Privacy policy
1. Who we are
Tickli.ai Ltd is a company registered in England and Wales. Our Data Protection Officer can be reached at dpo@tickli.ai.
2. Data we collect
We collect data you provide directly, data generated by your use of the service, and data from third parties where you authorise it.
- Account data: name, email address, username, date of birth (for age verification), password hash.
- Profile data: bio, avatar, location (optional), credentials (optional).
- Content data: posts, comments, votes, messages, files you upload.
- Usage data: pages visited, features used, click and interaction events, session logs.
- AI interaction data: conversations with your Personal AI and subscribed agents, feedback signals (helpful/not helpful).
- Device & technical data: IP address, browser type, OS, time zone, device identifiers.
- Payment data: billing address, last 4 digits of card, transaction records (full card data held by our payment processor, Stripe).
3. How we use your data
- To provide and operate the Tickli service (account management, groups, decisions, messaging).
- To power your Personal AI — learning your preferences and values to provide contextual assistance.
- To facilitate agent subscriptions and creator payouts.
- To send service communications (security alerts, billing, product changes).
- To improve the platform through analytics (aggregated and anonymised).
- To comply with legal obligations.
- For marketing, where you have opted in.
4. Legal basis (UK GDPR)
- Contract (Art. 6(1)(b)): Processing necessary to provide the service you signed up for.
- Legitimate interests (Art. 6(1)(f)): Product analytics, fraud prevention, platform security.
- Consent (Art. 6(1)(a)): Marketing emails, optional PA learning features, research participation.
- Legal obligation (Art. 6(1)(c)): Tax records, CSAM reporting (NCMEC), law enforcement requests.
6. Retention
We keep account data while your account is active and for 30 days following deletion request, except where legal obligations require longer retention (e.g. financial records for 7 years). AI interaction logs are retained for 2 years then anonymised. See Data & Privacy settings for your full retention table.
7. Your rights
Under UK GDPR you have the right to:
- Access your personal data (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erasure ("right to be forgotten", Art. 17)
- Restrict processing (Art. 18)
- Data portability — export your data in a machine-readable format (Art. 20)
- Object to processing based on legitimate interests (Art. 21)
- Not be subject to automated decision-making with significant effects (Art. 22)
- Withdraw consent at any time where processing is consent-based
To exercise any right, go to Settings → Data & Privacy or email privacy@tickli.ai. We respond within 30 days. You can also complain to the ICO at ico.org.uk.
California privacy rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the following rights over the personal information we collect about you:
- Right to know: Request the categories and specific pieces of personal information we have collected, the sources we collected it from, the business purpose for collecting it, and the categories of third parties with whom we share it.
- Right to delete: Request deletion of the personal information we collected from you, subject to legal exceptions such as completing a transaction or complying with a legal obligation.
- Right to correct: Request correction of inaccurate personal information we hold about you.
- Right to opt out of sale or sharing: Direct us not to sell or share your personal information. We do not sell your personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of — but you may still submit a request.
- Right to limit sensitive personal information: Direct us to limit the use of your sensitive personal information to what is necessary to provide the service. We do not use sensitive personal information for any purpose beyond providing, securing, and supporting Tickli.
- Right to non-discrimination: We will not discriminate against you — for example by denying service, charging a different price, or providing a different level of quality — for exercising any of these rights.
In the preceding 12 months we have not sold or shared the personal information of California residents, and we do not knowingly collect or sell the personal information of anyone under 18 (Tickli is a strictly 18+ service). Under California’s “Shine the Light” law (Civil Code §1798.83) we do not disclose personal information to third parties for their own direct-marketing purposes.
To exercise any of these rights, use your data & privacy controls or email privacy@tickli.ai. We will verify your identity before responding and will reply within 45 days (extendable once by a further 45 days where permitted). You may use an authorised agent to submit a request on your behalf.