سياسة الخصوصية

This Privacy Policy explains how Noiseless Capital LLC (“Tact”, “we”, “us”) collects, uses, shares and protects information when businesses use Tact to manage comments and messages on their Instagram and Facebook accounts, and when people interact with those accounts. It also explains the choices you have, including how to delete your data.

Noiseless Capital LLC is a Wyoming limited liability company. It runs Tact and the website tactreply.com. One person runs the company.

1. Who this policy covers

• Customers: businesses that create a Tact account and connect their Facebook Page and/or Instagram professional account.
• Commenters: people who comment on, or message, a Customer’s ads and posts. Tact processes this data on the Customer’s behalf, as their service provider (data processor). The Customer is responsible for its own customer relationship.
• Visitors: people who use our website, including the public demo.

2. Information we collect

From Meta, when a Customer connects their accounts

• Facebook Page ID and name, Instagram professional account ID and username.
• Access tokens that Meta issues to us for those accounts. We store them encrypted (AES-256-GCM) and never display them.
• Comments on the Customer’s posts and ads: comment ID, text, time, the post or ad it belongs to, and the commenter’s Meta-scoped ID and public name or username.
• Messages we send on the Customer’s behalf (private replies), and their delivery status.

From Customers

• Account details: name, email address, business name and website. Your password is stored only as a one-way hash (scrypt) that cannot be turned back into the password. If you sign in with Google or Facebook, we store the account ID they give us.
• Store information: product titles, prices, availability, images and public policy pages (shipping, returns, FAQ) read from the website the Customer gives us.
• Settings: tone of voice, languages, automation switches and “never say” rules.

From Visitors

• Text you type into the public demo and any store URL you enter. The demo does not store this text.
• Basic technical data needed to run and secure the site (IP address, browser type), and a cookie that remembers your language choice.

3. How we use information, and why we are allowed to

• To run the Customer’s account: create the account, connect Pages and Instagram accounts, show the dashboard, review queue and reports. Legal basis: our contract with the Customer.
• To handle comments for the Customer: classify comments (for example buying intent, spam or complaint), detect their language, draft and, when the Customer has turned automation on, publish public replies, hide spam or abusive comments, and send one private reply with product information to a commenter who asked about buying. Here we act for the Customer. The Customer decides why this data is used and needs its own legal basis for it (for example its legitimate interest in answering people who comment on its ads).
• To keep Tact secure and fair: prevent abuse, fix problems, and check that each shop gets only one free trial. Legal basis: our legitimate interest in a safe service and in stopping repeat free trials.
• To meet legal obligations, for example answering lawful requests and keeping records the law requires. Legal basis: legal obligation.

We do not sell personal information, use Meta Platform Data for advertising or profiling unrelated to the Customer’s own account, or use comment content to build marketing lists. We use Meta Platform Data only as allowed by the Meta Platform Terms and Developer Policies.

4. AI processing and automatic decisions

To understand comments and draft replies, comment text and the Customer’s store information are sent to our AI provider, Anthropic (Claude models), which processes it on our behalf under contract. Under its commercial terms, Anthropic does not use this data to train its models.

Spam hiding and buying-intent detection happen automatically. They do not have any legal or similarly significant effect on commenters. A hidden comment is not deleted, and the Customer can unhide it, or undo a reply, at any time from the dashboard.

5. Who helps us run Tact (subprocessors)

• Vercel Inc. (United States): hosts the website and the app. Your data currently runs and is held on Vercel’s servers.
• Anthropic PBC (United States): AI that reads comments and writes replies.
• Meta Platforms: the platform you connect. We use its Graph API to read comments, publish replies, hide comments and send private replies, as the Customer instructs.
• A database provider: we plan to store data with a database provider. We will name it here before we store your data with them.

If you choose “Continue with Google”, Google confirms who you are and gives us your account ID and email. We also share information when required by law, or to protect the rights, safety and security of users and the public, and, if Tact is merged or sold, with the new owner under this policy’s protections.

6. Retention

• Comment and message records are kept while the Customer’s account is active, so the Customer can review them. We keep only the latest 500 comments for each shop. Older ones are deleted automatically.
• When a Customer deletes their account in the app, we delete its access tokens, comments, messages, store data and settings right away.
• When a Customer disconnects a Facebook profile, or removes Tact from their Facebook settings, we delete that profile’s access tokens right away.
• Deletion requests by email are completed as soon as practical, and at most within 30 days (see section 9).
• To give each shop only one free trial, we keep a one-way fingerprint (a salted hash) of the Facebook account, Pages, Instagram accounts, website and WhatsApp number used for a trial, also after deletion. It cannot be turned back into the original information and is used only to prevent repeat free trials.

7. Security

Data is encrypted in transit (TLS) and access tokens are encrypted at rest. Webhook calls from Meta are verified with a cryptographic signature before we process them. Only the person who runs Tact can access production data, and only to run and support the service.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, and to object to or restrict certain processing. This includes rights under the EU General Data Protection Regulation (GDPR) and French law in France, Moroccan Law No. 09-08, Algerian Law No. 18-07, Saudi Arabia's Personal Data Protection Law, the UAE's Federal Decree-Law No. 45 of 2021, and the data protection laws of Qatar, Bahrain, Kuwait and Oman. Commenters can also contact the business whose account they interacted with. To exercise a right, email support@tactreply.com. We answer within 30 days.

If you are in the European Union, you can also complain to your data protection authority. In France, this is the CNIL (cnil.fr). In Morocco, it is the CNDP.

9. Deleting your data

You can ask us to delete your data at any time. Full instructions for commenters and for businesses are on our Data deletion page.

10. International transfers

We and our providers process data in the United States, which may be outside your country. Where required, we rely on safeguards such as Standard Contractual Clauses.

11. Children

Tact is a business tool and is not directed at children under 16. We do not knowingly collect their information.

12. Changes

We will post changes on this page and update the date above. If a change is significant, we will tell Customers by email or in the app before it takes effect.

13. Contact

Noiseless Capital LLC
30 N Gould St Ste R, Sheridan, WY 82801, USA
support@tactreply.com