Privacy policy

Two kinds of people use Tickitops: the business (owners and managers who sign up and run it) and the business's team (supervisors and workers the business adds). The business decides to use Tickitops for its staff and is responsible for telling them and getting their consent where the law requires it. We process team data on the business's behalf.

• Account details: name and mobile number of every owner, manager, supervisor and worker; their role and department. For the business: its name, type, GST number, address and city.
• Attendance: a selfie and the phone's location when someone marks entry and exit; while a shift is open, the phone's location about every five minutes, with its accuracy; the times of each of these. We use this to decide whether the person is inside the workspace and to count their hours.
• Deliveries: photos of supplier bills, of the items received and, when taken, of the weighing scale; the items, quantities and remarks entered; the supplier's name and GST number read from the bill.
• Plan and payments: the business's plan, seat count and payments it makes to us.
• Technical data: sign-in tokens, the times you use the app, and IP addresses in our server logs, used to keep accounts secure and fix problems.

We do not track location outside an open shift, read your contacts, messages or other apps, or show advertising.

• To provide Tickitops: count hours, show who is on site, record and check deliveries, and run each business's dashboard and web panel.
• To sign people in with a one-time code sent by SMS.
• To support the business, prevent misuse and keep the service secure.

We never sell personal data or use it for advertising.

• The business you work with: its owners and managers see the whole team; supervisors see their own department. Workers see their own records.
• Tickitops staff, only to support the business or keep the service running.
• Service providers that process data for us under contract: Amazon Web Services (servers and photo storage in Mumbai, India); Google (the Gemini service reads bill photos to fill in items, which can involve processing outside India); our SMS provider, to deliver sign-in codes.
• Authorities, when Indian law requires it.

We keep a business's data while it uses Tickitops. Photos uploaded but never attached to a bill or attendance are deleted within a day. When a person or business asks us to delete their account, we delete it within 30 days; copies in our backups are removed within a further 14 days. A business may keep attendance and bill records its staff created, as part of its own business records, until the business itself is deleted.

Under India's Digital Personal Data Protection Act, 2023, you can ask to see, correct or erase your personal data, and to withdraw consent. Team members can ask their employer (the business) or us directly. To delete your account, use the Delete account page. For anything else, ask the business you work with, which can raise it with us. We reply within 30 days.

Data travels over HTTPS and is stored on access-controlled servers. Sign-in uses one-time SMS codes; our internal admin panel requires two-factor authentication. Photos are stored privately and shown only through short-lived links.

Tickitops is meant for adults at work. We don't knowingly collect data from anyone under 18.

If we change this policy in a way that matters, we'll update the date above and tell businesses in the app. Questions or complaints reach Tickitops, Gurugram, Haryana, India, through the business you work with.