Privacy Policy

1. Introduction

This Privacy Policy explains how tactac.love (“we”, “us”, “our”) collects, uses and protects your personal data when you use our website and AI-generated video greeting service.

The service is operated by discover IT GmbH, Gondiswilerstrasse 12, 6146 Grossdietwil, Switzerland.

By using tactac.love, you agree to this Privacy Policy. If you do not agree, please do not use our website and do not place an order.

2. Data We Collect

2.1 Information You Provide

• Your name – required for order creation and order-related communication.
• Your email address – required to deliver your order and communicate about it.
• Recipient’s first name – used only to personalize the video.
• Optional personal message – if provided, it may be included in the delivery email and/or shown on the video page, depending on your selection.
• Optional recipient email address – if you choose the optional “send the video directly” feature. By providing this email, you confirm that you have permission to do so.
• Voucher code (optional) – if entered, used to validate eligibility and apply a discount during order creation.
• Payment information – handled by Stripe; not stored by us.

2.2 Automatically Collected Data

• IP address and basic device information;
• browser and operating system data;
• pages visited and time spent;
• essential cookies required for session stability;
• security signals from Google reCAPTCHA (to prevent fraud).

We do not use advertising or tracking cookies.

3. How We Use Your Data

• Order processing and video generation;
• Communication about your order and delivery;
• Optional sending of the final video to the recipient’s email;
• Video page personalization (optional message shown on the video page);
• Voucher validation and discount application during order creation (if you enter a voucher code);
• Security & fraud prevention (via reCAPTCHA, email verification, and internal checks);
• Service improvement and performance monitoring.

Your data is never sold or used for advertising.

4. Use of Names, Messages & Video Content

The recipient’s name is used solely for personalizing your video. If you provide a personal message, it is processed to include it in the delivery email and/or display it on the video page, depending on your selection.

Video files are stored temporarily and deleted after 30 days.

Videos and personal messages are not used for training AI models or marketing unless you explicitly permit it.

5. Payment Information (Stripe)

Payments are processed by Stripe. We do not store full payment card details. Stripe may process your IP address and basic transactional metadata.

Stripe Privacy Policy: https://stripe.com/privacy

6. Cookies

We use only essential cookies for functionality, checkout and session security.

7. Data Sharing with Third-Party Providers

We share data only with providers essential to the service:

• SendGrid – sends order confirmations, verification codes (where applicable), and video delivery emails.
• Google reCAPTCHA – protects against bots and abuse.
• Google Veo – generates personalized video assets.
• Google Transcoder – processes final video output.
• Google Cloud Storage – hosts the final video for up to 30 days.
• OpenAI (ChatGPT) – validates the recipient name and checks for abusive content.
• ElevenLabs – voice generation used in video creation (where applicable).
• Stripe – payment processing.
• IT hosting & support providers.

All providers are contractually bound to process your data only as instructed.

No data is used for training machine learning models.

8. Data Retention

Personalized videos and related data (including the recipient’s first name and any personal message you provided) are deleted after 30 days, unless legally required to retain them longer.

Transactional and accounting data may be stored longer for legal compliance.

If we send emails to recipients on your behalf (e.g., direct delivery or Tell A Friend), we retain the necessary email logs and delivery metadata for a limited period for troubleshooting, abuse prevention, and compliance purposes.

9. Children’s Data

tactac.love is not intended for children under 13. We delete such data if discovered.

10. Your Rights

You may request:

• access to your data;
• correction or deletion;
• restriction or objection to certain processing;
• data portability (where applicable).

To exercise your rights, contact us via the Impressum.

11. Security

We use:

• HTTPS encryption;
• secure cloud infrastructure;
• restricted access controls;
• fraud and abuse prevention systems (including reCAPTCHA and email verification);
• logging of technical security data (such as IP addresses) for security monitoring and fraud prevention.

No online service is 100% secure, but we strive to protect your data to industry standards. Further information is available in our Security Policy.

12. Changes to This Policy

We may update this Privacy Policy when necessary. Changes appear on this page.