This Privacy Policy explains how Ticket Recon ("Ticket Recon," "we," "us," or "our") handles information in connection with the Ticket Recon software, web application, and related services (collectively, the "Service").
1. Information We Collect
- Account and access information. This may include email address, authentication status, user ID, role/access settings, and related account metadata.
- Workflow and customer data. This may include uploaded files, saved runs, mappings, notes, purchase and marketplace recon data, bill or invoice recon data, tags, missing charge records, contracts, terms, seats, and other information you choose to store or process in the Service.
- Connected-service data. If you connect QuickBooks, the Service may retrieve, process, and store accounting workflow data needed to load open bills, open invoices, payments, imports, and related reconciliation records.
- Integration settings. If you configure Slack or Discord webhooks, we may store the webhook configuration and send message content you choose to trigger through those integrations.
- Payment and subscription information. If you subscribe to a paid plan, we or our payment processor may collect billing details such as name, billing address, and payment method information. We do not store full payment card numbers on our servers.
- Technical and security information. We and our infrastructure providers may process logs, request metadata, browser or device details, IP-related information, and security signals used for authentication, fraud prevention, App Check, reCAPTCHA, troubleshooting, and service reliability.
2. How We Use Information
- To authenticate users and secure the Service.
- To load, compare, save, export, and sync reconciliation workflows and related records.
- To support QuickBooks-connected features and user-requested imports or payment actions.
- To save user preferences, webhook settings, and other account-level configuration.
- To send webhook notifications you configure, such as Slack or Discord alerts.
- To process subscription billing and maintain your account standing.
- To communicate with you about your account, support requests, security notices, and material changes to the Service or our policies.
- To maintain, troubleshoot, monitor, and improve reliability, security, and performance.
- To comply with legal obligations and enforce our terms.
3. Third-Party Services
The Service uses third-party providers and integrations, including Firebase and Google Cloud services for authentication, database, hosting, and server-side processing; Intuit QuickBooks for accounting-related workflows; Resend for account-related email delivery; and optional Slack or Discord webhooks when configured by you. Those providers may process information as part of delivering their services and are subject to their own privacy policies.
4. Hosting, Data Location, and Access
Customer data processed through the Service is hosted using Google Firebase and Google Cloud infrastructure located in the United States. Ticket Recon does not routinely access customer data except as reasonably needed to operate the Service, maintain security, troubleshoot issues, provide support, enforce our terms, or comply with legal obligations.
5. QuickBooks Data Handling
When you connect QuickBooks, Ticket Recon stores the connection information needed to maintain that integration. Ticket Recon does not maintain a full mirrored copy of your QuickBooks company file. However, when you run reconciliations, imports, payments, or save workflow results, the Service may store or process QuickBooks-derived data that is necessary to complete those actions or preserve the records you choose to save.
6. Cookies, Browser Storage, and Security Technologies
The Service may use browser storage, session storage, and security-related technologies needed to keep the Service working and protected. Security features such as reCAPTCHA or Firebase App Check may involve provider-managed cookies or similar technologies. The Service does not use cookies for advertising or third-party tracking purposes.
7. How Information May Be Shared
- With service providers and infrastructure partners that help operate the Service, subject to obligations to protect your information.
- With QuickBooks, Slack, or Discord when you choose to connect or send data through those services.
- With your organization's authorized users or administrators, depending on your account setup.
- When required for legal compliance, security, fraud prevention, or protection of rights.
- In connection with a merger, acquisition, or sale of assets, in which case we will notify affected users before their information is transferred or becomes subject to a different privacy policy.
We do not sell personal information collected through the Service. We do not share personal information with third parties for their own marketing purposes.
8. Data Retention
We retain data for as long as needed to provide the Service, maintain requested records, support legitimate business and security needs, comply with law, or until data is deleted by you or your organization, where applicable. When data is no longer needed for these purposes, we delete or de-identify it within a commercially reasonable timeframe. For more detail on retention categories, see the Ticket Recon Data Management Policy.
9. Data Security
We use administrative, technical, and organizational measures designed to protect information, including encryption in transit (TLS) and at rest, application-level encryption of sensitive credentials, role-based access controls, and abuse-prevention technologies. For more detail, see the Ticket Recon Cryptography and Data Security Policy. No security measure is perfect, and no method of transmission or storage can be guaranteed to be completely secure.
10. Your Rights and Choices
Depending on your jurisdiction, you may have certain rights regarding your personal information, including:
- Access. You may request a copy of the personal information we hold about you.
- Correction. You may request that we correct inaccurate or incomplete information.
- Deletion. You may request deletion of your personal information, subject to certain legal exceptions.
- Data portability. You may request your data in a structured, commonly used format.
- Opt-out of communications. You may opt out of non-essential communications by following the unsubscribe instructions in those messages.
To exercise any of these rights, contact us at support@ticketrecon.com. We will respond to verified requests within 30 days (or as required by applicable law).
11. California Privacy Rights
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete, and the right to opt out of the sale or sharing of personal information. As noted above, we do not sell personal information. To exercise your rights, contact us at support@ticketrecon.com.
12. Children's Privacy
The Service is intended for business use and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will take steps to delete it promptly.
13. Data Breach Notification
In the event of a security breach that affects your personal information, we will notify affected users and relevant authorities as required by applicable law, and will do so within the timeframes mandated by such laws.
14. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice through the Service at least 30 days before the changes take effect. We will revise the effective date and post the updated version through the Service or related materials.
15. Contact
Questions about this Privacy Policy may be sent to support@ticketrecon.com.