Privacy notice

This notice explains what personal data TICON AI processes and why. The controller is TICON SYSTEM LTD (Bangladesh) and TICON SYSTEM Co., LTD (South Korea), [[PLACEHOLDER: registered address]]. Privacy contact: support@ticonai.com [[PLACEHOLDER: dedicated privacy contact or data protection officer, if required]].

1. Data we process

• Account data: name, e-mail address, country, preferred language, organization name and membership, and authentication data handled by our sign-in provider (we do not see your password in clear text after it is submitted).
• Billing profile (if you save one): name, contact e-mail, phone, address and tax identification number, as needed to take payments and issue invoices.
• Payment records: the amount, status and the reference given by the payment gateway. [[PLACEHOLDER: confirm exactly which payment fields the gateway returns and we store]]
• Usage metadata for each API request: time, key identifier, model, token counts, cost, status, error code and latency. The gateway is designed not to store the text of prompts or responses. [[PLACEHOLDER: owner to confirm]]
• Security data: IP address and browser user agent in security and audit logs, and hashed identifiers in rate-limit counters.
• Messages you send through the contact form: name, e-mail address, topic, message text, language and a hashed form of the IP address.

2. Why we process it

To provide and secure the service, take payments, meter and bill usage, prevent abuse, answer your messages and meet legal obligations. [[PLACEHOLDER: counsel to map each purpose to a legal basis under the laws that apply (for example in Bangladesh and the Republic of Korea)]]

3. Cookies and similar storage

The site sets cookies needed to keep you signed in, protect forms and remember your language, and stores your light or dark theme choice in your browser. The marketing pages do not load third-party advertising or analytics trackers. [[PLACEHOLDER: cookie list and consent approach, to be confirmed by counsel; a separate cookie notice may be required]]

4. Who receives data

• Hosting and infrastructure providers. [[PLACEHOLDER: list processors and regions]]
• The payment gateway used for top-ups. [[PLACEHOLDER: name and role]]
• Model providers that receive the content of the requests you send, so that they can answer them. [[PLACEHOLDER: list providers, their retention and training policies]]
• E-mail delivery providers. [[PLACEHOLDER: name]]
• Authorities or advisers where the law requires it. [[PLACEHOLDER: counsel]]

5. International transfers

[[PLACEHOLDER: where data is stored and which transfer mechanisms apply]]

6. How long we keep it

[[PLACEHOLDER: retention periods for account, billing, usage, audit and contact data. Planned engineering defaults, not yet approved: contact messages 12 months, notifications 90 days, rate-limit counters 7 days]]

7. Your choices and rights

You can ask to access, correct or delete your data by writing to support@ticonai.com. [[PLACEHOLDER: counsel to list the rights that apply, response times and how to complain to a regulator]]

8. Security

API keys are stored only as keyed hashes and shown once. Sign-in supports authenticator-app two-step verification. No system is perfectly secure. [[PLACEHOLDER: breach notification commitments, if any]]

9. Children

[[PLACEHOLDER: minimum age and treatment of children's data]]

10. Changes

[[PLACEHOLDER: how changes to this notice are announced]]