Privacy Policy

Tactive is a product of Adapter Labs LLC, a Texas limited liability company (“Adapter Labs”, “we”, “us” or “our”). This policy covers the personal information we collect when you visit tactive.io, book a call with us, use the Tactive app at app.tactive.io, or use the automation services we provide (together, the “Service”). It explains what we do with that information.

If you have a question about this policy, email legal@tactive.io.

The short version

• We collect what we need to build, watch and fix your automations, and to run our business.
• We don’t sell your personal information, and we don’t use it for targeted advertising.
• We encrypt the logins and API keys you share with us, and we only use them for the work you’ve asked for.
• The data in your automations belongs to you. We only touch it to build, watch and fix them.
• You can ask to see, correct or delete your information at any time.

What we collect

Information you give us

• Contact details: your name, work email, phone number and company. You give us these when you book a call, email us or sign up.
• Account details: your name, email address and profile photo, your company’s name and website, and which automation platforms you use.
• Access to your tools: the logins, API keys and account addresses for Zapier or n8n, and for the other apps your automations connect to, such as your CRM. We encrypt saved logins and keys before we store them.
• Your work with us: the requests you send us, the notes and files you add in the app, your messages, and what you tell us on calls.
• Billing details: your billing contact and address. If you pay by card, your card details go straight to our payment processor. We don’t store them.

Information from your automation platforms

To watch your automations, we read your Zapier or n8n account. This includes each automation’s name, the apps it connects to, and the status and history of its runs. When we fix a failed run, we may see the data inside it, which can include personal information about your own customers. See Data in your automations.

Information collected automatically

• On tactive.io: We use PostHog to understand how visitors find and use the site. It records the pages you visit and what you click, along with your browser, device and rough location, and sets a cookie so it can recognize you when you come back. We don’t use advertising cookies. Our host, Cloudflare, logs each request, including your IP address, browser and the page you asked for, to keep the site running and secure. The calendar on our booking page comes from Cal.com, which may set its own cookies. If a page breaks, Sentry reports the error to us, with your browser and the page’s address. It leaves out anything the address carries from a form, like your email.
• In the app: Clerk’s cookies keep you signed in. PostHog records how the app is used and links it to your account. It uses the same cookie as on tactive.io, so your earlier visits to the site are linked to your account too. Sentry reports errors to us, with your account’s ID and a replay of the screen in the moments before the error, in which every word and image is hidden. Our error reports leave out what you type into forms. The app’s fonts load from Google Fonts, so Google receives your IP address. Your choice of light or dark theme is saved in your browser.

How we use it

We use personal information to:

• Provide the Service. That means building, watching, fixing and improving your automations, sending alerts by Slack or email, and preparing your monthly report.
• Talk with you. We reply to your messages, hold calls and send notices about the Service.
• Bill you and keep business records.
• Keep the Service secure, prevent abuse and fix bugs.
• Improve the Service, using how it’s used and what you tell us.
• Meet our legal obligations and enforce our Terms of Service.

If we email you about Tactive, every marketing email lets you unsubscribe.

If you’re in the European Economic Area or the United Kingdom, we rely on these legal bases: we need the information to perform our contract with you; it serves our legitimate interests in running, securing and improving the Service; the law requires it; or you’ve given us your consent.

Data in your automations

Your automations move your business’s data, including information about your customers. You control that data, and we handle it on your behalf (as your “service provider” or “processor”). We access it only to provide the Service as you instruct us. We don’t use it for anything else, and we don’t sell it.

You’re responsible for having the right to collect that data and to give us access to it. If you need a data processing agreement, email legal@tactive.io.

Who we share it with

We don’t sell personal information, and we don’t share it for cross-context behavioral advertising. We share it only:

• With the service providers that help us run Tactive (see below). They can only use it to provide their services to us.
• With the platforms and apps you’ve connected, when we work in them for you.
• When the law requires it, or to protect the rights, property or safety of our customers, the public or Adapter Labs.
• With a buyer or successor, if Adapter Labs is part of a merger, acquisition or sale of assets. This policy would still protect your information.
• With anyone else you ask us to share it with.

These are our main service providers:

Provider	What we use it for
Cloudflare	Hosting our website, app and API
Neon	Our database
Clerk	Sign-in and accounts in the app
Cal.com	Booking calls
PostHog	Understanding how our website and app are used
Sentry	Reporting errors and slow pages
Google	Serving the fonts in our app

We also use providers to send email and take payments.

How long we keep it

• Your account and your work: for as long as you’re a customer. After your cancellation takes effect, we delete it within 90 days. We don’t delete what we hand over to you or what the law requires us to keep.
• Saved logins and API keys: deleted when your cancellation takes effect, or sooner if you ask.
• Billing records: for as long as tax and accounting laws require.
• Bookings and emails: for as long as we need them to work with you.
• Logs and error reports: for a limited time, then deleted by our providers.

How we protect it

• Everything travels over encrypted connections (HTTPS). We encrypt saved logins and API keys with AES-256 and keep the key separate from the database.
• Only the people on our team who need your information to do the work can access it.
• Where your platform allows it, we ask you to invite our team account instead of sharing your password, so you can remove our access at any time.

No system is perfectly secure. If a breach affects your information, we’ll tell you as the law requires.

Your rights and choices

Wherever you live, you can ask us to:

• Give you a copy of your personal information
• Correct it
• Delete it
• Stop sending you marketing emails

Depending on where you live, such as the EEA, the UK, California or another US state with a privacy law, you may have more rights. These include the right to object to or restrict how we use your information, to take it elsewhere, to withdraw your consent, and to appeal our decision on your request. You can also complain to your local data protection authority. We won’t treat you differently for using any of these rights.

To make a request, email legal@tactive.io. We’ll confirm your identity, then reply within 30 days, or sooner if the law requires it. Someone you authorize can make a request for you.

If your information is in an automation we run for one of our customers, please contact that business. We’ll help them respond.

You can block cookies in your browser. The site and app work without PostHog’s cookie, but you’ll need Clerk’s cookies to sign in to the app.

International transfers

We’re based in the United States, and our providers store information there. If you’re outside the US, your information will be transferred to the US and processed there. Where the law requires it, we use safeguards such as the European Commission’s Standard Contractual Clauses.

Children

The Service is for businesses. It isn’t meant for anyone under 16, and we don’t knowingly collect their information. If you think a child has given us personal information, email us and we’ll delete it.

Other websites

Zapier, n8n, Cal.com and the other services you use with Tactive have their own privacy policies. This policy doesn’t cover them.

Changes to this policy

When we change this policy, we’ll update the date at the top. If a change is significant, we’ll tell customers by email or in the app before it takes effect.

Contact us

Adapter Labs LLC, doing business as Tactive
legal@tactive.io