1. Information We Collect

Account Data: Email address and authentication credentials when you create an account.

Usage Data: Simulation inputs, queries, and interaction patterns with the Service to improve functionality and model accuracy.

Technical Data: IP address, browser type, device information, and access timestamps collected automatically through standard web server logs.

Payment Data: Billing information processed through our third-party payment provider. We do not store full payment card details on our servers.

2. How We Use Your Information

To provide, maintain, and improve the Service.
To process your simulations and deliver results.
To communicate with you about your account, updates, and relevant product information.
To detect, prevent, and address technical issues, fraud, or security threats.
To aggregate and anonymize data for model improvement and research purposes.

3. Data Sharing

We do not sell your personal information. We may share data only in these circumstances:

Service Providers: Trusted third parties that assist in operating the Service (hosting, analytics, payment processing), bound by confidentiality obligations.
Legal Requirements: When required by law, regulation, legal process, or governmental request.
Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users.
Aggregated Data: We may share anonymized, aggregated analytics that cannot identify you.

4. Data Retention

We retain your account data for as long as your account is active. Simulation data is retained for up to 24 months for model improvement purposes. You may request deletion of your data at any time by contacting us at info@tacitus.me.

5. Data Security

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security audits. No system is perfectly secure; we cannot guarantee absolute security but commit to promptly notifying affected users in the event of a breach.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data.
Object to or restrict processing of your data.
Request data portability.
Withdraw consent at any time (where processing is based on consent).

To exercise these rights, contact info@tacitus.me.

7. Cookies and Tracking

We use essential cookies for authentication and session management. We may use analytics cookies to understand how the Service is used. You can control cookie preferences through your browser settings.

8. International Transfers

Your data may be processed in the United States. By using the Service, you consent to the transfer of your data to the US, where data protection laws may differ from your jurisdiction.

9. Children

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy with a revised date. Continued use after changes constitutes acceptance.

11. Contact

For privacy-related inquiries, contact us at info@tacitus.me.