Tactful.

Privacy Policy

Last updated: July 18, 2026

This Privacy Policy describes how Tactful ("Tactful," "we," "us," or "our") collects, uses, and shares information when you use the Tactful service at tactful.to (the "Service"). By using the Service, you agree to this Policy. If you do not agree, do not use the Service.

1. Who we are

Tactful is a company-intelligence and voice follow-up product for B2B sales teams. For privacy questions, contact us on Telegram: @benvspak.

2. Information we collect

Depending on how you use the Service, we may collect:

  • Account information: name, email address, profile image, and authentication data (magic-link or Google OAuth).
  • Workspace & CRM data: companies, leads, people, activity, and context notes you or your teammates store in Tactful.
  • Voice & call data: audio you capture or upload, meeting-bot recordings, transcripts, speaker labels, participants, AI-generated summaries, follow-ups, and related artifacts.
  • Calendar data: if you connect Google Calendar, event titles, times, attendees, and meeting URLs needed to link calls to leads.
  • Billing data: subscription and usage information processed by Stripe (we do not store full card numbers).
  • Technical data: session tokens, IP address, user agent, and audit-log events for security and product integrity.

3. How we use information

  • Provide, operate, and improve the Service (transcription, AI structuring, CRM sync).
  • Authenticate users, manage workspaces, and send transactional email (e.g. magic links).
  • Process payments and usage-based billing.
  • Maintain security, prevent abuse, and comply with law.
  • Respond to support and privacy requests.

We do not sell personal information.

4. AI and subprocessors

To deliver the Service we share data with trusted processors as needed to perform their functions, including:

  • Hosting and infrastructure (e.g. Render - Postgres, Redis, application hosting)
  • Authentication and Google APIs (Better Auth / Google OAuth & Calendar)
  • Transcription (Deepgram)
  • AI structuring (DeepSeek)
  • Meeting bots (Recall.ai)
  • Payments (Stripe)
  • Transactional email (Resend)

Call audio is treated as ephemeral where the product supports deletion after processing. Content you store (transcripts, notes, CRM records) remains until you or your workspace owner delete it, or until deletion is requested under Section 7.

5. Cookies and sessions

We use session cookies and similar technologies required to keep you signed in and to operate the Service. We do not use third-party advertising trackers.

6. Sharing

We share information only:

  • With subprocessors who help us run the Service (Section 4)
  • With teammates in your workspace, as configured by your organization
  • When you create a shared call link
  • If required by law, or to protect rights, safety, and the integrity of the Service
  • In connection with a merger, acquisition, or asset transfer, subject to this Policy

7. Your rights and GDPR tools

Depending on your location, you may have rights to access, correct, export, or delete personal data. Workspace owners can export or delete workspace data from Settings (GDPR export / delete). You may also contact @benvspak on Telegram to make a request. We may need to verify your identity and workspace role before acting.

8. Data retention

We retain account and workspace data for as long as your account is active or as needed to provide the Service. Ephemeral audio is deleted after processing when that pipeline step completes. Backups and logs may persist for a limited period for security and continuity.

9. Security

We use industry-standard measures appropriate to the nature of the data (encryption in transit, access controls, audit logging). No method of transmission or storage is perfectly secure. To report a vulnerability, see our security.txt or message @benvspak.

10. International transfers

We and our processors may process data in the United States and other countries. Where required, we rely on appropriate transfer mechanisms and contractual safeguards.

11. Children

The Service is for business use and is not directed to children under 16. We do not knowingly collect personal information from children.

12. Changes

We may update this Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. Continued use of the Service after changes means you accept the updated Policy.

13. Contact

Privacy questions: Telegram @benvspak. Also see our Terms of Service.

Privacy · Terms · Sign in