Your salaries, invoices and margins are sensitive. We treat them that way.

tickbit holds some of the most private numbers in your company. Here is exactly how we protect them, in plain language.

Encryption.

Data is protected on the way to us and the most sensitive parts are protected at rest.

In transit: tickbit is served only over HTTPS. Browsers are told to always use a secure connection.
Salaries: Pay data is encrypted with AES-256-GCM before it is written to the database. The key is kept apart from the database, so a database copy on its own shows only scrambled values.
Passwords: Passwords are stored as salted bcrypt hashes. Nobody at tickbit can read your password.
Card payments: Subscriptions are paid through Razorpay. Your card details go to Razorpay, never to tickbit.

A bad day on one server shouldn’t become a bad day for your business.

Every night: The full database is backed up automatically every night.
Encrypted first: Each backup is encrypted on our server before it goes anywhere.
Kept somewhere else: The encrypted copy is stored with a separate cloud storage provider, away from the servers that run tickbit.
Tested: We have restored from these offsite backups to make sure they actually work, not just that they exist.

Owners decide who sees money. Everyone else sees what their job needs.

Each company’s data is kept separate. Every request is limited to your own company.
Salaries, costs and margins are visible to owners and admins only, unless you choose to share profitability with a specific lead.
Team leads see the people who report to them. Members see their own work.
Roles can be tailored on Core and above, so you decide what each role can do.
People must verify their email before an account is active, and repeated failed sign-ins are slowed down.
Invoice links you share with clients and work-diary links can be withdrawn, and diary links expire.

Accountability works better when nobody is surprised by it.

The desktop app records apps, idle time and screenshots only while the timer is running.
Every person sees your attendance and monitoring policy and accepts it in the app.
Screenshots are optional, switched on by you, and can be blurred.
Check-in photos and screenshots are visible only to the people you allow.

You can take it with you, and you can ask us to remove it.

Take it out: Download reports as Excel, CSV or PDF, and invoices as PDF or Tally files, whenever you want.
Delete it: If you close your account, personal data is permanently deleted within 30 days, as set out in our privacy policy.
Never sold: We don’t sell or share your company’s data. It is used only to run tickbit for you.

Read the full privacy policy.

If you think you’ve found a security issue in tickbit, tell us before telling anyone else.

Email hello@tickbit.in with “Security report” in the subject, what you found and how to reproduce it. The tickbit team reads every report.

Book a short call and ask us anything about how your data is handled, or start free and see the controls for yourself.