Privacy Policy

Effective: September 20, 2026 | Version: 2026.09.20

This Privacy Policy explains how Tactically Safe LLC collects, uses, discloses, and retains personal information in connection with TacSafe, https://tacsafe.app, and related business services.

Organization-managed accountsIf your employer or another organization provides your TacSafe account, that organization generally controls the workplace records and Customer Content in its workspace. Privacy requests concerning those records may need to be directed to the organization administrator.

1. Scope and roles

This Policy applies to information TacSafe handles as a business or controller for its own website, account administration, sales, support, security, and billing activities, and to information processed as a service provider or processor on behalf of Customers.

Where Customer determines why and how workplace records are processed, Customer is responsible for its own privacy notices and legal basis, and TacSafe processes that information under Customer instructions and the applicable agreement.

2. Information we collect

Category

Examples

Account and identity

Name, business email, organization, role, login identifiers, authentication and MFA information.

Workspace and personnel records

Credentials, training or evaluation records, employee or contractor profile information, incidents, comments, project assignments, photographs, and files submitted by Customer.

Safety and project content

Hazard-assessment images, project manuals, safety documents, SDS files, forms, reports, and related metadata.

Device and usage

IP address, browser or device type, timestamps, session and security logs, feature usage, diagnostic events.

Commercial and support

Subscription and billing status, transaction metadata, support communications, product feedback.

Cookies and similar technologies

Session identifiers and, if enabled, analytics or preference information.

3. How we use information

• Provide, operate, authenticate, secure, maintain, and support the Service.
• Process Customer instructions, including document processing, search, storage, AI-assisted analysis, reporting, and collaboration features.
• Administer subscriptions, payments, account limits, and customer support.
• Detect, investigate, prevent, and respond to security incidents, fraud, abuse, and violations of our policies.
• Maintain logs, backups, service reliability, and business records.
• Improve product functionality and usability using operational information and feedback, subject to contractual restrictions on Customer Content.
• Comply with law, enforce agreements, and protect legal rights.

4. AI processing

Some TacSafe features may use automated or AI-assisted processing to extract data, classify documents, search information, summarize content, or analyze images. AI Output may be inaccurate and is designed for human review. TacSafe does not intend AI-assisted features to make final employment, disciplinary, eligibility, medical, legal, or safety decisions for Customers.

If TacSafe uses a third-party AI provider to process Customer Content, the provider will be treated as a subprocessor where required and will be identified in the applicable Subprocessor List before production Customer Content is routed to that provider.

5. How we disclose information

• Service providers and subprocessors that provide hosting, database, authentication, storage, email, payments, security, support, analytics, or AI functionality under contractual restrictions.
• Customer administrators and authorized users within the Customer workspace, according to Customer-configured roles and permissions.
• Professional advisers, auditors, insurers, financing sources, or transaction participants subject to confidentiality obligations.
• Government authorities or other parties when required by law, legal process, or reasonably necessary to protect rights, safety, and security.
• A successor or acquiring entity in a merger, acquisition, financing, reorganization, or sale of all or part of the business, subject to applicable law.

TacSafe does not sell personal information for money. TacSafe does not use Customer workspace content for cross-context behavioral advertising.

6. Data retention

TacSafe retains information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, maintain security, and enforce agreements. Account and Customer Content retention is also governed by Customer instructions and the applicable contract.

When a Customer subscription is cancelled or terminated, the workspace may be placed in a restricted archive for 30 days and then scheduled for permanent deletion from production and primary storage, subject to legal holds and routine backup expiration. Certain billing, security, audit, and transaction records may be retained longer when required for legitimate business or legal purposes.

7. Security

TacSafe uses administrative, technical, and organizational safeguards designed to protect information, including access controls, tenant isolation controls, encryption in transit, provider-supported encryption at rest, private object storage, logging, least-privilege practices, and security testing. No method of transmission or storage is completely secure, and TacSafe does not guarantee absolute security.

8. Your privacy rights

Depending on where you live and the law that applies, you may have rights to request access, correction, deletion, portability, or information about processing; to opt out of certain sales, sharing, targeted advertising, or profiling; to limit certain uses of sensitive data; or to appeal a denied request. These rights may be subject to exceptions and verification requirements.

To submit a privacy request concerning information controlled by TacSafe, contact customer-service@tacsafe.app or call +1 (308) 870-7020. If your request concerns workplace records controlled by your employer or another Customer, we may direct the request to that Customer.

TacSafe will not discriminate against a person for exercising applicable privacy rights. Where legally required, TacSafe will recognize applicable browser-based opt-out preference signals for processing within its control.

9. California and other U.S. state disclosures

Applicable U.S. state privacy laws may require additional disclosures regarding categories of personal information, purposes of processing, recipients, retention, and consumer rights. The categories and purposes described in this Policy are intended to provide those disclosures where applicable. TacSafe does not knowingly sell personal information or share Customer workspace content for cross-context behavioral advertising.

9A. Nebraska Data Privacy Act disclosures

Tactically Safe LLC is organized under the laws of the State of Nebraska. Where the Nebraska Data Privacy Act (Neb. Rev. Stat. §§ 87-1101 to 87-1130) ("NDPA") applies to TacSafe as a controller with respect to personal data of Nebraska residents that TacSafe processes for its own business purposes (for example, website inquiries, account administration, sales, support, billing, and security), Nebraska residents may have rights to: (a) confirm whether TacSafe is processing their personal data and access that data; (b) correct inaccuracies; (c) delete personal data provided by or obtained about the consumer; (d) obtain a copy of personal data the consumer previously provided in a portable format; (e) opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer; and (f) appeal a refusal to take action on a request.

TacSafe does not knowingly sell personal data and does not share Customer workspace content for cross-context behavioral advertising. Where TacSafe processes Customer Content as a processor or service provider on behalf of a Customer organization, the Customer generally determines the purposes and means of that processing, and privacy requests concerning those workplace records should be directed to the Customer administrator. TacSafe will provide reasonable assistance to Customer controllers responding to verified NDPA requests as required by Applicable Data Protection Law and the Data Processing Addendum.

To exercise NDPA rights with respect to information controlled by TacSafe, email customer-service@tacsafe.app or call +1 (308) 870-7020 with the subject line "Nebraska Privacy Request." TacSafe will verify requests as permitted by law and will not discriminate against a consumer for exercising NDPA rights. The Nebraska Attorney General has exclusive authority to enforce the NDPA.

Applicability of the NDPA depends on statutory thresholds and exceptions (including small-business and certain excluded information categories). This section is a disclosure and does not expand TacSafe's obligations beyond applicable law.

10. Cookies

TacSafe uses cookies and similar technologies as described in the Cookie Notice. Essential technologies support authentication, security, preferences, and core functionality. Non-essential analytics or marketing technologies, if enabled, will be subject to applicable notice and consent requirements.

11. Children

TacSafe is a business service not directed to children under 18, and we do not knowingly collect personal information from children through self-directed use of the Service.

12. International users

If personal data is transferred across national borders, TacSafe will use contractual or other lawful transfer mechanisms when required by applicable law. Enterprise Customers may request a Data Processing Addendum addressing applicable international-transfer requirements.

13. Changes to this Policy

We may update this Policy to reflect changes in the Service, law, or our practices. The effective date above shows the latest revision. Material changes will be communicated when required by law or contract.

14. Contact

Customer service: customer-service@tacsafe.app or +1 (308) 870-7020. Privacy and Security reports: Security@tacsafe.app.

15. SMS and mobile messaging

When your organization uses TacSafe SMS reminders, we may process your mobile phone number and related account or personnel identifiers to send transactional text messages about certification and training expiration dates, compliance reminders, and other account or service notices you or your organization have enabled. Message content is limited to operational notices; TacSafe does not use SMS to send third-party marketing or promotional campaigns on behalf of unrelated advertisers.

Mobile contact information and SMS delivery metadata are used only to provide the messaging program, troubleshoot delivery, comply with law, and protect the Service. TacSafe does not sell mobile phone numbers or share mobile information with third parties for their independent marketing or promotional purposes. Messaging is delivered through telecommunications carriers and authorized service providers (such as Twilio) solely to operate the program under contract.

Program terms, opt-out instructions, and carrier limitations are described in the TacSafe SMS Messaging Terms (/legal/sms-terms). For questions about SMS, contact customer-service@tacsafe.app or call +1 (308) 870-7020.