Who is responsible
This notice covers the public website, dashboard, API and MCP service. Tickmarks operates the service and determines how account, security and service-administration information is handled.
You can email support@tickmarks.nl with privacy questions or requests.
Documents you submit can contain information about other people. If a business uses Tickmarks to process that information on its instructions, the parties’ controller and processor roles and contractual obligations must be established separately. This notice is not a data processing agreement.
Data we process
- Account and access information
- Your name, email, verification status, password authentication records, sessions and API-key records. Session records include IP address and browser user-agent information. Password reset and email verification use time-limited tokens.
- Documents, schemas and results
- The text, field descriptions, rules, language, options and references you send are processed by the extraction service. Results and signed session data are returned to your client. Saving a schema stores its definition, not the document used to test it. Schema names, field descriptions and rules can themselves contain personal information if you include it.
- Usage and credit records
- We record account and key identifiers, request source and kind, your optional reference, a document hash, token and read counts, timestamps and credit changes. The usage table stores a hash rather than document text. A hash or reference can still be linkable to a person.
- Payments
- Paddle handles checkout information. Tickmarks stores Paddle customer and transaction references, credited amounts and offer status. Billing can retrieve invoices and saved payment-method summaries, such as card brand, last 4 digits and expiry, from Paddle. Full card numbers and security codes are not submitted to Tickmarks’ API.
- Technical information
- Hosting, authentication, request limits and error handling can involve IP addresses, browser information and operational logs. Cloudflare Turnstile processes browser and connection signals when protecting sign-in and sign-up. Support correspondence contains the information you choose to include.
There is currently no request-sharing feature or collection of requests through a sharing opt-in. Any future feature for sharing requests or documents would require a separate choice and an explanation of its purpose and handling before it is enabled. Saving a private schema is not consent to share requests or use them for model improvement.
The updated application does not store document text when creating, updating or duplicating saved schemas, and it does not return previously saved sample text through dashboard or MCP reads. A saved schema opens with an empty document area; you can paste text or load a built-in example.
Purposes and legal grounds
The following grounds apply to the operator’s own account and service-administration processing. Processing a business customer’s document data on its instructions requires a separate assessment and agreement.
- Providing an account and fulfilling requests
- Account access, requested extraction, saved schemas, service messages and credit administration are needed to provide the service. The ground is performance of a contract when the individual is a contracting party. For an organisation’s representatives, legitimate interests in administering that relationship may apply.
- Protecting the service
- Authentication, bot protection, abuse prevention and request limits protect accounts and service availability. The ground is legitimate interests in securing the service, subject to the necessary assessment and safeguards.
- Legal obligations
- Any processing required for tax, accounting or other applicable obligations must use the relevant legal obligation as its ground.
Providing credentials and document text is necessary to sign in and fulfil an extraction request respectively. You choose whether to save a schema definition. Extraction produces suggested structured data; the service does not itself decide an individual’s eligibility for credit, employment or other legal entitlements.
Service providers
Cloudflare provides the public site and API infrastructure, database services, network protection and Turnstile. Cloudflare Email Service sends account verification, password reset and other transactional emails. Support email at support@tickmarks.nl is handled through FounderMail. The extraction service runs the Hydra Extract model through Tickmarks’ pipeline.
Tickmarks’ own servers and inference run in the EU, with Cloudflare database hosting and D1 backups configured for the EU. This does not mean that all provider processing is limited to the EU: email delivery, network security, Turnstile, provider support and Paddle can involve international processing.
FounderMail is operated by Webco S.r.l.s. Its privacy policy states that mailbox contents and backups are stored in Microsoft Azure’s West US 2 region, and outgoing mail passes through Amazon SES in Ireland. Hosting a domain’s DNS with Cloudflare does not make its mailbox EU-hosted. FounderMail describes contractual clauses or applicable adequacy decisions as transfer safeguards. Ask us at support@tickmarks.nl for information about safeguards relevant to your data.
Cloudflare’s data processing addendum describes its contractual safeguards for international transfers. Regional database settings do not cover every Cloudflare service or recipient email server.
Turnstile uses connection and browser signals to distinguish people from automated traffic. See Cloudflare’s Turnstile Privacy Addendum for its processing.
For a purchase processed through Paddle, Paddle acts as an independent controller of payment information for its reseller and merchant-of-record activities. Its privacy notice describes international group and third-party transfers, including contractual safeguards for relevant transfers from the EEA or UK. Paddle payment processing is not represented as EU-only. Processing locations depend on the services and providers involved. An AI assistant you connect through MCP is a separate service; what you send to that assistant is also subject to its provider’s arrangements.
Paddle’s Trust Centre lists providers in several regions, including AWS cloud hosting in the United States and Snowflake business intelligence in Ireland. This is not an exhaustive list or a statement that every transaction uses each listed location.
Cookies and browser storage
The dashboard uses session cookies for authentication. The public site and documentation remember a theme choice in browser local storage under starlight-theme; the dashboard uses tickmarks-theme. Clearing that storage resets your theme preference.
Paddle checkout and Turnstile load provider code when those features are used. Their storage and network behaviour depend on the provider and configuration.
Retention and deletion
Earlier versions could retain document text with saved schemas. That text is now excluded from schema responses. Removal from historical database rows and recovery copies is separate from excluding new document text.
The extraction request path processes document text without creating a stored extraction record in the application database. The updated schema-saving path also excludes document text. These paths differ from saved schema definitions and the usage metadata described above. They do not establish how long historical records, infrastructure logs, backups or a connected client retain information.
- Accounts, credentials and saved schemas
- Account information and schema definitions remain while your account exists, unless you delete a schema sooner. Keys remain until removed or the account is deleted; expiry or revocation stops access but does not necessarily erase the record. Sessions and verification/reset tokens have limited validity; expired records can remain until cleanup or account deletion. Expiration is distinct from erasure.
- Usage and credit history
- Detailed request metadata and credit history currently remain with your account until deletion. Documents themselves are not stored by the current extraction or schema-saving paths.
- Support, security and legal records
- Support messages are kept for handling your enquiry and any related dispute; request deletion by emailing support@tickmarks.nl. Providers retain operational logs and delivery records under their service settings and policies. Necessary records may be kept longer to meet a specific legal obligation or resolve a documented dispute. Paddle determines retention for records it holds independently.
- Backups and recovery
- Deletion from the active database does not immediately remove recovery copies. Cloudflare D1 Time Travel has a rolling recovery window of up to 30 days, depending on the plan. Other provider backups have their own retention. If a backup is restored, account-deletion requests must be reapplied.
You can remove saved schemas and revoke keys in the dashboard. Account deletion removes saved schemas, including any legacy sample text in those active rows, keys, usage history, credit-ledger records, billing-customer mapping and onboarding state from the active application database, alongside authentication account cleanup. It does not delete records Paddle holds independently or establish immediate backup erasure.
Your rights
Depending on the applicable law and processing, you can request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. If processing relies on consent, you can withdraw that consent without affecting its earlier lawful use. These rights have conditions and exceptions.
We respond to privacy requests without undue delay and normally within one month. Where the law permits an extension, we explain the reason and timing within that first month. Identity checks are limited to what is necessary to protect your data.
For help with a privacy request, contact support@tickmarks.nl. Do not include document payloads or identity documents in your initial message.
You can complain to a competent data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens. You can also contact your local authority where the law provides for it.
When this notice changes, its date and text will be updated. We notify account holders of material changes where required before they take effect.