Privacy Policy

We collect account, usage, and operational data strictly to deliver TaveStack OS and the modules you have activated. Data categories include identity (name, work email), workspace metadata, audit events, and the business records you choose to store inside the OS.

Your data is used to operate the platform you are paying for: authentication, authorization, audit, billing, support, and TAVE execution within your organization. We do not use your data to train shared AI models.

We use a limited set of sub-processors for hosting, payments, and email delivery. The current list is published in our Trust Center. We never sell personal data, and we do not share data outside what is operationally required.

TAVE operates on your organization's data within an isolated runtime. Your TAVE never trains on, mixes with, or learns from another organization's data. Approval gates and audit logs apply to every TAVE action.

You can export and delete your data at any time. On termination, we retain a 90-day export window before permanent deletion. Backups are purged on a 35-day rolling cycle.

You have the right to access, correct, port, delete, and restrict processing of your personal data. Submit a data subject request to dpo@tavestack.com — we acknowledge within 72 hours and resolve within 30 days.

We use a minimal set of essential cookies for authentication and session management. Optional cookies (analytics, product telemetry) are off by default and require explicit opt-in.

Material changes are notified to administrators 30 days before they take effect. The full version history is published in our Trust Center.

TaveStack Inc., A15 Aso Grove Estate, Abuja, Nigeria. Data Protection Officer: dpo@tavestack.com.