Privacy Policy

1. Overview

This Privacy Policy describes how Tactico ("we," "our," or "us") collects, uses, and protects information when you use our website at tactico-three.vercel.app and our sports tactical planning platform (collectively, the "Service").

By using the Service, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with our practices, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information you directly provide to us:

Data Type	Examples	Purpose
Account Information	Email address, password, display name	Account creation and authentication
Profile Information	Name, profile photo (if using Google Sign-In)	Personalization
Payment Information	Credit card details, billing address	Subscription processing (handled by Stripe)
User Content	Tactical diagrams, formations, saved plans	Service functionality
Communications	Support requests, feedback, emails	Customer support

2.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Device Information: Browser type, operating system, device type
• Usage Data: Pages visited, features used, time spent, click patterns
• Log Data: IP address, access times, referring URLs
• Location Data: General location based on IP address (country/region)

2.3 Information from Third Parties

We may receive information from third-party services:

• Google Sign-In: Name, email, profile photo (if you choose to sign in with Google)
• Stripe: Subscription status, payment confirmation (not full card details)

3. How We Use Your Information

We use your information for the following purposes:

3.1 Provide and Improve the Service

• Create and manage your account
• Process subscriptions and payments
• Save and sync your tactical plans
• Provide customer support
• Analyze usage to improve features
• Fix bugs and technical issues

3.2 Communications

• Send account-related notifications (password resets, subscription updates)
• Respond to your inquiries and requests
• Send product updates and announcements (you can opt out)

3.3 Security and Legal

• Detect and prevent fraud and abuse
• Enforce our Terms of Service
• Comply with legal obligations
• Protect the rights and safety of users

4. How We Share Information

We do not sell your personal information. We may share information in the following circumstances:

4.1 Service Providers

We share information with third-party vendors who help us operate the Service:

• Firebase/Google: Authentication, database, hosting
• Stripe: Payment processing
• Vercel: Website hosting

These providers are contractually obligated to protect your information and use it only to provide services to us.

4.2 Legal Requirements

We may disclose information if required by law or if we believe disclosure is necessary to:

• Comply with legal process or government requests
• Protect our rights, property, or safety
• Protect users or the public from harm
• Detect and prevent fraud

4.3 Business Transfers

If Tactico is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your information.

4.4 With Your Consent

We may share information with third parties when you give us explicit consent to do so.

5. Third-Party Services

We use the following third-party services to operate Tactico:

5.1 Firebase (Google)

We use Firebase for:

• User authentication (Firebase Authentication)
• Data storage (Cloud Firestore)

Firebase Privacy Policy: firebase.google.com/support/privacy

5.2 Stripe

We use Stripe to process payments. When you subscribe to Tactico Pro, your payment information is sent directly to Stripe. We do not store your full credit card number.

Stripe Privacy Policy: stripe.com/privacy

5.3 Vercel

Our website is hosted on Vercel. Vercel may collect basic access logs.

Vercel Privacy Policy: vercel.com/legal/privacy-policy

6. Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. We use cookies and similar technologies to operate and improve the Service.

6.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential	Required for authentication and basic functionality	Session / 1 year
Functional	Remember your preferences (sport, colors)	1 year
Analytics	Understand how users interact with the Service	2 years

6.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect Service functionality. Most browsers allow you to:

• View what cookies are stored
• Delete individual or all cookies
• Block third-party cookies
• Block cookies from specific sites

7. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest
• Access Controls: Limited employee access to user data
• Secure Authentication: Password hashing, optional two-factor authentication via Google
• Regular Monitoring: Security monitoring and incident response procedures
• Secure Payments: Payment processing handled by PCI-compliant Stripe

While we take security seriously, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

8. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this policy:

• Account Data: Retained while your account is active and for up to 30 days after deletion request
• User Content: Retained while your account is active; deleted upon account deletion
• Payment Records: Retained for 7 years for tax and legal compliance
• Usage Data: Aggregated data may be retained indefinitely for analytics

9. Your Rights & Choices

You have the following rights regarding your information:

9.1 Access and Portability

You can access your account information and User Content through your Profile page. You may request a copy of your data by contacting us.

9.2 Correction

You can update your account information through your Profile settings or by contacting us.

9.3 Deletion

You can request deletion of your account and associated data by contacting us at [email protected]. Note that:

• Some information may be retained for legal compliance
• Deletion may take up to 30 days to process
• Backups may retain data for a limited period

9.4 Opt-Out

You can opt out of:

• Marketing emails: Click "unsubscribe" in any marketing email
• Cookies: Adjust your browser settings

9.5 Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We may need to verify your identity before processing requests.

10. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have collected information from a child under 13, please contact us immediately at [email protected].

If we learn that we have collected personal information from a child under 13, we will delete that information promptly.

11. International Users

Tactico is operated from the United States. If you are located outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States where our servers are located.

By using the Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

11.1 EU/EEA Users (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing includes: consent, contract performance, legitimate interests, and legal obligations.

12. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

12.1 Right to Know

You have the right to request information about:

• Categories of personal information we collect
• Sources of personal information
• Purposes for collection
• Categories of third parties with whom we share information
• Specific pieces of personal information we hold about you

12.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions.

12.3 Right to Opt-Out of Sale

We do not sell personal information as defined by the CCPA.

12.4 Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

12.5 Submitting Requests

California residents can submit requests by emailing [email protected] with the subject line "CCPA Request."

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last Updated" date at the top of this page
• For material changes, we will notify you via email or a prominent notice on the Service
• Your continued use of the Service after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Contact Form: tactico-three.vercel.app/contact

We will respond to your inquiry within 30 days.