Privacy Policy

This Privacy Policy explains how Tactically Safe LLC collects, uses, discloses, and retains personal information in connection with TacSafe, https://tacsafe.app, and related business services.

1. Scope and roles

This Policy applies to information TacSafe handles as a business or controller for its own website, account administration, sales, support, security, and billing activities, and to information processed as a service provider or processor on behalf of Customers.

Where Customer determines why and how workplace records are processed, Customer is responsible for its own privacy notices and legal basis, and TacSafe processes that information under Customer instructions and the applicable agreement.

2. Information we collect

3. How we use information

• Provide, operate, authenticate, secure, maintain, and support the Service.
• Process Customer instructions, including document processing, search, storage, AI-assisted analysis, reporting, and collaboration features.
• Administer subscriptions, payments, account limits, and customer support.
• Detect, investigate, prevent, and respond to security incidents, fraud, abuse, and violations of our policies.
• Maintain logs, backups, service reliability, and business records.
• Improve product functionality and usability using operational information and feedback, subject to contractual restrictions on Customer Content.
• Comply with law, enforce agreements, and protect legal rights.
• Send transactional SMS or MMS account and certification notifications you request or authorize, such as training or credential expiration reminders and related service alerts, as described in the SMS Terms.

4. AI processing

Some TacSafe features may use automated or AI-assisted processing to extract data, classify documents, search information, summarize content, or analyze images. AI Output may be inaccurate and is designed for human review. TacSafe does not intend AI-assisted features to make final employment, disciplinary, eligibility, medical, legal, or safety decisions for Customers.

If TacSafe uses a third-party AI provider to process Customer Content, the provider will be treated as a subprocessor where required and will be identified in the applicable Subprocessor List before production Customer Content is routed to that provider.

5. How we disclose information

• Service providers and subprocessors that provide hosting, database, authentication, storage, email, payments, security, support, analytics, or AI functionality under contractual restrictions.
• Customer administrators and authorized users within the Customer workspace, according to Customer-configured roles and permissions.
• Professional advisers, auditors, insurers, financing sources, or transaction participants subject to confidentiality obligations.
• Government authorities or other parties when required by law, legal process, or reasonably necessary to protect rights, safety, and security.
• A successor or acquiring entity in a merger, acquisition, financing, reorganization, or sale of all or part of the business, subject to applicable law.

TacSafe does not sell personal information for money. TacSafe does not use Customer workspace content for cross-context behavioral advertising.

Mobile telephone numbers and other information collected for TacSafe text-message programs are shared only with messaging service providers and carriers as needed to deliver messages, maintain logs, and comply with law. TacSafe does not sell mobile information and does not share mobile information with third parties or affiliates for their own marketing or promotional purposes.

6. Data retention

TacSafe retains information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, maintain security, and enforce agreements. Account and Customer Content retention is also governed by Customer instructions and the applicable contract.

When a Customer subscription is cancelled or terminated, the workspace may be placed in a restricted archive for 30 days and then scheduled for permanent deletion from production and primary storage, subject to legal holds and routine backup expiration. Certain billing, security, audit, and transaction records may be retained longer when required for legitimate business or legal purposes.

7. Security

TacSafe uses administrative, technical, and organizational safeguards designed to protect information, including access controls, tenant isolation controls, encryption in transit, provider-supported encryption at rest, private object storage, logging, least-privilege practices, and security testing. No method of transmission or storage is completely secure, and TacSafe does not guarantee absolute security.

8. Your privacy rights

Depending on where you live and the law that applies, you may have rights to request access, correction, deletion, portability, or information about processing; to opt out of certain sales, sharing, targeted advertising, or profiling; to limit certain uses of sensitive data; or to appeal a denied request. These rights may be subject to exceptions and verification requirements.

To submit a privacy request concerning information controlled by TacSafe, contact customer-service@tactically-safe.com. If your request concerns workplace records controlled by your employer or another Customer, we may direct the request to that Customer.

TacSafe will not discriminate against a person for exercising applicable privacy rights. Where legally required, TacSafe will recognize applicable browser-based opt-out preference signals for processing within its control.

9. Nebraska Data Privacy Act disclosures

Tactically Safe LLC is organized under the laws of the State of Nebraska. Where the Nebraska Data Privacy Act (Neb. Rev. Stat. §§ 87-1101 to 87-1130) ("NDPA") applies to TacSafe as a controller with respect to personal data of Nebraska residents that TacSafe processes for its own business purposes (for example, website inquiries, account administration, sales, support, billing, and security), Nebraska residents may have rights to: (a) confirm whether TacSafe is processing their personal data and access that data; (b) correct inaccuracies; (c) delete personal data provided by or obtained about the consumer; (d) obtain a copy of personal data the consumer previously provided in a portable format; (e) opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer; and (f) appeal a refusal to take action on a request.

TacSafe does not knowingly sell personal data and does not share Customer workspace content for cross-context behavioral advertising. Where TacSafe processes Customer Content as a processor or service provider on behalf of a Customer organization, the Customer generally determines the purposes and means of that processing, and privacy requests concerning those workplace records should be directed to the Customer administrator. TacSafe will provide reasonable assistance to Customer controllers responding to verified NDPA requests as required by Applicable Data Protection Law and the Data Processing Addendum.

To exercise NDPA rights with respect to information controlled by TacSafe, email customer-service@tactically-safe.com with the subject line "Nebraska Privacy Request." TacSafe will verify requests as permitted by law and will not discriminate against a consumer for exercising NDPA rights. The Nebraska Attorney General has exclusive authority to enforce the NDPA.

Applicability of the NDPA depends on statutory thresholds and exceptions (including small-business and certain excluded information categories). This section is a disclosure and does not expand TacSafe's obligations beyond applicable law.

10. California and other U.S. state disclosures

Applicable U.S. state privacy laws may require additional disclosures regarding categories of personal information, purposes of processing, recipients, retention, and consumer rights. The categories and purposes described in this Policy are intended to provide those disclosures where applicable. TacSafe does not knowingly sell personal information or share Customer workspace content for cross-context behavioral advertising.

11. Cookies

TacSafe uses cookies and similar technologies as described in the Cookie Notice. Essential technologies support authentication, security, preferences, and core functionality. Non-essential analytics or marketing technologies, if enabled, will be subject to applicable notice and consent requirements.

12. Children

TacSafe is a business service not directed to children under 18, and we do not knowingly collect personal information from children through self-directed use of the Service.

13. International users

If personal data is transferred across national borders, TacSafe will use contractual or other lawful transfer mechanisms when required by applicable law. Enterprise Customers may request a Data Processing Addendum addressing applicable international-transfer requirements.

14. SMS and mobile messaging

If you opt in to TacSafe text-message notifications, Tactically Safe LLC may use your mobile number and related information to send transactional messages about your account, certifications, training, credentials, or similar workplace compliance reminders. Message frequency varies based on your account activity, expiration dates, and notification settings; you may receive multiple messages per month when reminders are due.

We collect and retain mobile numbers, consent and opt-in records, message content and category, delivery metadata (such as timestamps and carrier status codes), and support correspondence about messaging. We use this information to deliver messages, document consent, troubleshoot delivery, prevent abuse, and comply with telecommunications and privacy law.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Messaging providers that transmit messages on our behalf process data only to provide the messaging service under contractual restrictions and are not permitted to use your mobile information for their own advertising.

You can opt out of TacSafe SMS notifications at any time by replying STOP to a message. For help, reply HELP or contact customer-service@tactically-safe.com. Message and data rates may apply. Program terms are described in the SMS Terms at /legal/sms-terms.

15. Changes to this Policy

We may update this Policy to reflect changes in the Service, law, or our practices. The effective date above shows the latest revision. Material changes will be communicated when required by law or contract.

16. Contact

Privacy, messaging, and customer support: customer-service@tactically-safe.com or +1 (308) 870-7020. Security reports: Security@tacsafe.app.