Privacy Policy

1. Introduction

Fountech OS Limited ("Fountech", "we", "us", or "our") operates TACTIC, an AI-powered deep tech venture assessment platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at tactic.science (the "Service").

We are committed to protecting your privacy and handling your data in an open and transparent manner. By using TACTIC, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address and password when you register, with the referral code and campaign of the link you arrived by, if any; the name, email address and profile picture a Google, LinkedIn or GitHub account shares when you sign in with it; and the name and organisation name you add on the settings page
• Venture Data: Documents, questionnaire responses, and text you submit for assessment
• Payment Information: Processed securely through our payment provider; we do not store full payment card details
• Communications: Messages you send through our contact forms or support channels
• Feedback: What you send through our feedback page: the kind of feedback, a title and description, any steps you add, an optional screenshot and an optional email address; with it we record the page you came from, the version of TACTIC, your browser and device, and your account if you are signed in

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, assessment history, and interaction patterns
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and referring URLs

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the TACTIC platform
• Process venture assessments using our AI-powered methodology
• Process payments and manage your account
• Send transactional emails (assessment completion, receipts, account notifications)
• Send product update emails about what has changed in TACTIC, at most once a release, to registered users who have not switched them off; every one carries a one-click unsubscribe, and you can switch them off under Email Notifications in your settings
• Read and act on feedback you send us; an email address you leave with it is used only to tell you when your point is dealt with, and feedback is never used for marketing
• Respond to your inquiries and provide customer support
• Analyse usage patterns to improve our service
• Detect, prevent, and address technical issues or fraudulent activity
• Comply with legal obligations

4. AI Processing and Venture Data

TACTIC uses artificial intelligence to analyse venture submissions. When you submit a venture for assessment:

• Your submission is processed by a language model from our model provider to generate the assessment, under the provider terms described on our Trust page
• Venture data is stored securely and associated with your account
• We do not use your venture submissions to train any model
• An assessment you run is private to your account until you put it into a team or share it by a link, unless it was paid from a team's credits, which puts it in that team from the start. Work in a team is readable by your team's admins and by the members an admin has given access to the team's shared work or to that assessment, and by nobody else outside TACTIC; a member who joins later does not see it until an admin grants that access
• TACTIC's own administrators can see each assessment's venture name, industry, sector, file name, tier, status, scores and dates, the failure reason recorded when a run fails, and whether it is marked as one of TACTIC's own test runs; and each account's name, email address, organisation, role, credit balance, assessment limit, beta access, whether its email address is verified, the date it was opened, its last sign-in and whether it is deactivated, with the credits it has spent and the adjustments made to its balance, its teams with their members, pending invitations and seat plans, its credit purchases however paid and their refunds, any account terms, its invoices and invoice requests with their billing contact, and its daily usage, to run and support the service
• What each member of a team can do is set by the role an admin gives them: Admin manages members and the team's work, Member runs assessments and manages their own except those paid from the team's credits, Viewer reads without deleting or sharing outside the team. Assessments are paid for from that member's own credits, or from the team's credits where the team holds some.
• A link you generate to an assessment opens it only for someone signed in to TACTIC

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third parties who assist in operating our platform (payment processing, hosting and file storage, AI processing, email delivery, error monitoring, rate limiting and site analytics)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorise sharing

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• TLS 1.2 or better in transit, with TLS 1.3 negotiated by any current browser
• Our hosting and database providers encrypt data at rest with AES-256. That is their published statement about their platforms, not an arrangement we negotiated, and we cannot demonstrate it ourselves.
• Secure password hashing using bcrypt
• Hosting on infrastructure whose provider holds SOC 2. TACTIC is not itself certified.

7. Data Retention

We retain your account information and assessment data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes. Feedback is kept until you ask us to delete it or your account is deleted, and goes with your account; feedback sent without signing in is deleted on request to privacy@tactic.science.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request your data in a portable format
• Objection: Object to certain processing activities

To exercise these rights, please contact us at privacy@tactic.science.

9. International Data Transfers

Your data may be processed in countries outside your country of residence, including the United States and European Union. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.

10. Cookies and Tracking

We use essential cookies to maintain your session and remember your preferences. We do not use third-party advertising cookies. With your consent, given in the cookie banner, we may also set analytics cookies to understand how the site is used; if you choose Essential only, they are not set. You can control cookie settings through your browser preferences.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of TACTIC after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: