Privacy Policy

Last updated: June 2026

Overview

tick. ("we", "us") provides accounting software for SMEs. This policy describes personal and business data we process when you use tick.app and related services.

Data we collect

Account data — email, authentication identifiers, profile and company details you provide during onboarding.
Financial data — transactions, bank feed metadata (via Plaid or similar aggregators), receipts, invoices, and ledger entries you upload or connect.
Usage data — device type, browser, IP address, and product analytics needed to operate and secure the service.

How we use data

We use your data to deliver bookkeeping, reconciliation, reporting, and compliance features; to generate entity-specific accounting policies from information you supply; to prevent fraud; and to meet legal obligations. We do not sell personal data.

Legal bases (where applicable)

For users in jurisdictions with comprehensive privacy laws, processing is based on contract performance (providing the service), legitimate interests (security and product improvement), and consent where required (e.g. marketing communications).

Retention & security

We classify data as Restricted (bank/API tokens and signing keys), Confidential (ledger, documents, and personal data), Internal (staff support logs), or Public (marketing pages). Financial records are retained according to your subscription and applicable statutory periods. Restricted secrets are encrypted at the application layer; all traffic uses TLS; tenant data is isolated with role-based access and row-level security. Uploaded files are malware-audited before processing. Quarantined rejects and short-lived operational logs are purged on a schedule. See our security documentation for the full classification matrix.

Your rights