PRIVACY POLICY

Effective date: 15-10-2026

This Policy explains how Tactile Enterprises collects, uses, shares and retains personal data through Tactile's website, AI Visualizer, SketchUp plugin, projects and vendor enquiry features.

Information collected

• Account details such as name, email, phone, organisation and authentication records.
• Project information such as project names, saved materials, SKUs, cart contents and feature activity.
• Content submitted to AI or project tools, including prompts, renders, photographs, drawings and files.
• Vendor enquiry details and the information the user chooses to share.
• Payment status, amount, invoice and transaction reference; payment credentials should be handled by the configured payment provider.
• Technical logs, IP address, browser/device information, error reports and cookies/analytics identifiers where enabled.

Purposes

We use data to operate accounts, catalogue, AI and plugin; sync SKUs to selected project carts; handle subscriptions; forward vendor enquiries; provide support; prevent fraud; secure and debug the Platform; comply with law; and improve services. We will not use data for unrelated purposes without an appropriate lawful basis and any required notice/consent.

AI processing

AI uploads and prompts may be transmitted to Google, Open AI or Anthropic for processing. Before publishing, verify provider identity, retention, data location and model-training settings. Do not promise that uploads are never retained or used for training unless provider contracts/settings establish that. Users should not upload confidential client material or personal data unless authorised.

Plugin and vendor sharing

Plugin connection may process account identifiers, pairing/authentication tokens, plugin version, device/session information and SKU usage to authenticate and sync selected materials. When a user submits an enquiry, relevant details are shared with the selected vendor to respond. Vendors must use enquiry data only for that purpose and related transactions, subject to applicable law.

Service providers and payments

Data may be shared with hosting, database, authentication, AI, email, analytics and payment providers; professional advisers; authorities where legally required; or a business successor with appropriate safeguards. Payment provider: Razorpay Confirm the live data flow before publication.

Retention and security

Tactile retains personal data only for as long as reasonably necessary to provide its services, maintain security, resolve disputes and comply with applicable legal obligations.

Account data: Retained while your account is active. Following account deletion, personal data will be deleted or anonymised within 30 days, except for information that must be retained for legal, tax, security or dispute-resolution purposes.

Projects and carts: Retained while your account is active. Following account deletion, project and cart data will be deleted or anonymised within 12 months, unless a longer period is necessary for legal obligations or dispute resolution.

AI uploads and outputs: Temporary uploads will be deleted within 30 days after processing. Saved AI outputs will be retained until you delete them or delete your account, after which they will be deleted or anonymised within 30 days, subject to applicable retention requirements.

Technical and security logs: Retained for 180 days, or longer where required by applicable law or necessary to investigate a security incident.

Invoices and transaction records: Retained for 8 years after the end of the relevant financial year, or longer where required by applicable law.

Tactile uses reasonable technical and organisational safeguards to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. These measures may include access controls, secure authentication, protected backups, system monitoring and incident-response procedures.

Where data is retained in backups, its deletion may take additional time under the applicable backup-retention cycle. Such data will remain protected and will not be restored to active use except where necessary for recovery, security or legal compliance.

When personal data is no longer required, Tactile will delete or anonymise it securely, subject to applicable legal retention obligations.

Rights, children and international processing

Subject to applicable law and commencement dates, users may request access, correction, erasure, withdrawal of consent where applicable, or submit a grievance via . Some records may be retained where legally required. The Platform is intended for professional/adult users, not children. Identify whether providers process data outside India and confirm compliance before publishing claims.

Contact and changes

Operator: Tactile Enterprises, No.130 Choolai High Road,Choolai,Chennai-600112 Privacy contact: Grievance contact: Manas Mohata, Sole Proprietor,manasmohata@tactilehub.in. Publish an effective date and update this Policy when practices change.