Privacy Policy

Last updated: March 8, 2026

TacticalEdge AI, Inc. ("TacticalEdge AI", "we", "us", or "our") operates the Detectory platform and the website at detectory.ai and tacticaledgeai.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our websites or use our services.

1. Information We Collect

We may collect the following categories of information:

• Account information — name, email address, company name, and job title when you create an account or request a demo.
• Usage data — pages visited, features used, session duration, referral source, and other interaction data collected through analytics.
• Device & technical data — IP address, browser type, operating system, and device identifiers.
• Communication data — messages you send us via contact forms, email, or support channels.
• Cookies & similar technologies — see Section 8 below.

We do not collect or process your cloud infrastructure data. Detectory operates entirely within your AWS account; customer telemetry never leaves your environment.

2. How We Use Your Information

• To provide, maintain, and improve the Detectory service.
• To process transactions and send related information.
• To respond to inquiries, support requests, and feedback.
• To send product updates, security advisories, and marketing communications (with your consent).
• To detect, prevent, and address technical issues and abuse.
• To comply with legal obligations.

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA) or the UK, we process your personal data based on:

• Contract performance — to deliver the services you have requested.
• Legitimate interests — analytics, fraud prevention, and improving our products, balanced against your rights.
• Consent — for marketing emails and non-essential cookies. You may withdraw consent at any time.
• Legal obligation — where we must comply with applicable law.

4. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. Account data is retained for the duration of your active subscription plus 90 days. Usage analytics are aggregated and anonymised after 26 months.

5. International Transfers

TacticalEdge AI is based in the United States. If you access our services from outside the US, your information may be transferred to, stored, and processed in the US or other jurisdictions where our service providers operate. We rely on Standard Contractual Clauses (SCCs), adequacy decisions, and other lawful transfer mechanisms approved by the European Commission to safeguard international transfers.

6. Your Rights

GDPR (EEA / UK Residents)

• Right of access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object (including automated decision-making and profiling)
• Right to withdraw consent

CCPA (California Residents)

• Right to know what personal information we collect and why.
• Right to delete personal information.
• Right to opt out of the sale or sharing of personal information.
• Right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us at privacy@tacticaledgeai.com. We will respond within 30 days (or the shorter period required by applicable law).

7. Security Measures

We implement industry-standard administrative, technical, and physical safeguards to protect your personal data, including:

• Encryption in transit (TLS 1.3) and at rest (AES-256).
• Role-based access controls with the principle of least privilege.
• Regular third-party security audits and penetration testing.
• Incident response procedures with notification within 72 hours of discovery, as required by GDPR.

8. Cookies & Tracking Technologies

We use the following categories of cookies:

• Essential — required for the website to function (authentication, security, load balancing).
• Analytics — help us understand usage patterns (privacy-respecting, no cross-site tracking).
• Marketing — used by advertising partners to deliver relevant ads and measure campaign effectiveness.

You can manage your cookie preferences at any time via our Cookie Preferences page.

9. Children's Privacy

Detectory is a business-to-business security platform and is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. If changes are material, we will provide prominent notice (e.g., by email or a banner on the website). Your continued use of the service after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact: