Privacy Policy

Effective from: January 19, 2026

UAB Willtick (hereinafter – “Willtick”) respects your privacy. This Privacy Policy explains how we collect, use, and disclose information about you or information related to you (hereinafter – personal data) when providing:

The website willtick.ai (hereinafter – the Website), and
The cloud-based work schedule / shift planning SaaS platform (hereinafter – the Platform),
Collectively – the Services.

By using the Services, you confirm that you have read and understood this Privacy Policy.

1. Who is the data controller and how to contact us?

Data Controller: UAB Willtick
Address: Savanorių pr. 178A, Kaunas, Lithuania
Email: info@willtick.ai
Phone: +370 615 47198
For privacy-related matters, we recommend contacting us via email at info@willtick.ai (with “Privacy” in the subject line).

2. To whom does this Privacy Policy apply?

This Policy applies to:

Website visitors;
Platform users (e.g., account administrators, managers, planners, employees/shift workers);
Individuals who communicate with us (e.g., via email or inquiries).

Important regarding the B2B (Employer) context: When the Platform is used by a company (hereinafter – the Client) and its employees, part of the data processing takes place on behalf of the Client (for the organization’s internal purposes). In such cases, the Client is often the data controller, and we are the service provider processing data for the purpose of providing the Services.

3. What personal data do we collect?

The scope of data collected depends on how you use the Services.

3.1. Data you provide yourself

Account data: Email, password (hashed), login, and security information.
Contact and professional data: First name, last name, phone number, job title, department, company name.
Platform Content: Work schedules, shift data, availability, preferences, messages/comments, and other data you upload or enter.
Payment and billing data (if applicable): Invoice details, VAT code, billing information (we generally do not process credit card data directly—it is handled by a payment intermediary).
Correspondence with us: Inquiries, complaints/requests, support history, email content.

3.2. Data we collect automatically

Technical data and logs: IP address, browser type/version, device type, OS, time zone, login times, error logs, API request logs.
Usage data: Page views, action sequences, clicks, feature usage, session duration.
Approximate location: May be determined by IP (city/country) without precise GPS location (unless features requiring it are explicitly used and you grant permission).

3.3. Data from other sources (if applicable)

From the Client (e.g., employee lists, roles, departments).
From integrations (e.g., calendar systems), only if you enable them.
From service providers (e.g., payment confirmations from intermediaries).

4. Purposes and legal basis for processing

We process personal data only to the extent necessary for clearly defined purposes.

4.1. Provision of Services and Performance of the Contract

Purposes: Account creation, authentication, operation of Platform functions, schedule planning, notifications, invoicing, and customer service.
Legal basis: Performance of a contract (GDPR Art. 6(1)(b)).

4.2. Legitimate Interests

Purposes: Ensuring the security of Services, fraud prevention, systems diagnostics, performance analysis, improvement of Services, internal administration, and management of legal claims.
Legal basis: Legitimate interest (GDPR Art. 6(1)(f)), provided that your interests do not override these interests.

4.3. Legal Obligation

Purposes: Storage of accounting documents, responding to lawful requests from authorities, and compliance with legal requirements.
Legal basis: Legal obligation (GDPR Art. 6(1)(c)).

4.4. Consent (where required)

Purposes: Marketing communications (if applicable), certain cookies, and specific integrations or features that require permission.
Legal basis: Consent (GDPR Art. 6(1)(a)). You may withdraw your consent at any time.

5. Who do we share your data with?

We disclose data only as necessary:

To the Client (Employer/Organization): If you are a user of that organization’s Platform.
To Service Providers (Processors): Hosting/infrastructure providers, email delivery services, error diagnostic/analytics tools, and payment intermediaries (e.g., Stripe).
Legal Cases: When required by law or to defend our rights.
Business Transactions: In the event of reorganization, merger, or sale of the business (only to the extent necessary and subject to confidentiality).

6. How long do we store data?

We store data as long as necessary to fulfill the purposes or as required by law.

Account data: While the account is active and for a reasonable period after closure.
Accounting documents: According to mandatory legal terms.
Technical logs: For a limited time necessary for security and diagnostics.

7. International data transfers

If data is processed outside the European Economic Area (EEA), we ensure appropriate safeguards (e.g., Standard Contractual Clauses) are in place.

8. Cookies

We use necessary cookies (session, security), functional cookies (settings), and analytical cookies (usage analysis, subject to consent where required). You can manage these via your browser settings.

9. Security

We use organizational and technical measures (access control, encryption, backups, etc.) to protect data. However, as no system is 100% secure, we cannot guarantee absolute security.

10. Your Rights (GDPR)

Depending on the situation, you have the right to:

Access your data and receive information about its processing.
Request correction of inaccurate data.
Request erasure (“right to be forgotten”).
Restrict processing.
Object to processing based on legitimate interest.
Data portability.
Withdraw consent.
Lodge a complaint with a supervisory authority (e.g., VDAI in Lithuania).

11. Children’s Data

The Services are intended for persons aged 18 and over. We do not knowingly collect data from minors.

12. Client (B2B) Obligations

Clients managing employee data on the Platform undertake to:

Have a legal basis for processing.
Inform data subjects (employees) about the processing.
Practice data minimization.
Ensure responsible use of login credentials.

13. Changes to the Policy

We may update this Privacy Policy. The “Effective from” date will be updated accordingly. Significant changes will be communicated via the Platform or email.

UAB Willtick

Savanorių pr. 178A, Kaunas, Lithuania

Tel.: +370 615 47198

Email: info@willtick.ai

Willtick.ai