Tackshare

TL;DR - Privacy in Plain English

✅ What we do:

  • • Collect only what's needed to run the service (phone/email, boards, notices)
  • • Use Firebase for secure data storage with encryption
  • • Use Stripe for payments (we never see your credit card)
  • • Send notifications based on your preferences (1/day free, 3/day pro)
  • • Keep your data secure with industry-standard encryption

❌ What we DON'T do:

  • • Sell your data to anyone, ever
  • • Share your data for advertising
  • • Track you across other websites
  • • Keep data after you delete your account (beyond 30-day backup)

🔑 Your rights:

  • • Download your data anytime
  • • Delete your account and all data
  • • Control notification preferences
  • • Request corrections to your data

Last Updated: October 26, 2025 | Effective: October 26, 2025

Privacy Policy

Effective Date: October 26, 2025 Last Updated: October 26, 2025 Service: Tackshare (tackshare.com) Operator: Paper Huts

Introduction

Welcome to Tackshare ("we," "our," or "us"). We are committed to protecting your privacy and being transparent about how we collect, use, and share your information.

This Privacy Policy explains:

  • What information we collect and why
  • How we use and protect your information
  • Your rights and choices regarding your data
  • How to contact us with privacy questions

By using Tackshare, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

Account Information:

  • Phone number (required for authentication)
  • Email address (optional)
  • Display name (optional)
  • Profile information

Content You Create:

  • Board names and descriptions
  • Notices (title, content, images)
  • Comments and reactions
  • Categories and tags

Payment Information:

  • Processed securely by Stripe (our payment processor)
  • We never store credit card numbers
  • We store: Stripe customer ID, subscription status, plan type

1.2 Information Collected Automatically

Usage Data:

  • Pages visited and features used
  • Time spent on the service
  • Board and notice interactions
  • Device type and browser information

Technical Data:

  • IP address (for security and analytics)
  • Browser type and version
  • Operating system
  • Device identifiers
  • Cookies and similar technologies

Authentication Data:

  • Managed by Firebase Auth
  • Login timestamps
  • Authentication method (phone, email, Google, Apple)
  • Session information

1.3 Information from Third Parties

OAuth Providers (Google, Apple):

  • Basic profile information (name, email)
  • Profile picture (if you choose to share)
  • We only request minimum necessary permissions

Twilio (SMS Service):

  • Phone number verification
  • SMS delivery status
  • We do not access Twilio's other data

2. How We Use Your Information

2.1 Provide and Improve the Service

  • Create and manage your account
  • Enable board creation and notice posting
  • Send notifications (respecting notification guardrails)
  • Process subscriptions and payments
  • Provide customer support
  • Analyze usage to improve features
  • Ensure security and prevent fraud

2.2 Communication

Service Communications:

  • Notice notifications (1/day free, 3/day Pro)
  • Digest emails (Pro tier)
  • Account and billing notifications
  • Security alerts
  • Service updates

Marketing Communications (Optional):

  • Product announcements
  • Feature updates
  • Special offers
  • You can opt out at any time

2.3 Analytics and Research

  • Understand how users interact with Tackshare
  • Identify usage patterns and trends
  • Test new features
  • Improve performance and user experience
  • Aggregate statistics (never personally identifiable)

3. How We Share Your Information

3.1 We DO NOT Sell Your Data

We will never sell your personal information to third parties.

3.2 Service Providers

We share data with trusted third-party service providers who help us operate Tackshare:

Firebase (Database & Auth):

Stripe (Payments):

Twilio (SMS):

Vercel (Hosting):

Plausible (Analytics - Optional):

3.3 Legal Requirements

We may disclose your information if required by law or in response to:

  • Court orders or subpoenas
  • Legal processes
  • Government requests
  • Protection of rights, property, or safety

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

3.5 Board Members

Public Boards:

  • Visible to anyone with the link
  • Content is publicly accessible
  • Member list may be visible to other members

Private Boards:

  • Only visible to invited members
  • Member phone numbers visible to board admins
  • Notice content only visible to board members

4. Data Retention

4.1 Account Data

  • Active Accounts: Retained while account is active
  • Deleted Accounts: Anonymized within 30 days
  • Backup Retention: Up to 90 days in backups

4.2 Content

  • Notices: Auto-deleted after 7 days (configurable)
  • Board Data: Retained while board exists
  • Deleted Boards: Permanently deleted within 30 days

4.3 Logs and Analytics

  • Audit Logs: Retained for 90 days
  • Analytics Data: Aggregated data retained indefinitely
  • Security Logs: Retained for 1 year

5. Data Security

5.1 Security Measures

We implement industry-standard security measures:

Technical Safeguards:

  • Encryption in transit (TLS/SSL)
  • Encryption at rest (database)
  • Secure authentication (Firebase Auth)
  • Row Level Security (RLS) policies
  • Regular security audits

Access Controls:

  • Minimum necessary access
  • Multi-factor authentication for staff
  • Regular access reviews
  • Audit logging

Infrastructure:

  • Hosted on secure cloud platforms
  • Regular backups
  • Disaster recovery procedures
  • DDoS protection

5.2 Your Responsibility

Protect Your Account:

  • Use a strong, unique password (if using email auth)
  • Don't share OTP codes
  • Enable multi-factor authentication when available
  • Log out on shared devices
  • Report suspicious activity immediately

6. Your Privacy Rights

6.1 Access and Portability

Right to Access:

  • View your personal information
  • Request a copy of your data
  • Export your boards and notices

How to Exercise:

6.2 Correction and Deletion

Right to Correct:

  • Update your profile information
  • Fix inaccurate data

Right to Delete:

  • Delete your account and associated data
  • Delete individual notices or boards
  • Request complete data deletion

How to Exercise:

6.3 Communication Preferences

Opt-Out Rights:

  • Disable notifications (Settings > Notifications)
  • Unsubscribe from marketing emails (link in email)
  • Adjust notification frequency

Cannot Opt Out:

  • Critical account notifications
  • Billing and payment notices
  • Legal or security notifications

6.4 Regional Rights

GDPR (European Union):

  • Right to access
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Right to withdraw consent
  • Right to lodge a complaint with supervisory authority

CCPA (California):

  • Right to know what personal information is collected
  • Right to know whether personal information is sold or disclosed
  • Right to say no to the sale of personal information
  • Right to access personal information
  • Right to equal service and price

Other Jurisdictions:

  • We respect data protection laws in all jurisdictions where we operate

7. Cookies and Tracking

7.1 Cookies We Use

Essential Cookies:

  • Authentication session
  • Security tokens
  • User preferences
  • Cannot be disabled (required for service)

Analytics Cookies (Optional):

  • Plausible Analytics (privacy-friendly, no personal data)
  • Can be disabled via browser settings

7.2 Third-Party Cookies

OAuth Providers:

  • Google and Apple may set cookies during authentication
  • Governed by their respective privacy policies

7.3 Do Not Track

We respect Do Not Track (DNT) signals. When DNT is enabled:

  • We disable optional analytics
  • We do not share data with advertising networks
  • Essential cookies remain active for functionality

8. Children's Privacy

Tackshare is not intended for children under 13 (or 16 in the EU).

We Do Not:

  • Knowingly collect data from children
  • Market to children
  • Create child-specific features

If We Discover:

  • We will delete the account immediately
  • We will notify parents/guardians if possible
  • We will not retain any data

Parents/Guardians:

9. International Data Transfers

9.1 Data Location

Primary Storage:

  • United States (Firebase, Vercel)

Service Providers:

  • May process data in various countries
  • Subject to their privacy policies and data protection agreements

9.2 Transfer Safeguards

For EU Users:

  • We comply with GDPR requirements
  • Use Standard Contractual Clauses (SCCs) where applicable
  • Ensure adequate data protection levels

For All Users:

  • Encryption in transit
  • Secure data processing agreements
  • Regular compliance audits

10. Changes to This Policy

10.1 Policy Updates

We may update this Privacy Policy to reflect:

  • Changes to our practices
  • New features or services
  • Legal or regulatory requirements
  • User feedback

10.2 Notification of Changes

Material Changes:

  • Email notification (if you provided email)
  • Prominent notice on our website
  • In-app notification
  • 30-day notice period before changes take effect

Minor Changes:

  • Updated "Last Updated" date
  • No additional notification required

10.3 Continued Use

Continued use of Tackshare after policy changes constitutes acceptance of the new policy.

11. Contact Us

11.1 Privacy Questions

Email: privacy@tackshare.com Response Time: Within 48 hours for privacy requests

11.2 Data Protection Officer

For GDPR-related inquiries: Email: dpo@tackshare.com

11.3 Data Subject Requests

To exercise your privacy rights:

  1. Email: privacy@tackshare.com with subject "Data Subject Request"
  2. Include: Your registered phone number or email
  3. Specify: The right you wish to exercise
  4. We will respond within 30 days

11.4 Complaints

EU Users:

California Users:

All Users:

12. Specific Provisions

12.1 Notification Guardrails

Data Collected:

  • Notification delivery timestamps
  • Notification click/open rates
  • Digest preferences

Use:

  • Enforce notification limits (1/day free, 3/day Pro)
  • Generate daily/weekly digests
  • Improve notification relevance

Control:

  • Adjust frequency in Settings
  • Disable non-essential notifications
  • Choose digest delivery time

12.2 PWA (Progressive Web App)

Local Storage:

  • Cached boards for offline viewing
  • Service worker for offline functionality
  • Stored on your device, not our servers

Control:

  • Clear cache in browser settings
  • Uninstall PWA like any app
  • Data deleted when you clear browser data

12.3 Public Boards

Visibility:

  • Anyone with the link can view
  • Content is publicly accessible
  • May be indexed by search engines

Control:

  • Make board private at any time
  • Delete board to remove content
  • Request search engine de-listing if needed

Appendix: Data Categories

Personal Identifiers

  • Phone number
  • Email address
  • Name
  • User ID

Account Data

  • Authentication credentials (hashed)
  • Account settings
  • Tier (free/pro)
  • Subscription status

Content Data

  • Boards
  • Notices
  • Comments
  • Uploaded images

Usage Data

  • Login history
  • Feature usage
  • Board interactions
  • Notification engagement

Technical Data

  • IP address
  • Device information
  • Browser type
  • Session data

Payment Data (via Stripe)

  • Stripe customer ID
  • Subscription plan
  • Billing history
  • Payment method type (not full details)

Last Updated: October 26, 2025 Version: 1.0 Effective: October 26, 2025

For the most current version, visit: https://tackshare.com/legal/privacy

Paper Huts Building tools people trust to notify them.

Contact Privacy Team View Terms of Use

Last Updated: October 26, 2025 | Version 1.0

Download full policy (Markdown)