Privacy Policy

1. Information We Collect

We collect only information necessary to operate, secure, and improve the Service.

1.1 Information You Provide

• Email address
• Username and display name
• Account credentials (passwords are hashed prior to storage)
• Optional profile information
• Messages, content, and files you share
• Support requests and abuse reports

1.3 Cookies & Similar Technologies

We use cookies for:

• Login sessions (strictly necessary)
• Performance and functionality
• Usage analysis

Non-essential cookies require consent where legally required (EEA/UK, California). You may disable cookies, though some features may not work. We honor Global Privacy Control signals.

2. How We Use Information

We use information to:

• Provide and maintain the Service (private chats/servers)
• Manage accounts and authentication
• Enable user communication
• Improve and personalize the Service
• Detect and prevent fraud, abuse, and security issues
• Investigate abuse reports in private chats/servers
• Provide support
• Comply with legal obligations

We do not sell personal data or share for cross-context behavioral advertising. Limited personnel access messages/metadata only when necessary for operations, abuse investigation, legal compliance, or security, subject to strict controls and logging.

3. How We Share Information

3.1 Service Providers

Third parties (cloud hosting, analytics, Klipy for GIFs/stickers, email delivery) assist us under strict confidentiality. They use data only for services provided to TactiChat.

3.2 Legal & Safety

We share information to:

• Comply with laws and legal requests
• Protect TactiChat, users, or others' rights, property, or safety
• Enforce Terms

Abuse reports may trigger content/metadata review for investigation and action.

3.3 Business Transfers

Data may transfer during mergers, acquisitions, or asset sales.

4. Data Retention

We retain account information only for as long as necessary to operate and provide our services.

• If a user deletes their account, associated personal information, including stored messages, email address, and password hash, is permanently removed from active systems without undue delay.
• Encrypted system backups may retain residual data for up to 90 days before automatic deletion in accordance with backup rotation procedures.
• Aggregated and de-identified data that cannot reasonably be linked to an individual may be retained indefinitely for analytics, system improvement, and security purposes.

5. Account Deletion

Users may delete their account at any time through account settings.

• Deletion is processed automatically.
• Associated account information, including stored messages, email address, and password hash, is removed from active systems without undue delay.
• Deleted accounts and associated content are no longer accessible and cannot be restored.
• If a lawful preservation request, subpoena, court order, or other legally binding obligation is received before deletion completes, we may suspend deletion and retain relevant information as required by law.
• We are not responsible for the absence of data permanently deleted before receipt of a legal request.
• Encrypted backups may retain residual data for a limited period consistent with backup retention schedules.

6. Security

We implement:

• Encrypted and authenticated connections using AES-128-GCM with X25519MLKEM768 as the key exchange mechanism
• Password hashing and salting before storage
• QUIC transport security
• Regular security audits

No system guarantees absolute security.

7. Data Breach Notification

We'll notify affected users promptly as required by law (for example, 30-60 days in many U.S. states), mitigate harm, and meet reporting requirements.

8. Children's Privacy (COPPA)

The Service is not directed to children under 13. We delete discovered under-13 data and may terminate accounts.

Parents/guardians may contact: [email protected]

9. Your Privacy Rights

9.1 United States Users

You may have rights to:

• Access or correct personal information
• Request deletion (legal exceptions apply)
• Opt out of sales/sharing/profiling (GPC honored)
• Limit sensitive information use
• Non-discrimination protection

Requests: [email protected]
Response within 45-90 days; verification required.

9.2 EEA & UK Users

Rights include:

• Access, correction, and erasure
• Restriction or objection to processing
• Data portability

Legal bases include contract performance, legitimate interests (security/improvement), and legal obligations. Contact [email protected] or your data protection authority.

10. International Data Transfers

Data may be transferred to and processed in the United States and other countries. EEA/UK users are protected by Standard Contractual Clauses (SCCs). Transfers support contract performance and service delivery.

11. Third-Party Services

• Klipy: GIF/sticker queries (review their privacy policy)
• Email providers: delivery-only processing (email + message content)
• Google Analytics: anonymized usage; opt out via browser settings and Google policy tools: https://policies.google.com/privacy

12. California Privacy Rights (CCPA/CPRA)

• Categories: identifiers, account info, internet activity, user content (chats/servers)
• Purposes: service and security operations (Section 2)
• Sale/Sharing: none
• Retention: Section 4
• Sensitive info: none collected intentionally

Requests: [email protected]

13. Changes to Policy

Material changes will be notified via Service/email. Continued use constitutes acceptance.

14. Contact

TactiChat
TactiChat LLC
South Dakota, USA
Email: [email protected]