Privacy policy

This policy explains what personal data Tikkaroo collects, why, and what you can do about it. It covers our website (tikkaroo.com) and our product (app.tikkaroo.com).

Who we are

Tikkaroo is operated by [legal entity name], [registered address] (“Tikkaroo”, “we”, “us”). For anything in this policy, contact us at hello@tikkaroo.com.

Two kinds of data

Your account data. When you sign up, you give us your name, email address and a password. We are the controller of this data.

Your customers’ data. When you connect a mailbox or add the live chat widget, Tikkaroo processes the emails and chat messages your customers send you, including their names and email addresses. You are the controller of that data and we process it on your behalf, as described in our Data processing agreement.

What we collect

• Account details: name, email address, and your password, which we store only as a salted PBKDF2 hash.
• Connected mailboxes: the email address of each mailbox you connect, and OAuth access and refresh tokens from Google or Microsoft, encrypted with AES-GCM.
• Support conversations: email threads from connected mailboxes (the last 14 days when you connect, then new mail), chat messages sent through the widget, and the notes and replies your team writes.
• Billing: your plan and subscription status. Card details are collected and stored by Stripe, not by us.
• Technical data: a session cookie to keep you signed in. [Confirm whether server logs record IP addresses and for how long.]

Why we use it

• To provide the service you signed up for: syncing mail, showing tickets, sending your replies.
• To bill you for your subscription.
• To keep the service secure and fix problems.
• To email you about your account. [Decide whether we will send product or marketing email, and the legal basis for it.]

[Add the legal basis for each purpose under GDPR / UK GDPR, and any other jurisdiction we serve.]

Who we share it with

We use these service providers to run Tikkaroo:

We don’t sell personal data. [Confirm the full sub-processor list before launch.]

How long we keep it

[Set retention periods for account data, support conversations after a workspace is cancelled, and backups.]

Your rights

Depending on where you live, you can ask to access, correct, export or delete your personal data, or object to how we use it. Email hello@tikkaroo.com. If your data is in a Tikkaroo workspace run by a company you contacted, please ask that company first: they control it.

International transfers

[Describe where data is stored and processed, and the safeguards used for transfers.]

Changes

If we change this policy in a way that matters, we’ll tell account owners by email before it takes effect.