Privacy policy

Tacty (tacty.co) is a service of Central Digital Network LLC, 26232 FM 2978 Rd., Magnolia, TX 77354, USA. The company is responsible for panel account data: business owners, resellers and their staff.

Each business's customer data belongs to that business, which decides how it is used. Tacty processes it on the business's behalf, only to provide the service.

Panel accounts: name, email and password (stored hashed, never in plain text).

Businesses: name, type of business, phone, WhatsApp, address and location if the business adds it, logo and card colors.

A business's customers: name, phone, birthday if they give it, their visits, rewards and card. If they save the card to Apple Wallet or Google Wallet, the identifier those services give us to update it.

Business staff: name and a PIN (stored hashed) to confirm visits.

Payments: if you pay your plan by card, the card details are received and stored by Stripe; Tacty only receives the payment status and invoices.

Service usage: code scans, sign-ups, card views and a log of every change made in the panel or by an assistant (who, what and when), for security.

Necessary cookies: to keep you signed in, remember your language and remember the card on the customer's phone.

Advertising cookies (only if you accept them): on our public pages, when you create your account and when you pay for your plan, we use the Meta pixel (Facebook and Instagram) to see whether our ads work. Never in the dashboard, on a business's customer cards or at the counter.

To provide the service: create and update cards, record visits and rewards, deliver the notices the business decides to send to its customers' cards, and send account emails (invitations, passwords, billing).

For security: prevent visit fraud, limit attempts and know who made each change.

To measure our own ads on Meta, only if you accept advertising cookies: the pages you visit on tacty.co, whether you created your account and whether you paid for your plan (with the amount). Your email is sent hashed, never in plain text.

We don't sell personal data. A business's customer data is never used for advertising or sent to Meta.

You can change your choice about advertising cookies at any time: Choose again

You can connect your own AI assistant to your Tacty account. When you connect it, you approve access in Tacty and the assistant can see and do the same as you in the panel, nothing more.

Tacty does not read your conversations with the assistant: it only receives the actions the assistant requests (for example, “list customers at risk”) and replies with the data for that action.

What the assistant receives from Tacty is also subject to the privacy policy of its provider (OpenAI, Anthropic or another). You can disconnect it anytime in “Operate with AI”.

Only with providers we need to operate, under contract and for that purpose: Railway (servers), Supabase (database), SendGrid (email), Stripe (card payments), and Apple and Google for cards saved to their Wallets.

With Meta Platforms (Facebook and Instagram), to measure our ads, only if you accept advertising cookies. What Meta receives is also subject to its data policy.

With the AI assistant you connect, and only what it requests while connected.

With authorities, only if the law requires it.

While the account is active. When a business or an account is closed, we delete or anonymize its data within 90 days at most, except what the law requires us to keep.

A customer can ask the business, or us, to delete their card.

You can request access to, correction or deletion of your data, or object to its use, under the laws of your country (for example, Law 8968 in Costa Rica). Write to us at hola@tacty.co.

If you are a business's customer, you can also ask the business directly.

Everything travels encrypted (HTTPS). Passwords, PINs and access keys are stored hashed. Each person sees only the businesses they have access to, and each business only its own customers.

Tacty is a service for businesses. Panel accounts are for adults. If a business enrolls minors in its program, it is responsible for having the necessary permission.

If we change this policy we will publish the new version here, with its date. If the change is important, we will notify panel accounts by email.

Privacy questions: hola@tacty.co