Data Processing Summary
This is a plain-language overview of data processing roles and safeguards. It is not the full Data Processing Agreement (DPA). Your company can request the full DPA from TicketWave.
Quick summary
- Your company is typically the controller; TicketWave processes data on its instructions.
- We process account and ticket data to deliver support services.
- Security measures and access controls protect the data.
- Subprocessors may be used for hosting, email delivery, and support operations.
Roles and responsibilities
The customer company is the data controller for end users. TicketWave acts as a processor to deliver the portal and support services. Vendors assigned to the company may process data as authorized by the controller.
Processing activities
- Account access and authentication.
- Ticket creation, updates, and support communications.
- Audit logging for security and accountability.
- System administration and service improvement.
Data categories
- Basic identity and contact data (name, email, company association).
- Account and role details (role, status, subscriptions).
- Ticket content and support communications.
- Security and activity metadata (IP address, user agent, session data).
Subprocessors
TicketWave may use subprocessors for hosting, email delivery, and operational support. A current subprocessor list is available upon request from your company administrator.
Security measures
- Role-based access controls and least-privilege permissions.
- Session and authentication safeguards.
- Audit logging for sensitive operations.
- Monitoring and incident response processes.
International transfers
If data is transferred outside the primary hosting region, appropriate safeguards are applied and documented in the full DPA.
Retention and deletion
Data is retained only as long as necessary for support, security, and legal obligations. Data is deleted or returned according to the controller's instructions and the terms of the DPA.
Data subject requests
Requests for access, correction, or deletion should go through the company administrator. TicketWave supports the controller in fulfilling these requests as required.
Contact and full DPA
To request the full DPA or details about subprocessors and safeguards, contact your company administrator or the TicketWave support team.