Privacy Policy

1. Who is responsible for your data

The controller is Amplitude Ltd, Ireland. Privacy contact: amplitude.ie@gmail.com.

2. What we keep

Identification: phone or email, the name you choose, country, language and time zone.

Conversations: what you write and what Tact replies, in every channel. Voice notes are transcribed right away and the audio is discarded; only the text stays.

Memories: facts and preferences Tact keeps to help you later. You see and delete them in Account.

Connected accounts: only what you authorised (for example, calendar events), for as long as the connection exists.

Usage and billing: how many messages, which features, plan and payments. Technical security data, such as network address and device.

3. Why, and on what basis

Providing the service you asked for: contract.

Security, fraud prevention and usage limits: legitimate interest.

Billing and tax obligations: legal obligation.

Remembering and reaching out when it is worth it: part of the service, and you turn it off in Notices.

Marketing: only with your consent, which you can withdraw at any time.

4. Artificial intelligence

Replies are generated by artificial intelligence models from providers such as Anthropic and OpenAI.

We do not train or fine-tune models on your conversations, and our contracts with providers forbid them from using your data for training.

We analyse failures and metadata to improve the service, without personal content: only the kind of request, the steps, the tools, the outcome and the cost. Every change that comes out of this analysis goes through tests and the approval of a person on our team before it applies.

5. Who we share with

Processors working for us: Anthropic and OpenAI (models), Supabase through Lovable Cloud (database, European Union), Hetzner (voice and browser services, Germany), Twilio (SMS), Stripe (payments), Meta (WhatsApp) and Apple or Google when you use the app or connect one of their accounts.

Third parties you ask Tact to reach: shops, services and people it talks to on your behalf. They receive only what that action needs.

Authorities, when the law requires it. We never sell data.

6. Where the data lives

The database is in the European Union.

The artificial intelligence models may run in the United States, under standard contractual clauses and, where available, the Data Privacy Framework. You can turn that transfer off in Account; then we only use models that run in the European Union.

7. For how long

Raw channel events: 7 days. Conversation messages: 12 months. Memories: while they hold; one you ask to forget goes within 24 hours, an expired one 30 days later and a replaced one after 12 months. A WhatsApp sign-up started and not finished: 30 days.

Finished reminders, tasks and promises: 12 months. Closed follow-ups and monitors: 6 months. Step-by-step record of each request: 30 days; after that only a summary of what was decided remains, without your words. Security logs: 90 days.

Details of the actions Tact took for you (what was sent to the tool and what it returned): 24 months. Usage and cost of each call: 24 months; after that only the monthly total remains. The record that you asked to forget something: 24 months. Billing data: the period tax law requires.

Delete everything in Account removes your data within 30 days, except what the law requires us to keep.

8. Your rights

Access, correct, delete, take your data with you (portability), restrict or object to a use, and withdraw consent. The GDPR applies in the European Union and the LGPD in Brazil.

Ask in Account or at amplitude.ie@gmail.com. We answer within 30 days.

You can complain to the Data Protection Commission (Ireland) or the ANPD (Brazil).

9. Minors

Tact is for people aged 18 or older. If we find an account of a minor, we delete it.

10. Sensitive and health data

By default the account does not accept health data. If you enable that use in Account, the models and the region are restricted to what the law allows for that kind of data.

Avoid sending sensitive data about other people without their permission.

11. Security

Encryption in transit and at rest, secrets in a vault, approval by type of action and an audit log of what Tact does on your behalf.

No system is perfect. If an incident affects you, we tell you.

12. Cookies and changes

The website and the app use only what is needed for you to sign in and for the service to work.

When this policy changes in a relevant way, we tell you in the app or in the channel you use.