What we collect
Account data: your email address, name and a password hash (or the account identifier from your sign-in provider, where social sign-in is offered). We use your email only to operate the account: verification, password reset, and important service notices.
Timer delivery data: when a recipient opens an email with your timer, we process the request technically (IP address for rate limiting, requested link and language) and record an anonymous open event for statistics. We do not build recipient profiles and we do not sell data to anyone.
Cookies and site analytics
We use a session cookie to keep you signed in. To understand which pages help people and where they get stuck, the website uses Google Analytics (loaded through Google Tag Manager). It sets first-party analytics cookies and records page views and a few product actions — for example that an account was created, a template was published or embed code was copied — together with an internal account ID. It never receives your email address, the content of your templates or anything about the people who open your emails.
We also advertise tikio with Google Ads. To know which ads bring people who sign up, the site uses Google's advertising cookies: they link a click on our ad to actions on our site, such as creating an account. This may include showing our ads again to people who visited the site. We do not sell your data and do not share your email or account content with advertisers.
In the EEA, the UK and Switzerland analytics and advertising cookies are off until you accept them in the cookie banner; you can change your choice at any time with “Cookie settings” in the site footer.
AI assistant
The dashboard has an optional AI assistant. What you type into it — along with the names of your templates and links, so it can answer about them — is sent to Google and processed by its Gemini models on our behalf. We use a paid tier: Google does not use this data to train or improve its models, and does not retain it beyond processing your request.
We do not store the conversation. It is kept only in your browser tab, so it survives a page reload, and is gone when you close the tab or sign out. Two anonymous records are kept so we can tell whether the feature works: a question the assistant could not answer, and a set of counters about the exchange (how long it took, which of its tools ran, whether it failed, and your thumbs up or down if you leave one). Neither is linked to your account, and neither contains the conversation.
The assistant never changes anything by itself. It prepares a draft, and nothing happens until you press the button to apply it.
AI clients you connect (MCP)
You can connect your own AI client — such as Claude, ChatGPT or Cursor — to your tikio account. When you do, the account data the client asks for (the names of your templates and links, their settings and design, and your statistics) is sent to that client and to the AI provider you chose. That provider is not our processor: how it stores and uses the data is governed by your agreement with it, and we do not control it.
For each connection we keep only a hash of the key, the access period and the permissions you granted, plus anonymous counters of tool calls that contain no request content and are not linked to your account. You can revoke any connection instantly in Settings → AI access.
Where data lives
Your designs and account data are stored on servers run by a hosting provider in the European Union, and processed only to provide the service.
A few other processors operate outside the EEA: Cloudflare (DNS, CDN and delivery of timer images), Resend (sending account emails such as verification and password reset), Zoho Mail (our support mailbox — anything you email us is stored there) and Google (the AI assistant, if you use it, Google Analytics and Google Ads). These transfers rely on the EU Standard Contractual Clauses. We do not sell data.
Deleting your data
Deleting your account in Settings immediately and permanently removes your account, templates, links and rendered timer assets. Recorded open events are anonymized — they no longer reference you. For anything else, write to us.
Contact
Privacy questions: support@tikio.io