LEGAL

Privacy Policy

Last updated: 8 June 2026

This policy explains how tickstream ("we", "us") collects, uses and protects your personal data when you use our website and Service. We are the data controller for that data. We keep what we collect to the minimum needed to run the Service, and we never sell your personal data.

1. What we collect

• Account data — your email address, a securely hashed password, and your API key.
• Billing data — handled by our payment processor, Stripe. We do not store your full card details; we keep a Stripe customer/subscription reference and your plan status.
• Usage data — basic counters (e.g. request/tick volume) needed to operate plans and limits.
• Technical data — IP address, request logs and similar information generated automatically when you use the Service, for security and reliability.

2. How and why we use it

We use your data to provide and secure the Service, authenticate API access, process payments, enforce plan limits, prevent abuse, comply with legal obligations, and respond to support requests. Our legal bases under UK GDPR are: performance of our contract with you, our legitimate interests in running and securing the Service, your consent where required, and compliance with legal obligations.

3. Sharing

We share data only with service providers that help us run the Service — for example Stripe (payments) and our hosting and infrastructure providers — under appropriate agreements, and where required by law or to protect our rights or the Service. We do not sell or rent your personal data.

4. Retention

We keep account data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting and security obligations, then delete or anonymise it. You can ask us to close your account and delete your data at any time.

5. Security

We use industry-standard measures to protect your data, including password hashing and encrypted connections. No system is perfectly secure; you are responsible for keeping your API key and credentials confidential.

6. Your rights

Subject to applicable law, you have the right to access, correct, delete or port your data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at the address below. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

7. International transfers

Where data is processed outside the UK/EEA by our providers, we rely on appropriate safeguards (such as adequacy decisions or standard contractual clauses).

8. Cookies

We use a small number of strictly necessary cookies, primarily a session cookie to keep you signed in. We do not use these for advertising.

9. Contact

For privacy questions or to exercise your rights, contact: