Privacy Policy

Last updated: [EFFECTIVE DATE]

This policy explains what personal data Tickbox ("we", "us") collects, how we use it, and your rights. Tickbox is operated by [COMPANY / SOLE TRADER NAME]. For any privacy question, contact us at [CONTACT EMAIL].

Who is responsible for your data

[COMPANY / SOLE TRADER NAME] is the data controller for the personal data described here.

What we collect

Account details — your email address and a securely hashed password.
Content you upload — the questionnaires and documents you upload, the questions we extract, and the draft and approved answers you create.
Payment details — handled by Stripe. We receive confirmation of payment and your subscription status, but we never see or store your full card number.
Usage data — basic technical information (such as requests and errors) needed to run and secure the service.

How we use it

To provide the service: extracting questions and drafting answers from your uploads.
To manage your account, entitlements, and billing.
To keep the service secure and to fix problems.
To contact you about your account or important service changes.

Legal bases (UK GDPR)

We process your data to perform our contract with you (providing the service and billing), for our legitimate interests (securing and improving the service), and to meet legal obligations. Where we ever rely on consent, you can withdraw it at any time.

Who we share it with

We use a small number of trusted providers who process data on our behalf:

Cloudflare — hosting, database, and storage.
Anthropic — the AI that drafts your answers. The content of your uploads and questions is sent to Anthropic to generate drafts. Anthropic does not train its models on this data via the API.
Stripe — payment processing.

We do not sell your data.

International transfers

Some providers (such as Anthropic and Stripe) may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or equivalent.

How long we keep it

We keep your account and content for as long as your account is active. You can delete your content or ask us to close your account and delete your personal data at any time by contacting [CONTACT EMAIL]. Some records may be kept where the law requires (for example, billing records).

Cookies

Tickbox uses a single essential cookie to keep you signed in. We do not use advertising or tracking cookies, so no cookie banner is needed.

Your rights

You have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any of these, email [CONTACT EMAIL]. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

Changes

We may update this policy from time to time. We will post the new version here and update the date above.

Draft for review. Complete the bracketed details and have this checked before launch. Consider registering with the ICO and adding a Data Processing Addendum for business customers.