Privacy Policy

Last updated: October 25, 2026

Introduction

TickOS is a service of Plazbot LLC, a Delaware limited liability company ("Plazbot," "TickOS," "we," "our," or "us"), which is responsible for your personal information and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our ticket management platform, API services and TickOS Mail, our email and calendar client (see the TickOS Mail section). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the service.

Information We Collect

Personal Information

We collect information that you provide directly to us, including:

  • Account information (name, email address, password)
  • Organization details (company name, team members)
  • Payment information (processed securely through our payment providers)
  • Communication data (support tickets, messages, feedback)
  • Profile information (avatar, job title, preferences)

Customer Data

When you use TickOS to manage tickets and customer communications, we process:

  • Customer information (names, email addresses, contact details)
  • Ticket content (messages, attachments, metadata)
  • Email communications sent and received through our platform
  • Custom fields and tags you create

Automatically Collected Information

We automatically collect certain information when you use our services:

  • Device information (IP address, browser type, operating system)
  • Usage data (pages viewed, features used, time spent)
  • API usage and performance metrics
  • Cookies and similar tracking technologies
  • Log data (access times, error reports, system activity)

TickOS Mail

TickOS Mail (mail.tickos.dev and the TickOS Mail app for Mac) is an email and calendar client. This section explains what it accesses and how that data is used. It applies in addition to the rest of this policy.

Mailboxes and calendars you connect

  • Google accounts (Gmail, Google Workspace, Google Calendar): with your permission through Google sign-in, TickOS Mail reads, sends and organizes your email (read state, stars, archive, labels, trash) and reads and edits your calendar events and calendar list. The Google permissions requested are gmail.modify, calendar.events and calendar.calendarlist.readonly, plus your basic profile and email address.
  • IMAP and SMTP accounts: your server address, username and password, which are encrypted at rest (AES-256-GCM) and never shown again or returned by our API.
  • What we store: copies of your messages (headers, bodies, attachment details and files you open or send), your calendar events, drafts, scheduled sends, signatures, snippets and settings, so your inbox loads quickly and stays in sync. Email HTML is sanitized and displayed in an isolated frame.
  • Sending: email is sent through your own provider (Gmail or your SMTP server), never through TickOS mail servers.

How we use your mail data

We use your mail and calendar data only to provide the features you see in TickOS Mail: showing, searching, syncing, sending, reminders and calendar. We do not:

  • sell it or share it with data brokers or advertisers;
  • use it for advertising, including personalized or retargeted ads;
  • use it to train or improve generalized AI or machine learning models;
  • let people read it, except with your explicit permission (for example, to resolve a support request you open), when needed for security purposes such as investigating abuse, to comply with the law, or when it has been aggregated and anonymized for internal operations.
TickOS Mail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Read statuses (Recent opens)

Recent opens is an optional feature that is off by default. When you turn it on in Settings, each email you send from TickOS Mail includes a small invisible image unique to that email. You can turn it off for any single email from the composer.

  • What is recorded when the image loads: the date and time, how many times it loaded and the type of mail app, guessed from the browser's user agent (for example "Gmail", "Outlook" or "iPhone"). We do not store the recipient's IP address or location. Our hosting provider may keep standard request logs for a short period for security.
  • Who sees it: only the TickOS user who sent the email. When an email has several recipients, we cannot tell which of them opened it.
  • Accuracy: some mail apps load images automatically (for example, Apple Mail Privacy Protection) and others block them, so an open is a strong indication, not proof, that a person read the email.
  • Recipients: recipients can prevent opens from being recorded by turning off automatic image loading in their mail app. If you received an email sent with TickOS Mail and want us to delete the open data about you, write to hello@tickos.dev.
  • Roles and your responsibility: for open data about the people you email, you act as the data controller and TickOS processes it on your behalf. Depending on where you and your recipients are, the law may require you to inform recipients or obtain their consent before tracking opens (for example, under the GDPR and the ePrivacy rules in the EU, or PECR in the UK). See our Terms of Service.
  • Retention: open data is kept while your account is active and deleted with your account, or earlier on request.

Inbox hours and Insights

To show Insights, TickOS Mail keeps daily counters about your own use: time spent with TickOS Mail open on your mail, inbox openings outside your Inbox hours sessions, conversations marked done, reminder activity and days you reached Inbox Zero. Reply times and arrival hours are calculated from the mail you have connected. Insights are visible only to you and are not shared or used for advertising.

Disconnecting and deleting

When you remove an account in Settings, TickOS Mail revokes its Google access (for Google accounts) and deletes the messages, calendar events and sync data we stored for that account from our database. You can also revoke access at any time from your Google Account's security settings. To delete attachment copies kept in our file storage, your open data or anything else, contact hello@tickos.dev.

How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To provide, maintain, and improve our ticket management platform
  • Account Management: To create and manage your account, authenticate users, and process payments
  • Communications: To send transactional emails, service updates, and respond to inquiries
  • Analytics: To understand how our services are used and improve performance
  • Security: To detect, prevent, and address technical issues, fraud, and security threats
  • Compliance: To comply with legal obligations and enforce our terms of service
  • Marketing: To send promotional materials (with your consent, where required)

Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We work with third-party service providers who perform services on our behalf:

  • Cloud infrastructure (AWS, Vercel)
  • Database hosting (Supabase)
  • Email delivery services (Amazon SES)
  • Google APIs (Gmail, Google Calendar and Cloud Pub/Sub), only for the TickOS Mail accounts you connect
  • Payment processing (Stripe)
  • Analytics providers (limited to aggregated data)

Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety, or that of our users.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

Data Security

We implement industry-standard security measures to protect your information:

  • Encryption in transit (TLS/SSL) and at rest
  • Regular security audits and vulnerability assessments
  • Access controls and authentication mechanisms
  • Employee training on data protection practices
  • Incident response and data breach notification procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. When you close your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal, accounting, or security purposes.

Your Rights and Choices

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Portability: Request transfer of your data to another service
  • Objection: Object to processing of your information for certain purposes
  • Restriction: Request restriction of processing in certain circumstances
  • Withdraw Consent: Withdraw consent for processing where we rely on consent

To exercise these rights, please contact us at hello@tickos.dev

Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Keep you logged in and remember your preferences
  • Understand how you use our services
  • Improve performance and user experience
  • Provide security features and fraud prevention

If you use TickOS Mail's optional read statuses, the emails you send include a tracking image as described in Read statuses (Recent opens).

You can control cookies through your browser settings. Note that disabling cookies may affect your ability to use certain features of our service.

International Data Transfers

TickOS is based in the United States. If you access our services from outside the U.S., your information may be transferred to, stored, and processed in the U.S. and other countries. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable laws.

Childrens Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

  • We process your data based on legal grounds (contract, consent, legitimate interest, or legal obligation)
  • You have the right to lodge a complaint with your local data protection authority

CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information we collect and how it is used
  • Right to delete personal information (with certain exceptions)
  • Right to opt-out of the sale of personal information (we do not sell your information)
  • Right to non-discrimination for exercising your privacy rights

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the Last updated date. We encourage you to review this policy periodically.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: hello@tickos.dev

Company: Plazbot LLC, a Delaware limited liability company, United States