Privacy notice
What TikTurn stores, why, and who can see it. Written in plain words.
This notice describes the product as it is built today.
Who the data belongs to
Every business using TikTurn is a separate tenant. Every record in the system belongs to exactly one of them. The business controls the customer data it collects. We hold it for them. One business can never read another business's data. This is enforced in the data layer, on every query, and it is covered by tests, not just by a policy.
What a business collects about a customer
Whatever it asks for at check-in. Usually a first name and a mobile number, and sometimes an email address and answers to questions the business wrote. Times are recorded: when someone arrived, was called, was served, and left. Nothing about a customer's device, location, or browsing is collected.
What is shown in public
A waiting-room screen shows a ticket number, a first name, and a service. It never shows a surname, a phone number, or an answer given at check-in. Showing the first name can be turned off. A customer's own status page is reached by a random token, shows only their own visit, and stops working shortly after the visit ends.
Messages
A business chooses which of four events send an email. Every message has a one-click unsubscribe link that applies to that business only. A customer who unsubscribes from one business is not affected at another. There are no marketing emails and no tracking pixels.
Other companies: none on this website
These public pages load nothing from other companies: no tag manager, no chat widget, and no fonts from someone else's server. The only measurement is a visitor count that we run ourselves. It sets no cookie and stores nothing on your device. That is why there is no cookie banner. There is nothing to consent to. Inside the product, email is sent by the mail server the operator sets up. Where billing is switched on, payment is taken by Paddle, as described below. Nothing else leaves the system.
Keeping and deleting
A business decides how long to keep its own records. Finished visits can be archived automatically. Records with history are deactivated, not deleted, so past visits still make sense. To ask about the data a business holds about you, contact that business. They are the ones who collected it.
Payments
Where billing is switched on, the checkout is Paddle's, and card details never reach us. We store only a Paddle customer ID, a subscription ID, the plan, and its dates. Paddle is the merchant of record and handles the payment, the receipt, and the tax under its own privacy notice. Paddle never receives a customer record, a visit, or anything a business collected at check-in.