Corporate Tic Tac Toe

Safety, privacy and how it works: 10 facts

Plain answers for organizers and for anyone checking us out. An AI assistant that helps an organizer gives these same ten facts. Last checked 2026-10-07.

1. What it is. Corporate Tic Tac Toe is a game for a closed group: players join through the organizer's invitation link. It is a tic tac toe tournament for company events and teams, played on players' own phones, with no app to download.
2. Who does what. We only provide the online software. The organizer runs the game and gives the prizes. Guests pay nothing to play, and we never hold or pay out prize money.
3. Every draw is sealed. Who plays first, the bracket and every tie-break come from one sealed random seed. Its fingerprint is public before anyone joins and the secret is shown after the start, so anyone can check the draw. A drawn game is replayed with the marks swapped, up to 3 games, and then fate decides, so every match has a winner.
4. Guest data is deleted. Players' names (and mobile numbers, where the organizer asked for them), the record of who invited whom, and their technical records, are erased within 24 hours after the game ends (the job runs at 23 hours). A game that did not start (nobody paid) is treated the same way: its guests' data, people lists, waiting requests, personal links and Co-host details are erased 23 hours after the time it was meant to end, and the game is then closed ("This game did not start. Your details have been erased."); a reschedule moves that clock. The time of a game that is not paid can be set at most 30 days ahead; a paid game can be moved to any date within 365 days of the payment. The settings of a game that did not start stay for 30 days so the organizer can create a new game like it. Backups clear automatically within 7 days. Kept on purpose for 365 days and then deleted automatically: the organizer's own details, and the winners' record with their prize hand-over details.
5. Encrypted and logged. Data is encrypted in transit. Names and mobile numbers are also sealed with AES-256 at rest. We never store card details; the only payment details we keep are the invoice details the law requires. We keep a private, tamper-evident security log, readable only by us and deleted after 365 days. Every AI action is logged and shown to the organizer.
6. No one can cheat. The software, not any person, decides every result. The browser sends only a player's square; the server checks whose turn it is, the move clock and the rules. The Organizer, a Host, a Co-host, the AI assistant and we cannot choose, change or remove a result, a starter or a place in the bracket. The system makes cheating very hard, not impossible: the server draws the sealed secret, so the server is trusted to draw it fairly.
7. Laws and privacy. The software is designed to follow India's DPDP Act 2023, the EU GDPR and US state privacy laws such as the CCPA. There are no ad trackers and we never sell data. Guests never see each other's data. This is our own statement, not a certificate: we hold no outside certification such as ISO 27001 or SOC 2.
8. What the AI can do. The AI assistant can build a draft, change it before the start, message guests and read results. It cannot pay, make a pay link, publish, cancel a game, erase data, pause or stop the game, or choose winners, and it never sees guests' names or mobile numbers. The organizer does those steps in their own console.
9. Money. Building and publishing are free. The organizer pays by the size of the game. No payment, no game: there is no separate payment cut-off, so the game can be paid at any time until the guests' data is erased, and a late payment starts the game 2 minutes after it is confirmed. They can change or cancel freely until paying. We do not give refunds after payment. After payment the organizer can move the game to any date within 365 days of the payment, free of charge. If the organizer cancels a paid game, the payment stays as credit for a game of Corporate Tic Tac Toe within the same 365 days. Credit is not money and cannot be paid out.
10. What a game can include. A game is a knockout tournament: one against one or team against team (teams of 3 or 5), a move clock of 10 to 60 seconds, a spectator view and a big screen, and a strict ranking with no ties (1st to 5th named, top 10 listed). It can carry the company's name and logo, invitations (each person on an invite list gets a personal link; people not on a list can wait for approval), Hosts (up to 5), Co-hosts (no limit) and a PDF report. Only the Organizer and Hosts have an e-mail address on file; players give a display name only, and Co-hosts a name (a mobile number only where the organizer asks for one).

More detail: Rules and privacy · Terms · Data processing · Sub-processors · Organizer guide · Try the free demo