Privacy Policy
Last updated:
Who we are
Tikketty is a website feedback and issue tracking service operated by BCG LLC, Tallmadge, Ohio, United States (“Tikketty”, “we”, “us”). This policy explains how we handle personal information when you visit tikketty.com, create an account, or use the Tikketty app, embeddable widget, browser extensions, WordPress plugin, API and integrations (together, the “Service”).
Questions or requests: privacy@tikketty.com.
Our role
For account, billing, support and website information, we decide how the information is used and act as the controller.
For content a customer puts into a workspace, such as issues, comments, files, screenshots, recordings and information about reporters, we act as a processor (or “service provider”) for the customer that owns the workspace. If you were invited to a workspace by an agency, company or other customer, that customer controls your workspace content. Contact them first about it; we will help them respond.
Information we collect
Information you give us
- Account details: name, email address, password (stored only as a salted hash), workspace name, role and memberships, and notification preferences.
- Billing details: Stripe collects your payment card and billing details. We receive your Stripe customer ID, subscription status and seat count. We do not see or store full card numbers.
- Workspace content: issues, descriptions, comments, tags, priorities, checklists, uploaded images and PDFs, screenshots, annotations, screen recordings (with audio only if you turn on narration), suggested text changes, and emails sent to a project’s intake address, including their headers and attachments.
- Messages to us: what you send when you contact support, privacy or security.
Information collected when you report feedback
- The page address you report on (with the query string removed), the element you select and its position.
- For the embeddable widget: browser language, user agent, viewport size and pixel ratio, plus any extra metadata the website owner chooses to add. Reports from our browser extensions do not include these diagnostics or custom metadata.
- Session replay links from tools such as LogRocket or FullStory, only if the workspace enables them.
Information from connected services
If a workspace connects an integration, we store the access credentials it needs (encrypted) and the links between Tikketty issues and items in that service. Some integrations send us updates, such as status changes, comments or source control references.
Technical information
Our servers process your IP address, browser and request details to deliver the Service, keep it secure and limit abuse. We do not store IP addresses in our application database. We keep a security activity log of account and workspace actions (who did what, and when), without issue text, passwords or tokens.
Website analytics
On our public website only, and only if you accept analytics cookies, we use Google Analytics. See Cookies and similar technologies.
How we use information and our legal bases
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:
| Purpose | Legal basis |
|---|---|
| Provide the Service, including accounts, workspaces, reports, integrations and support | Performance of our contract |
| Billing, invoicing and keeping financial records | Contract and legal obligation |
| Account and service email, such as verification, password reset, invitations, notifications and digests you choose | Performance of our contract |
| Security, fraud and abuse prevention, debugging and keeping the Service reliable | Legitimate interests in running a secure service |
| Optional AI suggestions when your workspace uses them | Performance of our contract, at the customer’s instruction |
| Website analytics | Consent, which you can withdraw at any time |
| Complying with law and responding to lawful requests | Legal obligation |
We do not sell personal information, use it for advertising, or use workspace content to train AI models.
AI features
AI suggestions for titles, tags and related issues are optional. When someone in a workspace uses them, the relevant issue text is sent to OpenAI to generate a suggestion. We ask OpenAI not to store these requests. Under OpenAI’s API policies, API data is not used to train its models, and OpenAI may keep it for a limited period to monitor abuse. Suggestions only change a draft when a person accepts them.
International transfers
Tikketty is hosted in New York City, United States, and some subprocessors process data in the United States and other countries. When we transfer personal information from the EEA, the UK or Switzerland to a country without an adequacy decision, we rely on the EU–U.S. Data Privacy Framework and its UK and Swiss extensions where the recipient is certified, or on the European Commission’s Standard Contractual Clauses with the UK Addendum.
How long we keep information
- Account information is kept while your account is active.
- Workspace content, including uploaded files, is kept until it is deleted by the workspace or the workspace is closed. We do not delete files automatically based on their age.
- After an account or workspace is closed, we delete or anonymize its data, except records we must keep for billing, tax, security or legal reasons.
- Deleted data can remain in backups until those backups are replaced. Some records, such as the security activity log and records that stop a deleted item from being imported again, can outlive the original item.
- Copies already sent to an integration, by email or to a chat service are kept by that service under its own terms.
Security
We use technical and organizational measures to protect personal information, described on our Security page. No system is perfectly secure, so please use a strong, unique password and tell us about any suspected issue.
Your choices and rights
You can update your name, password and email notification settings in Settings, export issues as CSV or through the API, and delete issues, comments and files you are allowed to manage. To close your account or workspace, or for anything else, email privacy@tikketty.com.
EEA, UK and Swiss residents
You can ask to access, correct, delete or receive a copy of your personal information, and to restrict or object to how we use it. Where we rely on consent, you can withdraw it at any time. You can also complain to your local data protection authority, such as the UK Information Commissioner’s Office.
California and other U.S. state residents
Depending on where you live, you can ask to know what personal information we collect, use and disclose, and to access, correct or delete it. We do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about you. We will not discriminate against you for using these rights. You can use an authorized agent, and you can appeal a decision by replying to our response.
In the last 12 months we have collected these categories: identifiers (name, email address, account IDs, IP address); customer records (billing status); commercial information (subscription and seat history); internet activity (reported page addresses, browser details and, with consent, website analytics); audio and visual information (screenshots, recordings and narration you choose to add); and professional information (workspace and company names). We collect them from you, your workspace and services your workspace connects, for the purposes described above, and disclose them only to the recipients described above.
Making a request
Email privacy@tikketty.com. We will verify your request, usually by confirming it from your account email, and respond within the time required by law. If your request is about content in a workspace we process for a customer, we will refer it to that customer and help them respond.
Children
Tikketty is for business use and is not directed to children under 16. We do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.
Data Processing Addendum
Customers that need a Data Processing Addendum, including the Standard Contractual Clauses, can request one from legal@tikketty.com.
Changes to this policy
We will update the date at the top when this policy changes. If a change materially affects how we use your personal information, we will tell you by email or in the app before it takes effect.
Contact
BCG LLC, Tallmadge, Ohio, United States. Privacy: privacy@tikketty.com. Legal: legal@tikketty.com.