Privacy Policy

1. About This Policy

This Privacy Policy explains how TACITUS (“we”, “us”, “our”) collects, uses, and protects information in connection with the PRAXIS platform. PRAXIS is currently an experimental demo product. All features, data practices, and security measures described in this policy represent our current intentions and may change substantially as the product develops.

By using PRAXIS, you acknowledge and accept the experimental nature of this platform and the limitations described in this policy.

2. Who We Are

TACITUS is the company behind PRAXIS. We can be reached at hello@tacitus.me. We do not yet have a formally registered EU data controller designation. GDPR compliance is planned as we scale — see Section 7.

3. What Data We Collect

In demo mode, we may collect:

• Contact information: Email addresses you voluntarily provide when contacting us or joining the mailing list.
• Usage data: Anonymised interactions with the platform interface (pages visited, features used) to understand how practitioners use the tool.
• Feedback: Any written feedback you send to hello@tacitus.me or submit via in-product forms.
• Technical data: Browser type, IP address, and device information collected automatically via standard web server logs and analytics tools.

Demo Warning: Please do not enter classified, confidential, or personally sensitive information into PRAXIS during the demo phase. The platform is not yet certified for handling sensitive data.

4. How We Use Your Data

We use collected data to:

• Respond to feedback and enquiries sent to hello@tacitus.me
• Understand how practitioners interact with the demo and improve the platform
• Send product updates to those who join our mailing list (you can unsubscribe at any time)
• Maintain the security and stability of the platform

We do not sell your data to third parties. We do not use your data for advertising. We do not profile users for automated decision-making.

5. Data Retention

During the demo phase, data retention policies are not yet formally defined. We aim to retain data only as long as necessary for the purposes described above. If you wish to request deletion of any data associated with your email address, contact us at hello@tacitus.me.

6. Data Security

We implement reasonable technical measures to protect data, including encrypted data transmission (TLS) and access controls. However, as an early-stage demo platform, we cannot guarantee the security of data to enterprise standards.

SOC 2 Type II certification and formal penetration testing are plannedand have not yet been completed. Do not use PRAXIS in demo mode for sensitive, classified, or mission-critical workloads.

7. GDPR & International Privacy

Full GDPR compliance is a planned feature. We intend to appoint a Data Protection Officer, establish lawful bases for processing under Article 6 GDPR, and implement Data Subject Access Request (DSAR) procedures prior to any commercial launch.

In the interim, if you are based in the EU/EEA and have concerns about your data, please contact us at hello@tacitus.me and we will respond as promptly as possible.

8. Third-Party Services

PRAXIS uses third-party infrastructure providers (including cloud hosting and analytics tools). These providers have their own privacy policies. We are working to formalise data processing agreements with all providers before commercial launch.

9. Changes to This Policy

As PRAXIS evolves from demo to commercial product, this Privacy Policy will be updated substantially. We will notify mailing list subscribers of material changes. The current version number and date are shown at the top of this page.

10. Contact

For any questions about this Privacy Policy or your data, contact us at: