Privacy Policy

Tacbaze is operated by PAR2LABS PRIVATE LIMITED, 3-68 Panchaythi Office Road, Kunchanpalle, Tadepalle, Guntur 522501, India. Effective 14 October 2026.

1. Who we are and how to reach us

Tacbaze is a web application that lets a team create posts, schedule them, publish them to connected social media accounts, and read back comments and analytics. This policy explains what personal data we handle and why. For any privacy question or request, email contact@tacbaze.com.

2. Data we collect

• Account data: your name, work email address, password (stored only as a salted hash), and the workspace you create.
• Workspace content: posts, drafts, media you upload, contacts and messages your team enters or receives through connected channels, and the notes and tags your team adds.
• Connected social accounts: when you connect a Facebook Page, an Instagram professional account, a YouTube channel, a LinkedIn Page or a WhatsApp Business number, we receive an access token from that platform. Tokens are encrypted at rest with AES-256-GCM and used only to act on that account for your team.
• Platform data we read from connected accounts: the account name and identifiers, the posts we published, comments and reactions on those posts, follower counts, and the analytics the platform provides for them. We read this only to show it in Tacbaze and to act on it when your team asks us to.
• Billing data: plan and payment status. Card and bank details are entered on Razorpay's checkout and are never stored by us.
• Technical data: IP address, browser type, and the times of requests, kept in security and error logs.
• Cookies and browser storage: a sign-in cookie that keeps you signed in, and browser storage for display preferences such as column widths. We do not use advertising cookies.

3. How we use it

• To run the service you asked for: sign-in, publishing posts, reading comments and analytics, and sending account emails such as verification and password resets.
• To keep the service secure and to investigate abuse or failures.
• To bill your workspace for the plan and any add-ons you buy.
• We do not sell personal data, and we do not use data from connected social accounts for advertising or to train AI models.

4. YouTube API Services and Google user data

Tacbaze uses YouTube API Services. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

• What we access: the connected channel's name, identifier and subscriber count; the statistics (views, likes, comments) of videos we uploaded for you; and per-video views and shares from the YouTube Analytics API.
• What we do with it: upload the videos your team schedules, with their title, description, tags, thumbnail and publish time; add each video to the playlist your team picks; and show the channel name and video statistics in Tacbaze. We do not read or change anything else on the channel.
• What we store: the encrypted access and refresh tokens, the channel name and identifier, the IDs and links of videos we uploaded, and the statistics above.
• Who we share it with: no one outside Tacbaze. Videos and their details go only to YouTube, on the channel you connected.
• Revoking access: you can disconnect the channel in Social → Accounts, which deletes its tokens at once, or remove Tacbaze' access from your Google security settings. When you remove access there, Tacbaze finds out at its next daily check and deletes the YouTube data stored from your channel within 7 days: the tokens, the channel's picture and subscriber count, and the video statistics. To have everything else deleted as well, follow the data deletion instructions.

Tacbaze' use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Facebook and Instagram data (Meta)

We use data from Facebook and Instagram only to provide the features you use in Tacbaze: publishing to your Pages and Instagram accounts, reading their posts, comments and insights, and replying, liking, hiding or deleting when your team asks. We follow Meta's Platform Terms and Developer Policies. You can remove our access at any time from your Facebook settings under Business Integrations, and you can request deletion as described in section 9.

6. LinkedIn data

We use LinkedIn data only to publish to and read the analytics of the LinkedIn Pages your team connects, in line with the LinkedIn API Terms of Use.

7. Who we share data with

• Hosting and infrastructure: our servers run on a VPS provider, with a database hosted by Tessera (PAR2 LABS).
• Email: transactional email is sent through our mail provider's SMTP service.
• Payments: Razorpay processes payments for paid plans.
• Social platforms: Meta, Google and LinkedIn receive the posts and actions your team sends to them, as those platforms require.
• We may disclose data where the law requires it.

8. How long we keep data

We keep account and workspace data while your account is active. Nightly backups are kept for 14 days, so data deleted today may persist in backups until those expire. We delete connected-account tokens as soon as you disconnect an account.

9. Your rights and deletion

You can ask us to access, correct or delete your personal data, and to withdraw any connected account. See the data deletion instructions for how to do this. We respond within 30 days.

10. Security

We encrypt connections with HTTPS, encrypt stored tokens, hash passwords, restrict access to workspace data by role, and run nightly backups. No system is perfectly secure, so we cannot guarantee absolute security.

11. Children

Tacbaze is for businesses and their teams and is not directed at children under 18.

12. Changes

We will post changes to this policy on this page and update the effective date. If a change is material, we will tell account owners by email.

13. Governing law

This policy is governed by the laws of India. Disputes fall under the courts of Guntur, Andhra Pradesh.