Privacy Policy

Last updated: January 11, 2026

1. Introduction

Welcome to Ticcsy ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services, including our Link in Bio, AutoDM, and Storefront features.

By using Ticcsy, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you register for an account, we collect:

  • Name and email address
  • Username and password
  • Profile information (bio, profile picture, links)
  • Payment information (processed securely through Razorpay - we do not store your complete card details)
  • Billing address and tax information

2.2 Instagram Data (Meta Platform Integration)

When you connect your Instagram account to use our AutoDM features, we collect and process the following data in accordance with Meta's Platform Terms and Policies:

  • Instagram Profile Information: Username, profile picture, follower count, following count
  • Instagram Messages: We access direct messages to enable AutoDM functionality, including:
    • Incoming messages from users who interact with your content
    • Message content to process automation rules
    • Message metadata (timestamps, read/unread status)
  • Instagram Posts and Stories: Post content, captions, and engagement data to associate products with your content
  • Instagram Insights: Engagement metrics and analytics data
  • User Interactions: Comments, likes, and story replies that trigger automated responses

2.3 Spotify Data (Spotify Integration)

When you connect your Spotify account to display music on your Link in Bio page, we collect:

  • Spotify Profile: Display name and profile picture
  • Currently Playing: Track name, artist, album art (only when displayed on your page)
  • Top Tracks: Your top played tracks (if you choose to display them)
  • Playlists: Public playlists you choose to share

We access Spotify data in accordance with Spotify's Developer Terms: https://developer.spotify.com/terms/

2.4 WhatsApp Data (Meta WhatsApp Business Platform)

When you connect your WhatsApp Business Account to use our WhatsApp automation features, we collect and process the following data in accordance with Meta's WhatsApp Business Platform Terms and Policies:

  • WhatsApp Business Profile Information: Business name, phone number, profile picture, business category, and description
  • WhatsApp Messages: We access messages to enable automation functionality, including:
    • Incoming messages from customers who contact your business
    • Message content to process automation flows and triggers
    • Message metadata (timestamps, delivery status, read receipts)
    • Interactive message responses (button clicks, list selections)
  • Contact Information: Phone numbers and names of customers who message your business
  • Template Messages: Pre-approved message templates you create for marketing, utility, and authentication purposes
  • Conversation Analytics: Message delivery rates, response times, and engagement metrics

We access WhatsApp data in accordance with Meta's WhatsApp Business Platform Terms: https://www.whatsapp.com/legal/business-terms

2.5 Automatically Collected Information

  • Device information (IP address, browser type, operating system)
  • Usage data (pages visited, features used, time spent)
  • Cookies and similar tracking technologies
  • Log data (access times, error logs)

3. How We Use Your Information

3.1 Service Provision

  • Create and manage your Ticcsy account
  • Provide Link-in-Bio, Storefront, and AutoDM services
  • Process transactions and manage your earnings
  • Enable automated Instagram messaging based on your configured flows
  • Display your products and content on your custom page
  • Display Spotify music information on your profile (if connected)

3.2 Instagram AutoDM Functionality

We use your Instagram data specifically to:

  • Send automated direct messages according to your configured automation rules
  • Respond to user interactions (comments, story replies, post engagement)
  • Deliver product information and promotional content via DMs
  • Provide customer support through automated messaging
  • Track message delivery and engagement analytics

3.3 WhatsApp Business Messaging

We use your WhatsApp Business data specifically to:

  • Send automated WhatsApp messages according to your configured automation flows
  • Respond to customer inquiries within the 24-hour conversation window
  • Send pre-approved template messages for marketing, utility, and authentication purposes
  • Process interactive message responses (buttons, lists, quick replies)
  • Manage customer contacts and conversation history
  • Track message delivery status and engagement metrics
  • Facilitate human handoff when automated responses are insufficient

Important: WhatsApp messaging is subject to Meta's messaging policies. Marketing messages require customer opt-in consent. Service messages within the 24-hour window are free. Template messages outside this window are charged per message based on category and recipient country.

3.4 Email Communications (Amazon SES)

We use Amazon Simple Email Service (SES) to send:

  • Account verification and password reset emails
  • Transaction receipts and payment confirmations
  • Service updates and important notifications
  • Marketing communications (with your consent)

Amazon SES processes your email address to deliver messages. AWS Privacy Notice: https://aws.amazon.com/privacy/

3.4 Analytics and Improvements

  • Analyze usage patterns to improve our services
  • Monitor and prevent fraudulent activity
  • Provide customer support
  • Send administrative and promotional communications

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

We share data with trusted third parties who assist us in:

  • Payment Processing (Razorpay): We use Razorpay for processing subscriptions, credit purchases, and payouts. Razorpay collects and processes:
    • Payment card information (card number, CVV, expiry date)
    • Billing address and contact information
    • Transaction details and payment history
    • Bank account details for payouts (for creators)
    Razorpay's privacy policy: https://razorpay.com/privacy/
  • Email Services (Amazon SES): For transactional and marketing emails
  • Cloud hosting and storage (AWS): Secure data storage and processing
  • Analytics tools: For usage analysis and service improvement

Important Note on Payment Security: Ticcsy does not store your complete credit/debit card details. All payment card information is directly collected and stored by Razorpay using PCI-DSS compliant infrastructure. We only receive tokenized payment references and transaction confirmations.

4.2 Meta (Instagram) Platform

We interact with Meta's Instagram API to provide AutoDM services. Your Instagram data is accessed and processed in accordance with:

4.3 Spotify

We interact with Spotify's API to display music information on your profile. Data access is limited to what you authorize and is processed in accordance with:

4.4 Meta (WhatsApp Business Platform)

We interact with Meta's WhatsApp Business Cloud API to provide WhatsApp automation services. Your WhatsApp Business data is accessed and processed in accordance with:

4.5 Legal Requirements

We may disclose your information if required by law or in response to:

  • Legal process or government requests
  • Protection of our rights and property
  • Prevention of fraud or security issues
  • Protection of user safety

5. Data Retention and Deletion

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

  • Account Data: Retained while your account is active and for up to 90 days after account deletion
  • Instagram Data: Cached for up to 24 hours for operational purposes, then deleted
  • WhatsApp Data: Message history retained for 90 days for analytics and compliance, then deleted. Contact data retained while account is active
  • Spotify Data: Real-time data only, not stored permanently
  • Transaction Records: Retained for 7 years for tax and legal compliance
  • Email Logs: Retained for 90 days for delivery tracking
  • Analytics Data: Aggregated and anonymized data may be retained indefinitely

You can request deletion of your data at any time by contacting us at [email protected].

6. Your Rights and Controls

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and data
  • Data Portability: Receive your data in a machine-readable format
  • Opt-Out: Unsubscribe from marketing communications
  • Revoke Instagram Access: Disconnect your Instagram account at any time through your account settings
  • Revoke WhatsApp Access: Disconnect your WhatsApp Business Account at any time through your account settings
  • Revoke Spotify Access: Disconnect your Spotify account at any time through your account settings

7. Platform-Specific Data Deletion

7.1 Instagram User Data Deletion

Per Meta's requirements, you can request deletion of your Instagram data that we have collected:

  1. Visit your Ticcsy account settings
  2. Navigate to "Connected Accounts"
  3. Click "Disconnect Instagram"
  4. Your Instagram data will be deleted within 48 hours

Alternatively, you can submit a deletion request to [email protected] with your Instagram username.

7.2 WhatsApp User Data Deletion

Per Meta's requirements, you can request deletion of your WhatsApp Business data that we have collected:

  1. Visit your Ticcsy account settings
  2. Navigate to "Connected Accounts"
  3. Click "Disconnect WhatsApp"
  4. Your WhatsApp data will be deleted within 48 hours

Alternatively, you can submit a deletion request to [email protected] with your WhatsApp Business phone number.

7.3 Spotify Data Deletion

To remove Spotify data from your profile:

  1. Visit your Ticcsy account settings
  2. Navigate to "Connected Accounts"
  3. Click "Disconnect Spotify"
  4. Your Spotify data will be removed immediately

8. Data Security

We implement industry-standard security measures:

  • SSL/TLS encryption for all data transmission
  • AES-256 encryption for stored sensitive data
  • Regular security audits and vulnerability assessments
  • Access controls and multi-factor authentication
  • Employee security training and background checks
  • PCI-DSS compliant payment processing via Razorpay

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including:

  • India (primary operations and Razorpay processing)
  • United States (AWS hosting, Meta, Spotify services)
  • European Union (some infrastructure services)

We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws, including Standard Contractual Clauses where required.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately at [email protected].

11. Cookies and Tracking

We use cookies and similar technologies to:

  • Essential Cookies: Required for site functionality and authentication
  • Analytics Cookies: Help us understand how visitors use our site
  • Preference Cookies: Remember your settings and preferences
  • Security Cookies: Prevent fraud and protect your account

You can control cookies through your browser settings. Note that disabling certain cookies may affect site functionality.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by:

  • Posting the new policy on this page
  • Updating the "Last Updated" date
  • Sending an email notification (for material changes)

Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your data:

Privacy Inquiries: [email protected]

General Support: [email protected]

Data Deletion Requests: [email protected]

14. Compliance

This Privacy Policy complies with:

  • General Data Protection Regulation (GDPR)
  • California Consumer Privacy Act (CCPA)
  • Information Technology Act, 2000 (India)
  • Meta Platform Terms and Policies
  • Instagram API Terms of Service
  • WhatsApp Business Platform Terms
  • WhatsApp Business Policy
  • WhatsApp Commerce Policy
  • Spotify Developer Terms of Service
  • Razorpay Terms of Use
  • AWS Service Terms

By using Ticcsy, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.