Privacy Policy

TactPath does not connect to your employer's email, Slack, Microsoft Teams, HR system, payroll system, calendar, or document storage.

We do not notify your employer, manager, coworkers, or HR team when you use TactPath.

When you request AI-assisted guidance, TactPath uses OpenRouter as its AI gateway and sends the content and context needed to complete that request to a reviewed AI provider. When Memory is available and Private Mode is off, this may include a small number of relevant Memory items you previously confirmed.

The provider that handles the request may retain submitted content and use it for model training under its then-current policies. TactPath does not use your workplace content to train its own models, and candidate Memory never enters a prompt unless you confirm it as Memory.

A short disclosure beside each Generate action links here. By selecting Generate, you acknowledge the current AI Processing Notice and provider-policy version. TactPath records that version before submitting the AI request and does not use a separate blocking notice popup.

Private Mode changes what TactPath saves in your account; it does not prevent the content needed for your request from being sent through OpenRouter or processed, retained, or used for training by the configured provider.

TactPath does not silently save long-term Memory. Memory is saved only when you confirm it.

You can view, edit, pause, or delete saved Memory in Privacy & Data.

When Private Mode is on, TactPath does not save the conversation to History, create Memory suggestions, update your tone profile, or update long-term preferences from that work moment.

Private Mode activity may still generate limited usage, billing, security, and error records that do not contain the raw workplace message or AI-generated response.

We may disclose information to service providers that help operate TactPath, including providers for authentication, hosting, database infrastructure, email delivery, billing, public-page analytics, security, customer support, and AI processing.

These providers receive only the information reasonably needed to perform their services and are expected to handle it under their applicable contractual and security obligations.

We may also disclose information when reasonably necessary to comply with law, respond to valid legal process, protect users or the service, investigate fraud or abuse, or complete a business reorganization or transfer subject to appropriate protections.

We do not sell personal information. We do not share workplace content with employers, and we do not disclose personal information for cross-context behavioral advertising.

We use cookies and similar technologies for authentication, security, session management, and preferences. Some cookies are necessary for the service to work.

We use Plausible Analytics for privacy-friendly, aggregate measurement of approved public pages. We use Microsoft Clarity for heatmaps and session recordings on a narrower set of approved public marketing pages. These tools help us understand website traffic and general interaction patterns so we can improve TactPath. We do not use them to monitor activity inside the private TactPath application or to track you across unaffiliated websites for targeted advertising.

We configure these tools to support aggregate and de-identified analysis. TactPath does not send either provider your workplace content, AI output, saved Memory, email address, internal TactPath user ID, or payment identifiers. Clarity is restricted to approved public marketing pages; forms, text inputs, account information, billing information, and other sensitive or dynamic regions are excluded or masked. We do not use Clarity's identify feature.

Like other web analytics services, Plausible and Microsoft Clarity may process limited technical information needed to provide their services, such as page URLs, browser or device information, IP-derived network information, cookies, or similar session identifiers, subject to their own privacy terms and our configuration. For this reason, we do not promise that the providers receive no technical identifiers at all.

TactPath does not currently present a separate frontend consent popup solely for this limited public-page analytics use. If applicable law or a material configuration change requires prior consent or an opt-out control, TactPath will disable the affected analytics tool in that jurisdiction until the required control is available.

Because there is not a uniform industry standard for browser-based Do Not Track signals, those signals do not change the operation of technologies that are necessary to provide and secure TactPath. We will update this Policy and the available controls before materially changing our analytics or tracking practices.

We retain information only for as long as reasonably needed for the purpose for which it was collected, including providing the service, maintaining account and billing records, protecting security, preventing abuse, resolving disputes, and meeting legal or accounting obligations.

Work moments, Memory, and other user-controlled data are retained according to your plan, settings, and deletion choices.

When you request deletion, some limited billing, transaction, security, fraud-prevention, or audit records may be retained where reasonably necessary or legally required. Retained records are not used to recreate deleted workplace content.

We use reasonable administrative, technical, and organizational safeguards designed to protect user information, including access controls and protections for sensitive product data.

No online service can guarantee perfect security. You are responsible for protecting your account credentials and should contact us if you believe your account or information has been compromised.

You can manage Memory, Private Mode, History, export, and deletion controls in Privacy & Data. You can manage account and billing settings in Account & Billing.

You may request access to, correction of, export of, or deletion of personal information associated with your account by using available product controls or contacting support@tactpath.com.

We may need to verify your identity and account ownership before completing a request. We may limit or decline a request where permitted by law, including when information must be retained for security, fraud prevention, billing, accounting, or legal obligations.

Where applicable law provides additional privacy rights, you may exercise them through the same contact address. TactPath will not discriminate against you for making a privacy request where prohibited by law.

Deleting TactPath data does not necessarily cancel an active paid subscription. Before deleting your account or all product data, manage or cancel any active subscription through Account & Billing unless the product expressly confirms that cancellation is included in the deletion flow.

TactPath is intended for adults and is not directed to children under 18.

We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will take reasonable steps to delete it. A parent or guardian may contact support@tactpath.com about such information.

We may update this Privacy Policy as the product and our information practices evolve.

If we make material changes, we will update the effective date and provide notice through the service, by email, or by another appropriate method before the changes take effect when required by law.

For privacy questions or requests, contact: support@tactpath.com