Privacy Policy

1. What we collect

• Account data — your name, email, and password (stored hashed) when you sign up. Clients may provide just a name to leave feedback.
• Content you submit — the files, images, links, comments, and replies you or your clients add to a project.
• Sign-off evidence — when a client approves work, and with disclosure to them, we record their typed signature, consent, the time, IP address, and device details (browser, platform, screen, timezone, language), plus cryptographic fingerprints of the approved files and conversation.
• Usage & technical data — basic logs needed to operate and secure the service.
• Billing data — handled by our payment provider (see below); we store only your plan status and a payment-provider customer reference, never your full card details.

2. How we use it

• to provide the service — host and display your work, deliver review links, run notifications, and generate sign-off certificates;
• to authenticate you and keep accounts secure;
• to process subscriptions and support requests; and
• to maintain, improve, and troubleshoot the service.

3. Processors we rely on

We share data with a small set of service providers, only as needed to run Tack:

• Supabase — authentication, database, and file storage (hosting your account and content).
• Paddle.com Market Ltd (Paddle) — our merchant of record for payments; Paddle processes your payment and handles invoicing and tax. Your card details go to Paddle, not to us.
• Anthropic — only if you use the optional AI Review feature, the relevant project images and context you provide are sent to Anthropic’s API to generate the review.

4. Cookies

We use strictly necessary cookies to keep you signed in and secure. We do not use advertising cookies. Payment pages may set cookies required by our payment provider.

5. Data retention

We keep your data while your account is active. You can delete projects and content at any time; sign-off certificates and their evidence are kept as long as needed to preserve the integrity of an approval record, or until you request deletion. Contact us to close your account and delete your personal data.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, email us and we’ll respond within a reasonable time.

7. Security

Data is encrypted in transit (HTTPS) and at rest. Uploaded files are stored privately and served only through short-lived signed links. See our sign-off page for more on how we protect approval records.

8. Contact

Privacy questions or requests? Email support@usertack.com.