Privacy Policy

Last updated: October 14, 2026 · Tack by Certifyde

1. Introduction

This Privacy Policy describes how Certifyde, Inc. ("Certifyde," "we," "us," or "our") collects, uses and discloses information about you when you use our browser extension, Tack by Certifyde ("Tack"), our website and web application at https://tack.certifyde.ai, and any related services, features and content (collectively, the "Service"). "You" means you as a user of the Service.

Tack learns the routine work you do in your web applications and offers to do it for you. Before Tack sends, writes or changes anything in another application, it shows you what it will do and asks for your approval. Doing this means reading the pages you work in, which is why this policy describes that in detail.

By using the Service, you agree to the collection, use and disclosure of information as described in this policy. If you do not agree, please do not use the Service. If you use the Service through or on behalf of an organization, that organization's agreement with us may also apply.

2. Information We Collect

2.1 Information you give us

• Account information, such as your name and email address, when you sign up with Google or with an email address you verify.
• Information about your work that you choose to tell us, such as a description of what you do or of a job you would like Tack to handle.
• Payment information. If you subscribe, a third-party payment processor collects your payment details. We do not receive or store your full card number; we receive information such as your subscription status, card brand, the last digits of your card and your billing country.
• Communications, such as the messages you send us when you ask for support.

2.2 Information collected through the extension

After you sign in and agree on the extension's consent screen, the extension reads the pages you work in, while you work in them. This includes:

• Page content, such as the text, structure and form fields of a page, and images of the parts of a page that display content we cannot otherwise read.
• Information you enter, such as the values you type, select or submit on a page.
• Information a page exchanges with the services it uses, such as the data a page loads and sends.
• Page details, such as a page's address and title, when you used it, and which browser tab it was in.

The extension stops collecting when you sign out. We use automated measures designed to detect and remove passwords and other credentials before they are stored. These measures cannot catch everything, and they do not remove other information a page displays. Because the pages you work in are read as they are, what we collect may include sensitive information (for example financial or health information) and information about other people (for example the sender of an email you are reading), if it appears on a page you work in. If you would not want a page read, sign out before you work in it. Do not use the Service on a browser profile you share with someone else.

2.3 Information from applications you connect

You can connect applications, such as Gmail, Google Calendar, Google Drive, Google Docs, Google Sheets, Slack and others, so that Tack can act in them on your behalf. You connect each one through that application's own authorization screen, which shows you the access you are granting. We then receive and store the access you grant and use it to read and write the information a shortcut you turned on needs. Section 4 describes Google data specifically.

2.4 Information about your use of the Service

We automatically collect information about how you use the Service, such as the features you use, the shortcuts you run and their results, the requests the extension and the web application make to our servers, error reports, and device and browser information such as browser type, operating system and IP address. Section 13 describes cookies.

2.5 What we do not collect

We do not read your browser history, we do not ask for your device's precise location, and we do not make audio or video recordings of your screen.

3. How We Use Information

We use the information we collect to:

• Provide the Service, including learning the jobs you repeat, suggesting shortcuts and applications to connect, running the shortcuts you turn on, and showing you what they did.
• Act on your behalf in the applications you connect, after you approve each action that sends, writes or changes something.
• Develop and improve the Service, including the AI models that power it, as described in section 5.
• Communicate with you, including sign-in codes, notices about your shortcuts and your account, and, unless you opt out, product updates.
• Keep the Service safe and secure, including preventing fraud and abuse and diagnosing faults.
• Comply with law and protect our rights and the rights of others.

We may also create aggregated or de-identified information that cannot reasonably be linked to you, and use it for any lawful purpose. We do not attempt to re-identify it.

We do not sell your personal information, we do not share it with data brokers or advertising platforms, we do not use it for advertising, and we do not use it to determine creditworthiness or for lending.

4. Google User Data

4.1 Limited Use

Certifyde's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The use of information received from Google Workspace APIs will adhere to the Google Workspace API User Data and Developer Policy, including the Limited Use requirements.

Our collection and use of information received through the Tack by Certifyde browser extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

4.2 What Google data we access, and why

• Signing in with Google gives us your name, email address and profile picture, and no access to your other Google data.
• Connecting a Google application gives us the access shown on Google's authorization screen. Depending on the applications you connect, this can include your email messages, their attachments and labels; your calendar events and their details; your Drive files and their names and folders; the content of your documents and spreadsheets; and related metadata.

We use Google data only to provide the features you use: to read what a shortcut you turned on needs and to carry out the actions you approve, such as sending a reply, adding a row to a spreadsheet or creating a calendar event.

4.3 How Google data is handled

• AI models. When a shortcut runs, the Google data it reads may be processed by the AI models that power the Service, only to carry out that shortcut. The providers of those models process it on our behalf and are not permitted to use it to train their models.
• No model training. We do not use Google data, raw or derived, to develop, train, fine-tune, evaluate or improve any AI or machine-learning model, ours or anyone else's, and we do not disclose it to any third-party AI service for those purposes. The AI models that power the Service run on Amazon Web Services (Amazon Bedrock) inside our own cloud account; the prompts and answers of a run are not used to train any model, and we do not ask the provider to store them.
• Only what you hand us. Tack never lists or browses the files in your Google account. It reads or writes a spreadsheet or document only at an address you gave it: a page you opened in your browser, a link you pasted, or a file you asked Tack to create. Tack never deletes a file, document or spreadsheet from your account. It changes what is inside them, sends mail and books events only as a shortcut you approved says, and only after your yes to each change.
• No advertising, no sale. We do not use Google data for advertising, including retargeting or interest-based advertising, we do not sell it, and we do not transfer it to data brokers or information resellers.
• No human reading. No one at Certifyde reads your Google data unless you ask us to look at something specific, it is necessary for security purposes such as investigating abuse, or the law requires it.
• Revoking access. You can disconnect a Google application in Tack's settings at any time, which deletes the access we hold. You can also remove our access from your Google Account's third-party connections page. Deleting your account deletes the Google data we hold (section 8).

5. AI Models and Model Training

The Service uses AI models, provided by third parties through our cloud service providers, to read pages, recognize jobs and carry out shortcuts. These providers process information on our behalf to provide the Service, and are not permitted to use it to train or improve their own models.

We may use information collected through the extension (section 2.2), and what the Service produced from it — never information received from Google APIs or from other applications you connect, raw or derived (section 4.3) — to develop, train, fine-tune and evaluate our own models, so that the Service gets better at understanding pages and recognizing jobs. Information used to train our models is kept until you delete your account; deleting it does not undo training already done, except where the law requires.

AI models can make mistakes. Before Tack sends, writes or changes anything in another application, it asks for your approval; please review what it proposes before you approve it.

6. How We Share Information

We share information only as described below:

• Service providers that process information on our behalf, such as cloud hosting and storage, AI model providers, email delivery, payment processing and customer support tools. A current list is available on request.
• Applications you connect, which receive the requests a shortcut makes to them on your behalf.
• At your direction or with your consent.
• Professional advisors, such as lawyers, auditors and security assessors, under duties of confidentiality.
• For legal and safety reasons, when required by law, regulation, legal process or a governmental request, or to protect the rights, property and safety of Certifyde, our users or others.
• In a business transaction, such as a merger, acquisition or sale of assets. Where information received from Google APIs is involved, we will ask for your consent first, as Google's policies require.

We do not sell your information and we do not share it with third parties for their own marketing.

7. Data Retention

We keep information for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes and enforce our agreements. Some information, such as the raw content of captured pages, is deleted automatically after a limited period. Information derived from it that your shortcuts rely on, your account information and your shortcuts are kept until you delete them or your account. Copies in backups and logs are deleted on their own schedules.

Information is stored and processed in the United States.

8. Your Choices and Deleting Your Data

• Stop collection at any time by signing out of the extension.
• Disconnect an application at any time in Tack's settings. You can also revoke our access from that application's own settings, which only you can do.
• Delete your account at any time in the Service. Deleting your account deletes your account and the information associated with it, including what we collected through the extension, your shortcuts and their records, and the access you granted to connected applications. Residual copies in backups, logs and our providers' systems are deleted on their own schedules and are not used to restore your account.
• Opt out of product updates at any time, by writing to us or using the link in those emails.

You can also ask us to delete your account by writing to [email protected].

9. Data Security

We use administrative, technical and physical measures designed to protect your information, including encryption in transit and at rest, encryption of the access you grant to connected applications, and controls that keep each account's information separate. No system is perfectly secure, and we cannot guarantee the security of your information.

A service that acts in your applications brings its own risks. A shortcut may act on incorrect or incomplete information, and a page or message may contain instructions intended to mislead automated tools. Tack asks for your approval before it sends, writes or changes anything; please review what it proposes, and keep your account and devices secure.

Our staff do not read the content of your pages, runs or connected applications except with your agreement (for example, when you ask us for help), where necessary for security, or where the law requires it. Authorized staff may see account information, such as your name and email address, to operate the Service and provide support.

10. Your Rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct inaccurate personal information;
• delete your personal information;
• receive your personal information in a portable format;
• object to or restrict certain processing; and
• withdraw your consent, for example by signing out or disconnecting an application.

To exercise these rights, contact us at [email protected]. We may need to verify your identity before we act on a request, and we will respond within the time the applicable law allows. Where a United States state privacy law applies, you have any additional rights it provides.

11. International Transfers

The Service is operated from the United States, and your information is transferred to, stored in and processed in the United States, whose data protection laws may differ from those of your country. If you are in the European Union, the United Kingdom or Switzerland, you may have additional rights under the General Data Protection Regulation or equivalent law, including the right to lodge a complaint with your supervisory authority.

12. Children's Privacy

The Service is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe we have, please contact us and we will delete it.

13. Cookies and Similar Technologies

We use cookies and similar technologies, such as browser storage, that are necessary to operate the Service: for example, to keep you signed in and to complete sign-in and application connections securely. We do not use advertising cookies. Your browser may let you block or delete cookies, but the Service may not work properly without them. Our website does not currently respond to "Do Not Track" signals.

14. Chrome Extension Disclosures

Consistent with our Chrome Web Store listing, the extension handles the following kinds of information, as described in section 2:

• Website content, including the text, images and data of the pages you work in.
• Web history, meaning the addresses and titles of the pages you work in, collected with them. We do not read your browser's history.
• Personally identifiable information, such as your name and email address.
• Authentication information, such as the access you grant to the applications you connect.
• User activity, such as the information you enter on the pages you work in.
• Personal communications, such as the email and chat messages on pages you work in.
• Financial, payment and health information, and location, where a page you work in displays them.

We certify that we do not sell this information to third parties, do not use or transfer it for purposes unrelated to the extension's single purpose, and do not use or transfer it to determine creditworthiness or for lending.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated policy at https://tack.certifyde.ai/privacy and update the "Last updated" date. If we make material changes, we will take reasonable steps to tell you, such as by email or in the Service. If we begin using information in a way this policy did not describe, we will ask for your consent before we do so. Your continued use of the Service after a change means you accept the updated policy.

16. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Certifyde, Inc. 465 Brickell Avenue CU-1 Miami, FL 33131

Email: [email protected] Support: [email protected]