Security & Privacy
Security & Privacy
*How TikitDesk keeps your workspace and your clients' data safe.*
Your data is fully isolated
Every company on TikitDesk is completely separate — there's no way for another company's users to see your tickets, clients, or team, and no way for yours to see theirs.
Ticket links can be shared safely
Each ticket uses a non-sequential, non-guessable secure link — not a simple counter that could be walked through to find other companies' tickets. It's safe to share a ticket's tracking link with a client.
Login options
Besides a password, TikitDesk supports:
- Google sign-in
- Magic-link login — a one-time secure link sent to your email, no password needed for that session
Two-factor authentication
Available on every plan, per user, as an extra layer beyond your password.
Password policy
By default, accounts are prompted to update their password periodically (every 90 days) as a routine security practice.
Encryption in transit
HTTPS is enforced throughout — your connection to TikitDesk is always encrypted, no exceptions.
Protection against abuse
Rate limiting is applied on sensitive actions like login attempts, password resets, and similar flows, alongside standard session-based access controls — so automated guessing or scripted abuse against your account is throttled.
Activity log retention
Your ticket activity log (status changes, reassignments, and similar events) is kept for your plan's window — 90 days on Starter, 180 on Professional, or indefinitely on Scale — then older entries are purged automatically. This only affects the log itself, never the tickets it describes.
Internal notes stay internal
Notes marked as internal are visible to your team only — never to the client, regardless of how they're viewing the ticket.
Privacy Policy & Terms of Service
Both are published and linked from the product footer at any time.