This policy explains how TickPort Ltd (company number TBD; registered office TBD, England and Wales) (“TickPort”, “we”) processes personal data when you use www.tickport.com. We act as controller for account and product data.
1. Data we collect
- Account data — email, auth identifiers (via Supabase Auth)
- Portfolio data — accounts, transactions, journal notes, alerts you create
- Billing data — Stripe customer/subscription IDs and status (card details stay with Stripe)
- Usage / diagnostics — optional analytics (e.g. PostHog), error reporting, server logs
- Waitlist — email and optional invite code if you apply before open signup
2. Purposes and legal bases (UK GDPR)
We process data to provide the service (contract), secure accounts (legitimate interests / legal obligation), send transactional emails such as price alerts you enable (contract / consent), bill subscriptions (contract), and improve reliability (legitimate interests). Marketing emails (if any) require consent and an unsubscribe option.
3. Processors and transfers
Typical processors: Supabase (database/auth), Vercel (hosting), Railway (quotes API), Stripe (payments), Resend (email), Anthropic (optional AI features), PostHog (analytics). Some providers may process data outside the UK/EEA under appropriate safeguards (e.g. SCCs).
4. Retention
We keep account and portfolio data while your account is active. After deletion requests we remove or anonymise personal data within a reasonable period unless law requires longer retention (e.g. billing records).
5. Your rights
Under UK GDPR you may request access, rectification, erasure, restriction, portability, and
object to certain processing. Signed-in users can export portfolio JSON via GET /api/account/export and request deletion via POST /api/account/delete (Settings), or email privacy@tickport.com. You may complain to the ICO (ico.org.uk).
6. Cookies
We use essential cookies for authentication and preferences. Non-essential analytics cookies are used only after you accept via the cookie banner (or equivalent preference). See the banner controls for Accept / Essential only.
7. Children
TickPort is not directed at anyone under 18. We do not knowingly collect children’s data.
8. Contact
Privacy enquiries: privacy@tickport.com. This draft will be updated when company registration details are finalised.