Privacy notice

Tacit is built and operated by Quarterback AI's innovation lab in the European Union. We process personal data lawfully under the GDPR. Your local Chronicle, embeddings, and graph stay on your machine — we never see them.

Data we hold

• Account: email, hashed password, display name, audit trail.
• Subscription: tier, billing status (via Stripe, EU).
• Devices: fingerprint, label, last heartbeat — for entitlement.
• Consent log: every grant/withdrawal with timestamp and policy version.
• First-party usage events (only with consent).

Where it lives

All ecommerce data is EU-resident. Local AI processing — Chronicle, Loom, Pyramid, embeddings, agents — stays on your machine.

Your rights

Access, rectification, erasure, portability, restriction, objection — all self-service in your dashboard, fulfilled within 30 days.

Sub-processors

• Stripe (EU) — billing
• Resend (EU sending region) — transactional email
• Quarterback AI ingest — pseudonymized analytics (you control the key)

Contact

privacy@tacit.example · DPO available on request.