Data retention & deletion

To run attendance, leave, and payroll, Tickin stores: employee names and emails, department and role, attendance and time entries, leave and overtime records, payroll and salary figures, notification preferences, audit logs, and — when you connect them — Slack and Microsoft Teams user IDs. Passwords are stored only as bcrypt hashes; Slack bot tokens and SMTP credentials are encrypted at rest (AES-256-GCM). See the privacy policy and security overview.

While your workspace is active, your data is retained for as long as you keep your account, so the product works. You can edit or remove records (employees, leave, attendance) from within the app at any time.

A workspace is paused for non-payment 8 days after a failed payment that isn't fixed, or when a cancelled subscription ends. If a workspace stays paused for 60 days, it is deleted. Until then nothing is lost: restore billing and everything comes back as you left it. We email the workspace contact when it is paused, after 30 days, 7 days before deletion and on the last day.

When a workspace or an employee is removed, Tickin first performs a soft delete: the record is marked deleted (a workspace's status becomes deleted with a deletion timestamp; an employee is marked revoked/inactive) and is no longer accessible in the product. Related session, break, and idle records are removed immediately via database cascade.

Permanent removal of a workspace's underlying data occurs after the 60-day retention window. When a workspace is closed by its owner, that window is scheduled at the moment of closure and the permanent deletion then runs automatically: the workspace database is dropped, uploaded files (avatars, screenshots, attachments) are deleted from object storage, and chat integration records — including the stored Slack bot token — are removed.

For a workspace paused for non-payment, deletion at day 60 is automatic. Just before it, we take an encrypted backup of the workspace database. We keep it for a further 90 days in case you need it back — after that it is permanently erased.

Records we are required to keep for tax and accounting — invoices, payment records — and our internal audit log are retained after permanent deletion. These identify the account and its transactions, not your employees' HR data.

Our database (Amazon RDS) is backed up daily, and each daily backup is kept for 7 days. Separately, when a paused workspace is deleted, we keep an encrypted backup of it for a further 90 days in case you need it back — after that it is permanently erased. Only Tickin's operations team can reach either backup.

Removing Tickin from your Slack workspace stops all messages and notifications immediately and marks the integration disconnected; the stored bot token is invalidated. Your HR data in Tickin (attendance, leave, payroll) is unaffected. Full detail: Slack data & uninstall.

To close your workspace, the owner emails support@tickin.pro from the owner address. We confirm and close it: everyone is signed out, scheduled emails stop, and the subscription is cancelled. The data is kept for 60 days in case you change your mind, then deleted. Because you asked for it to be removed, no backup is kept.

Individual employees should route deletion requests through their organization's admin (the data controller). Admins who are not the owner can email support@tickin.pro.