Privacy Policy

Effective June 24, 2026

How tkit.ai collects, uses, and protects personal data across the widget and dashboard.

1. 01Who we are

   tkit.ai (“we”, “us”) provides a live chat widget and dashboard that website owners (“customers”) embed on their sites. This policy explains what personal data we process, why, and the choices you have.

2. 02Who is the data controller

   For data about our customers’ accounts, tkit.ai is the controller. For data about visitors who chat through a customer’s widget, the customer is the controller and tkit.ai acts as a processor on their behalf.

3. 03Data we collect

   • Account data: your name, email address, and authentication credentials.
   • Project data: organization name and widget configuration.
   • Visitor data: the name and email a visitor submits, their messages, approximate country, the page URL and referrer, campaign parameters, page title, user-agent string, language, timezone, display and device capabilities, browser preferences, connection estimates, and any context the host site provides to the widget. We do not request precise geolocation or use canvas or audio fingerprinting.

4. 04How we use data

   • To operate the chat widget and deliver messages in real time.
   • To show customers their inbox and visitor context.
   • To enforce plan limits and prevent abuse.
   • To send transactional email (verification, invitations, alerts).

5. 05Legal bases

   We process account data to perform our contract with customers, and usage data under our legitimate interest in operating and improving the service. Customers are responsible for establishing a lawful basis for the visitor data they collect through their widget.

6. 06Subprocessors

   • Cloudflare — hosting, database, real-time infrastructure, and email delivery.
   • Dodo Payments — billing and subscription management.

7. 07Data retention & deletion

   Customers can delete individual closed tickets or wipe all tickets for a project at any time from the dashboard. Deleting a ticket removes the visitor’s messages and details from our database.

8. 08Your rights

   Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, contact us at the address below. If your data was collected through a customer’s widget, we will route your request to that customer.

9. 09Security

   We isolate every customer’s data, scope all queries to the owning organization, require dashboard authentication, and render messages as text to prevent script injection.

10. 10Changes

    We may update this policy as the service evolves. The effective date above reflects the most recent change.