Privacy Policy

Effective August 9, 2026

Tactivus LLC provides Connect, a business service that lets authorized AI apps perform workflows with accounting platforms that customers connect. This policy explains the information we process, why we process it, and the choices available to you.

Scope and roles

This policy applies to the Connect website, product, support, and billing activities. We generally determine how we use account, billing, website, security, and business-operations information. When we process personal information from a customer’s connected accounting records, we generally act for that customer to provide Connect.

Connect is currently offered to businesses and users in the United States. This does not mean that all processing or service-provider infrastructure is located only in the United States.

Information we process

Accounts and workspaces

We process names, email addresses, workspace and firm names, authentication and organization identifiers, member roles, invitations, access grants, and related activity needed to operate shared workspaces.

Connected accounting information

We process accounting-platform and company identifiers, display names, authorization scopes and encrypted credentials, and the data needed for each authorized request. Depending on the platform and request, this can include settings, customers, vendors, employees, accounts, transactions, reports, attachments, contact details, and other available records.

Connect does not maintain a replicated copy of a customer’s entire ledger. Accounting-platform requests and results are processed to complete requested workflows and are not copied into the product audit trail. Temporary execution state can contain a script, proposed changes, bounded results, and errors. That state normally expires after one hour of inactivity and has a 24-hour maximum lifetime, subject to brief delay for in-flight work or cleanup retry.

Connected apps, activity, and security

We process connected-app and installation identifiers, workspace and member attribution, request and tool-call identifiers, operation names, read/write classification, timing, outcomes, error categories, approval status, browser and device details, and security signals.

Dedicated activity records do not contain general chat prompts, accounting-platform requests or results, transaction payloads, report contents, balances, or OAuth tokens. They can contain confidential operational metadata, including internal identifiers, the connected company identifier for a platform-scoped event, operation names, timestamps, approval state, outcomes, and workspace names for workspace creation and rename events.

Billing, support, and analytics

We process subscription and billing identifiers, plan and seat information, limited payment-event metadata, support messages and attachments, and information a customer chooses to provide. Stripe processes card details; Connect does not store full card numbers in its application database.

If a visitor opts in, Google Analytics processes public marketing-page, referrer, browser and device, approximate-location, and online-identifier data. Google Analytics does not run on the product dashboard or service endpoints. Advertising features, user-provided data collection, and personalization remain disabled.

Cloudflare also provides cookieless performance and reliability telemetry for the hosted service. We use that limited telemetry to operate, secure, and improve service performance, not for advertising.

How we use information

• Provide requested accounting workflows and return authorized results.
• Authenticate users and connected apps and enforce workspace and company access.
• Present, approve, and execute supported accounting changes.
• Operate subscriptions, support, security, troubleshooting, and service monitoring.
• Maintain customer-visible activity evidence and investigate misuse or incidents.
• Comply with law and enforce our agreements.
• Measure public marketing performance after a visitor opts in.

We do not use customer accounting data to train a Tactivus LLC AI model, sell personal information, build advertising profiles, or market one customer’s data to another customer.

Connected AI apps

The customer chooses the connected AI app. Connect receives an authorized request, calls the connected accounting platform, and returns the requested result. The selected provider’s contract, privacy policy, account type, region, retention, and model settings govern what that provider does after receiving the result. Customers should use an appropriate business or enterprise agreement.

Who receives information

We use service providers for hosting, security, authentication, billing, support email, and optional marketing analytics. Our current providers and their purposes are listed on the Service providers page. A customer’s connected accounting platform and AI app receive information at the customer’s direction and apply their own terms. We may also disclose information to professional advisers or authorities when reasonably necessary for legal, security, or corporate purposes.

Retention and deletion

• Accounting-platform requests and results are normally transient and are not stored in the product audit trail.
• Encrypted accounting-platform credentials remain only while needed for an active connection and are revoked or deleted when that connection is removed.
• Customer-visible activity metadata is retained while needed to provide useful history, security, support, and the service.
• Workspace deletion ends access and starts provider and local cleanup. Limited activity and other records can remain under these retention criteria and exceptions.
• Routine Cloudflare operational logs use the current seven-day service window.
• Support communications are normally retained for about 12 months after the matter is resolved.
• Optional Google Analytics user and event data follows the retention setting configured in Google Analytics.
• Limited billing and tax records may be retained for up to seven years where needed for legal, tax, accounting, or dispute purposes.

Account, provider, activity, support, billing, and security records follow the periods and criteria above. Some activity records may be held in archive storage for service history, security, support, and integrity. Deletion can take longer where information is subject to a security investigation, dispute, legal obligation, or other valid exception. Residual backup copies may remain until normal backup rotation and are not used for ordinary product operations. Disconnecting or deleting Connect does not delete records in a connected accounting platform. Customers remain responsible for retaining their accounting records in that platform or another system; Connect’s activity history is not a statutory books-and-records archive.

Your choices and requests

Authorized users can manage workspace access, revoke a connected app, disconnect an accounting platform, and request workspace deletion where the product allows. Visitors can change optional analytics through Cookie settings in the footer.

To request access, correction, deletion, or a copy of personal information where applicable, emailsupport@tactivus.com. We may verify your identity or authority before acting. If we process the relevant information for a customer, we may direct the request to that customer and help the customer respond. We may retain information where an applicable exception permits or requires it.

Security, processing locations, and children

We use administrative, technical, and organizational safeguards designed to protect information, including encryption in transit, application-level encryption for accounting-platform credentials and selected sensitive state, workspace and company authorization, write controls, and audit integrity checks. No service is perfectly secure.

Tactivus LLC and its providers may process information in the United States and other locations where they operate. Connect is a business service, is intended for users who are at least 18, and is not directed to children.

Changes and contact

We may update this policy as Connect or applicable requirements change. We will post the updated effective date and provide additional notice when required by law or contract.

Questions can be sent to support@tactivus.com.