Tactword is operated by Nimbus Labs ("we," "us"), which is responsible for the personal data described here (the data controller). This page explains what we collect, why, the legal basis for using it, and how to have it deleted. Contact: support@tactword.com.
Text you submit
The text you paste is sent to our AI provider, Anthropic, only to produce the rewrite. We don't save it on our servers after the rewrite is returned, and we don't use it to train AI models. Anthropic processes it under its own commercial terms and privacy policy, which set how long it keeps API data.
Your email for free rewrites
Before your first free rewrite, we ask for your work email. We keep it so we can contact you about Tactword. We don't sell it or share it with anyone except the service providers listed below. You can ask us to stop contacting you or to delete it at any time.
Team information
For paid teams, we store the team owner's email (received from Paddle), teammates' emails, the date each person joined, how many rewrites each person made per month, the team's style notes, and the subscription details listed under Payments. We use this only to run the team plan.
Usage limit
To enforce the free daily limit, we keep a count of free rewrites per IP address. Each count is deleted automatically after 24 hours. To prevent abuse, we also count login and join attempts per IP address and per email address, and free-rewrite email submissions per IP address. These counts are stored as one-way hashes and deleted after one hour. One-time login links expire after 15 minutes, and a login session lasts up to one year or until you log out.
Payments
Payments are handled entirely by Paddle.com, our Merchant of Record. We never see or store card details. Paddle shares the buyer's email, the number of seats, the subscription status and next billing date, and the Paddle customer, subscription, and transaction IDs with us so we can activate and manage your team.
Cookies and browser storage
Logged-in team members get one secure, httpOnly cookie that keeps them logged in. Your browser also keeps the email you entered for free rewrites in local storage, so you don't have to type it again and it can be filled in at checkout. We don't use advertising or tracking cookies. We use Vercel Web Analytics, which counts page visits without cookies. On the checkout page, Paddle's checkout runs under Paddle's own privacy policy.
Service providers
- Vercel: hosting and cookieless analytics
- Upstash: database for usage counts, free-rewrite emails, team data, and login sessions
- Resend: delivers one-time login, join confirmation, and invitation emails
- Anthropic: provides the AI model that performs the rewrite
- Paddle: payments, invoices, and taxes
Legal basis
Where data protection laws such as the GDPR and UK GDPR apply, we rely on these legal bases:
- Performing our contract with you: producing rewrites, running team plans, logins, and the emails that make them work.
- Our legitimate interests: preventing abuse through usage limits and login-attempt counts, keeping the Service secure, measuring page visits without cookies, and contacting people who tried a free rewrite about Tactword. You can object to any of these at any time.
- Legal obligations: keeping payment and tax records, which Paddle handles as Merchant of Record.
Where your data is processed
Tactword is run from outside the European Economic Area and the United Kingdom, and our service providers process data in other countries, including the United States. When personal data from the EEA or UK is transferred to a country without an adequacy decision, it is protected by the safeguards our providers offer under their data processing terms, such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
How long we keep it and your choices
Team information and the email you gave for free rewrites stay until you ask us to delete them, except monthly rewrite counts, which are deleted automatically after about 13 months. You can ask us at any time to see, correct, delete, or export the information we hold about you, to restrict how we use it, or to object to its use, and we'll respond within 30 days. Write to support@tactword.com. If you're in the EEA or UK, you can also complain to your local data protection authority.
Changes
If we change this policy, we'll update this page and the date above.