TicketsData privacy & data

TicketsData Ltd is the data controller for the personal data described in this Policy.

Account information: name, email address, company name, and authentication details you provide when creating or managing an account.

Billing information: payment details and billing history, handled securely by Stripe.

Technical data: browser or client type, device information, operating system, and session logs collected when you access the dashboard or website.

API usage data: API and MCP access credentials, call volumes, quota consumption, rate limit events, endpoint usage patterns, IP addresses, and timestamps.

Communication data: emails or messages you send to us via support, contact forms, or direct email.

Provide, operate, and maintain the Service.

Process subscriptions, manage billing, and handle payments through Stripe.

Detect and prevent abuse, fraud, trial misuse, and unauthorised access, including automated pattern analysis of usage data.

Improve API performance, reliability, and the overall user experience.

Account data is retained for the duration of your subscription and for up to 12 months after account closure, unless a longer retention period is required by law.

Billing records are retained for a minimum of 7 years for financial and tax compliance purposes.

API usage logs and technical records may be retained for up to 12 months for security, analytics, and dispute resolution.

we use appropriate safeguards, such as the UK International Data Transfer Agreement or Addendum, standard contractual clauses, or an adequacy decision

All third-party processors are contractually required to handle personal data in accordance with applicable data protection laws and to use it only for the purposes we specify.

Data deletion requests will be processed within 30 days of receipt, subject to any legal retention obligations that prevent earlier deletion.

Access: request a copy of the personal data we hold about you.

Correction: request that inaccurate or incomplete data be corrected.

Deletion: request deletion of your personal data.

Restriction: request that we limit how we process your data in certain circumstances.

Portability: request your data in a structured, machine-readable format where technically feasible.

Objection: object to processing based on legitimate interests where your rights and interests override ours.

Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

TicketsData does not sell personal data.