP does not store full payment card numbers on our servers. For paid ticket sales, a service fee (a percentage of the ticket price or a fixed amount per ticket) is deducted automatically to cover payment processing, ticketing, and payout costs. Organizers can view a full, itemized breakdown of fees in their dashboard.

6. Data Retention

We retain personal data for as long as your account is active or as needed to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where we are required to retain it for legal, tax, or accounting purposes.

7. Your Rights

Under the Malaysian Personal Data Protection Act 2010, and depending on your location, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate or incomplete data
Withdraw consent to marketing communications at any time
Request deletion of your account and associated personal data, subject to legal retention requirements
Object to certain uses of your data, such as profiling for marketing purposes

To exercise any of these rights, contact us using the details in Section 12.

8. Cookies and Tracking Technologies

DropRSVP uses cookies and similar technologies to:

Keep you signed in
Remember your preferences, such as your city
Understand how visitors use our platform so we can improve it
Measure the effectiveness of our marketing

You can control cookies through your browser settings. Disabling cookies may affect certain features, such as staying logged in or saved event preferences.

9. Data Security

We use reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, including encryption of QR ticket codes and secure payment processing. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

DropRSVP is not intended for children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

11. International Data Transfers

If you access DropRSVP from outside Malaysia, your information may be transferred to and processed in Malaysia or other countries where our service providers operate. We take steps to ensure such transfers comply with applicable data protection laws.

12. Contact Us

If you have questions about this Privacy Policy or how your personal data is handled, contact us at:

Email: support@droprsvp.com

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last updated" date. Continued use of DropRSVP after changes take effect means you accept the updated policy.