Privacy Policy

This Privacy Policy describes how Tixi Intelligence Private Limited ("Tixi", "we", "us") handles personal data when people visit tixi.ai, use Tixi's AI-powered marketing and growth software, connect third-party accounts, or contact us.

Tixi is an India-based software company serving businesses. The Services may include marketing research and trend catching, content and campaign planning, AI-assisted analysis and creation, reporting, and integrations such as the WhatsApp Business Platform. The features available to a customer depend on its plan, permissions and configuration.

1. Tixi's role

Tixi acts as a data fiduciary/controller for personal data it uses for its own purposes, such as account administration, billing, website operation, security and legal compliance.

When a business customer submits or connects information about its customers, leads, employees or other contacts so Tixi can perform the customer's requested workflow, that customer generally decides the purpose and means of that processing. Tixi processes that information on the customer's documented instructions as a processor/service provider, subject to the customer agreement and any Data Processing Addendum (DPA). Some processing, such as service security and abuse prevention, may be performed by Tixi for its own purposes. The parties' roles depend on the specific activity, not just this description.

The customer is responsible for providing its contacts with required notices, obtaining required permissions, and ensuring its instructions and use of Tixi are lawful. A person whose data was submitted by a Tixi customer should normally direct privacy requests to that customer first; Tixi will assist the customer as required by law and contract.

2. Information we handle

Depending on the features used, Tixi may handle:

• Account and business information: name, business email, phone number, company, role, account credentials or authentication identifiers, workspace settings and support history.
• Subscription and transaction information: plan, usage, credits, invoices, payment status, transaction references and billing contact details. Payments are handled through Razorpay, which may collect and process payment information under its own terms and privacy notice.
• Customer materials: prompts, instructions, brand and campaign information, documents, images, videos, URLs, social posts, creative assets and AI outputs submitted or generated through the Services.
• Connected-platform information: identifiers, permissions, assets, analytics, campaign data and other information made available by a platform after an authorised connection. The specific fields depend on the permissions and features enabled.
• WhatsApp-related information: when a customer enables WhatsApp functionality through Meta's Cloud API, Tixi receives and stores inbound message bodies, phone numbers, business identifiers, templates, delivery/read events and related metadata. The Tixi WhatsApp bot can send messages as instructed or configured by the customer.
• Device and service information: IP address, browser/device details, timestamps, authentication events, diagnostic records, feature usage and security logs.
• Communications: messages and information supplied when you ask for support, respond to us, or otherwise communicate with Tixi.
• Cookies and similar technologies: essential identifiers and, if deployed, analytics or preference information. See Section 9.

Do not submit sensitive personal data, financial account credentials, government identifiers, health information, children's data or other data requiring heightened protection unless the feature expressly supports it and you have confirmed an appropriate lawful basis and safeguards.

3. Sources of information

We receive information directly from account holders and users, from the business customer that invited or authorised a user, from services the customer connects, and automatically from devices and use of the Services. Third-party platforms process information under their own terms and privacy notices.

4. Purposes of processing

We use information to:

• create and administer accounts, authenticate users and provide the requested Services;
• process prompts, files, connected-platform data and instructions to return requested analysis, recommendations, content or workflow results;
• support WhatsApp and other integrations the customer enables;
• provide support, communicate service changes and administer subscriptions, usage, billing and payments;
• maintain reliability, troubleshoot, secure accounts, detect misuse and enforce agreements;
• understand aggregate service usage and improve reliability and features;
• comply with legal obligations and establish, exercise or defend legal claims; and
• send marketing communications where permitted. Recipients can opt out of marketing messages.

We do not sell personal data. Tixi does not use customer materials to train its own general-purpose models. Tixi configures OpenRouter to opt out of provider training and prompt logging and to exclude model providers that train on prompts where OpenRouter offers that control. Model providers still process prompts to return results; their transient processing and technical logs are governed by their applicable terms. Tixi does not describe this processing as zero retention.

5. AI and model providers

Some features send prompts, instructions, files or other context to AI model providers selected by Tixi to return the requested result. Tixi uses OpenRouter to access LLMs; the underlying model provider may vary by feature or configuration. Tixi may also use AWS, Cloudflare and other compute or storage providers. Razorpay processes payments. Meta provides the WhatsApp Cloud API integration. These providers may process data under their own service and data-processing terms. Their retention and human-review practices can differ.

Tixi identifies its Subprocessors and their functions in the DPA at https://www.tixi.ai/dpa. Customers should not submit information that they are not authorised to disclose to the selected service.

AI outputs may be inaccurate, incomplete or unsuitable. Users must review outputs before relying on, publishing or sending them.

6. WhatsApp and connected services

When a customer authorises a WhatsApp Business Platform connection through Meta's Cloud API, Tixi receives and stores inbound message bodies and related account and event data, and the Tixi WhatsApp bot may send messages as instructed or configured by the customer. Tixi processes data made available through that authorisation to operate the selected feature. Meta, WhatsApp and any communications provider may separately process data under their own terms.

The customer is responsible for having the rights and permissions needed to connect its assets and contact people through them, including applicable opt-in, notice, opt-out, template and messaging requirements. The customer must honour recipient choices and platform policies. Tixi may restrict a connection or workflow to protect the Services or comply with law or platform requirements.

Disconnecting an integration stops future access through that connection, but does not by itself delete information already stored by Tixi or by the platform. Use the deletion process in Section 11 for Tixi-held information and the platform's own controls for information it holds.

7. Legal grounds and rights

Where applicable law requires a legal basis, Tixi relies on the basis appropriate to the specific purpose, which may include performing a contract, complying with law, consent, or legitimate interests such as securing and improving the Services. Where we rely on consent, it can be withdrawn prospectively. The customer is responsible for determining the appropriate basis for data it controls and for communicating it to affected people.

Depending on the law that applies, individuals may have rights to access, correct, update, erase, obtain or transfer certain information, object to or restrict certain processing, withdraw consent, or complain to a regulator. Rights and exceptions differ by jurisdiction. Submit a request to legal@tixi.ai with the subject "Privacy Request." We may verify identity and authority before responding. If Tixi processes the information for a customer, we may refer the request to that customer or assist it in responding.

For people in the European Economic Area or United Kingdom, where applicable, the relevant controller, legal basis, recipients, transfers and rights will be explained in the applicable notice. If Tixi is required to appoint a local representative or data protection officer, Tixi will publish their contact details in an updated notice.

For people in India, Tixi will provide the rights and grievance mechanisms required under applicable Indian law. Privacy requests and grievances may be sent to legal@tixi.ai.

8. Disclosure and subprocessors

Tixi may disclose information to:

• infrastructure, database, storage, security, AI/model, communications, analytics, customer-support and payment providers acting as service providers or subprocessors;
• third-party platforms a customer chooses to connect;
• professional advisers, auditors and insurers subject to appropriate confidentiality duties;
• government authorities or other parties when required by law or reasonably necessary to protect rights, safety, security or the Services; and
• a successor or buyer in a merger, financing, reorganisation or transfer of business, subject to appropriate protections.

We require service providers to protect personal data and limit their use to the agreed purposes. A current list of subprocessors, purposes and processing locations is available in the DPA at https://www.tixi.ai/dpa.

9. Cookies and analytics

Tixi uses essential technologies needed for login, security and core functionality. If Tixi deploys non-essential analytics or advertising technologies, it will describe them in a cookie notice and provide consent or preference controls where required. Browser settings can also be used to block cookies, although some features may stop working.

Tixi will provide notice and preference controls before using non-essential cookies or similar technologies where required by applicable law.

10. International processing

Tixi is based in India. Tixi and its providers may process information in India and other countries where infrastructure or providers operate. Data protection rules may differ from those in the person's country. Where a transfer mechanism or additional safeguard is required by applicable law, Tixi will implement it and make relevant information available in the DPA or on request.

11. Retention and deletion

While an account is active, Tixi retains customer message content, prompts, uploaded files and generated outputs until the customer requests deletion. Account holders can request deletion at https://www.tixi.ai/data-deletion. Following a verified request, Tixi will initiate deletion without undue delay and complete deletion from active systems within 30 days, subject to lawful retention requirements and customer instructions. On account termination, the customer may export its data from the dashboard and has 30 days to request continued retention or deletion. If the customer makes no request, Tixi will delete active customer content within 60 days after account termination. Backups are retained for up to 150 days; after deletion from active systems, backup copies expire through the regular cycle within that period. Tixi will instruct its subprocessors to delete data as required by contract and law.

Audit logs, application logs, traces and metrics are retained for 150 days by default. A customer may request longer telemetry retention, subject to the agreed service configuration. Tixi may retain account and billing records for the periods required by law or reasonably needed for accounting, dispute resolution, security and claims.

12. Security and incidents

Tixi applies administrative, technical and organisational safeguards appropriate to the data and risks, including customer-level logical data isolation, access controls and security monitoring. Data for each customer is isolated from other customers' data. No online service can guarantee absolute security. Account holders must protect credentials and promptly report suspected compromise.

If Tixi becomes aware of a security incident affecting customer personal data, Tixi will investigate, take reasonable steps to contain it, and notify affected customers without undue delay as required by law and the applicable DPA.

13. Children

The Services are designed for business users and are not directed to children. Tixi does not knowingly seek to collect children's personal data. Customers must not submit such data unless the feature supports it and the customer has met applicable requirements. Contact legal@tixi.ai if you believe a child's data has been submitted improperly.

14. Changes and contact

We may update this Policy as our Services, data practices or legal requirements change. We will post the revised version and update the date above. For material changes, we will provide additional notice or obtain consent where required.

Tixi Intelligence Private Limited
Registered office: 331/1946 - B, Road 6, Aurobindo Nagar, Chandrasekharpur, Bhubaneswar - 751016, Odisha, India
Privacy requests: legal@tixi.ai
General support: support@tixi.ai