Privacy Policy

Last updated: October 2026

This Privacy Policy explains how Tickin ("we", "us") collects, uses, and protects information when you use our website and the Tickin HR platform (the "Service"). By using the Service you agree to this policy.

1. 01

   Information we collect

   Account and workspace information you provide (name, work email, company, team members); usage and time-tracking data generated when your team uses the Service (clock-ins, attendance, leave, payroll inputs); and technical data such as IP address, browser type, and pages visited, collected automatically. We do not intentionally collect sensitive personal data beyond what is necessary to operate HR features.

2. 02

   How we use your information

   To provide and operate the Service, authenticate users, process payroll and reporting, send transactional and service emails, provide support, prevent abuse, and improve the product. Workspace data is processed on behalf of the customer (the employer) who controls it.

3. 03

   Cookies and analytics

   We use essential cookies to keep you signed in and remember your language preference. We use Google Analytics 4 to understand aggregate, anonymized website usage such as pages viewed and traffic sources. You can opt out through your browser settings or Google's opt-out tools.

4. 04

   How we share information

   We do not sell your personal data. We share data only with sub-processors that help us run the Service (hosting, email delivery, payment processing through our billing provider), each bound by confidentiality and data-protection obligations, and where required by law. A current list is on our Subprocessors page: https://tickin.pro/subprocessors

5. 05

   Customer reviews and testimonials

   Workspace administrators can choose to send us a review of Tickin from inside the app. A review is only sent if they tick a box agreeing that it may be shown publicly on tickin.pro, and we read every review before it appears. If we publish it, the website shows the reviewer's first name and the initial of their last name, their job title as it appears in their Tickin profile, their company name, their star rating and the text of the review. We never publish email addresses. We may correct a spelling mistake, but we never change what the reviewer said. Customers who appear in our video or written testimonials agreed to be featured. You can withdraw your consent at any time: a review that is still waiting can be withdrawn in the app, and to have a published review or testimonial removed, email support@tickin.pro and we will take it down.

6. 06

   Integrations (Slack and Microsoft Teams)

   If you connect Slack or Microsoft Teams, we store the workspace ID, the connection's access token, and a mapping of chat users to Tickin accounts (by email). Access tokens are encrypted at rest (AES-256-GCM). When these integrations are active, attendance, leave, and related notifications are delivered to the channels or people you choose — so that information passes through Slack or Microsoft as part of delivering the message. Tickin does not read your conversations, message history, or files. Disconnecting the integration stops this immediately; see https://tickin.pro/slack-data-and-privacy

7. 07

   Data security

   Data is encrypted in transit using TLS. Our database runs on Amazon RDS with encryption at rest enabled and daily automated backups kept for 7 days. When a paused workspace is deleted, an encrypted backup of it is kept for a further 90 days, then permanently erased. Passwords are stored only as one-way bcrypt hashes, and sensitive integration credentials (such as Slack bot tokens and email server credentials) are encrypted with AES-256-GCM. Each workspace is isolated in its own dedicated database, and key changes are recorded in an append-only audit log with actor, timestamp, and before/after values. No method of transmission or storage is 100% secure, but we protect your data using industry-standard measures.

8. 08

   Data retention

   We keep account and workspace data for as long as your workspace is active. If a workspace stays paused for 60 days, it is deleted. We keep an encrypted backup for a further 90 days in case you need it back — after that it is permanently erased. Records the law requires us to keep, such as invoices and tax records, are kept for as long as it requires.

9. 09

   Your rights

   Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Employees should contact their workspace administrator; you may also email support@tickin.pro and we will respond in line with applicable law.

10. 10

    International transfers

    Tickin serves global teams, so your data may be processed in countries other than your own. Where required, we use appropriate safeguards for international transfers.

11. 11

    Children

    The Service is intended for businesses and is not directed to individuals under 16. We do not knowingly collect data from children.

12. 12

    Changes to this policy

    We may update this policy from time to time. Material changes will be reflected here with an updated date; continued use of the Service after changes constitutes acceptance.

13. 13

    Contact

    Questions about this policy or your data? Email support@tickin.pro (or info@tickin.pro).