Privacy Policy

1. Introduction

WhoTheFolk, LLC (“WhoTheFolk,” “we,” “us,” or “our”), a Delaware limited liability company, operates the cakepop platform at cakepop.io (the “Platform”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Platform. Please read this policy carefully. By using the Platform, you consent to the practices described herein.

2. Information We Collect

2.1 Information You Provide

When you create an account, purchase tickets, or contact us, we may collect: your name, email address, phone number, billing address, payment information (processed and stored by Stripe, not by us directly), and any other information you voluntarily provide.

2.2 Information Collected Automatically

When you access the Platform, we may automatically collect: your IP address, browser type and version, operating system, device identifiers, pages visited, time and date of visits, time spent on pages, referring URLs, and other diagnostic data.

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to monitor activity on our Platform and hold certain information. For details, see our Cookie Policy.

3. How We Use Your Information

We use the information we collect to:

(a) Provide, operate, and maintain the Platform; (b) process ticket purchases and transactions; (c) send transactional communications, including order confirmations, ticket delivery, and transfer notifications; (d) respond to your inquiries and support requests; (e) detect, prevent, and address fraud, abuse, and security issues; (f) comply with legal obligations; (g) enforce our Terms of Service; (h) analyze usage patterns to improve the Platform; and (i) send promotional communications — including alerts when an artist you follow announces a new show, and emails from event Organizers you’ve bought tickets from about their other events — using the granular, per-artist and per-organizer controls described in Section 7, and you may opt out of any of these at any time.

4. How We Share Your Information

We may share your personal information in the following circumstances:

Event Organizers: When you purchase a ticket, we share your name and email address with the event Organizer so they can manage attendance and communicate event-related information to you. Organizers may also use your email address to tell you about their other upcoming events — a separate, optional communication from event management that is controlled by your organizer-communications preferences (see Section 7). Whether this is on by default depends on your region, and you can change it at any time, either for every organizer at once or for one organizer individually.

Payment Processor: Payment information is transmitted directly to Stripe, Inc., our third-party payment processor. We do not store your full credit card number. Stripe’s use of your data is governed by their Privacy Policy.

Service Providers: We may share information with third-party vendors who assist us in operating the Platform (e.g., hosting, analytics, email delivery), subject to confidentiality obligations.

Legal Requirements: We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).

Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

SMS / Mobile Opt-In Data: Information collected for our SMS programs — the customer-support replies you receive after you text or call our support line, and the verification codes you request — including your mobile phone number, opt-in status, and opt-out preferences — is not shared with third parties or affiliates for marketing or any other purpose. Mobile opt-in data is used solely to provide the customer-support replies and transactional verification codes you have requested and to honor STOP / HELP keyword responses. For details on the SMS program, see our SMS Program Terms.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes, and enforce our agreements. Transaction records are retained as required by applicable tax and financial reporting laws.

6. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS), secure password hashing, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

Access and Portability: Request a copy of the personal data we hold about you.

Correction: Request correction of inaccurate or incomplete personal data.

Deletion: Request deletion of your personal data, subject to legal retention requirements.

Opt-Out: Unsubscribe from promotional emails at any time using the unsubscribe link in our emails or by contacting us.

Artist Alerts: When you follow an artist, you choose separately whether to receive email (and, where available, text) alerts about that artist — following an artist does not by itself sign you up for anything. Unfollowing an artist automatically turns off any alerts for that artist. Manage this any time in your account’s notification settings.

Organizer Communications: You control, separately from artist alerts, whether event Organizers you’ve bought a ticket from can email you about their other events. You can turn this off entirely, or allow or block specific Organizers individually, in your account’s notification settings.

Cookie Preferences: Manage your cookie preferences through your browser settings or our cookie consent banner.

To exercise any of these rights, contact us at privacy@cakepop.io. We will respond within 30 days, or sooner where required by law.

8. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, the right to request deletion, and the right not to be discriminated against for exercising your rights. We do not sell your personal information.

9. International Users

The Platform is operated from the United States. If you access the Platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using the Platform, you consent to this transfer.

EU / UK / EEA Users: If we determine, from your order history, that you are likely located in the European Union, United Kingdom, or European Economic Area, the organizer-communications default described in Section 7 is off rather than on — an Organizer you’ve bought a ticket from will not email you about their other events unless you affirmatively turn that on. Artist alerts (email and text) are opt-in by default for every user regardless of region, and are never enabled without your explicit choice at the time you follow an artist.

10. Children’s Privacy

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will take steps to delete such information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

WhoTheFolk, LLC
Email: privacy@cakepop.io
Phone: (888) 388-2253 (also (888) 388-CAKE)