Privacy Policy

This policy explains what personal data Tickbox ("we", "us") collects, how we use it, and your rights. For any privacy question, contact us at hello@usetickbox.com.

Who is responsible for your data

Tickbox is the data controller for the personal data described here.

What we collect

• Account details: your email address and a securely hashed password.
• Content you upload: the questionnaires and documents you upload, the questions we extract, and the draft and approved answers you create.
• Payment details: handled by Stripe. We receive confirmation of payment and your subscription status, but we never see or store your full card number.
• Usage data: basic technical information (such as requests and errors) needed to run and secure the service.

How we use it

• To provide the service: extracting questions and drafting answers from your uploads.
• To manage your account, entitlements, and billing.
• To keep the service secure and to fix problems.
• To contact you about your account or important service changes.

Legal bases (UK GDPR)

We process your data to perform our contract with you (providing the service and billing), for our legitimate interests (securing and improving the service), and to meet legal obligations. Where we ever rely on consent, you can withdraw it at any time.

Who we share it with

We use a small number of trusted providers who process data on our behalf:

• Cloudflare: hosting, database, storage, vector search, and privacy-friendly, cookieless web analytics.
• Anthropic: the AI that drafts your answers. The content of your uploads and questions is sent to Anthropic to generate drafts. Anthropic does not train its models on this data via the API.
• Stripe: payment processing.
• Resend: sending transactional email (such as verification, receipts, and notifications).

A full, current list with purposes and locations is on our Sub-processors page. We do not sell your data.

International transfers

Some providers (such as Anthropic and Stripe) may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or equivalent.

How long we keep it

We keep your account and content for as long as your account is active. You can delete your content or ask us to close your account and delete your personal data at any time by contacting hello@usetickbox.com. Some records may be kept where the law requires (for example, billing records).

Cookies

Tickbox uses a couple of strictly necessary cookies to keep you signed in and show you the right page, plus privacy-friendly, cookieless analytics (Cloudflare Web Analytics) that sets no cookies and does not track you. We do not use advertising or tracking cookies, so no cookie banner is needed. See our Cookie Policy for the detail.

Your rights

You have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any of these, email hello@usetickbox.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

Changes

We may update this policy from time to time. We will post the new version here and update the date above.