Privacy policy

Who we are

TacitDesk is operated by an Australian business. Contact details are on the contact page.

What we collect on this website

If you use the contact form we keep your name, email address, organisation if given, your message, and a hashed form of your IP address used only to limit abuse. We use these to reply to you. We do not run advertising trackers.

The demo portal

If we invite you to the demo, we store your account details, the assistant brief you write, pairing codes, and the transcript of every message exchanged between a paired Threema ID and the demo contact, with its Threema message identifiers and delivery state. Messages from a paired phone are end-to-end encrypted between that phone and our server, where they are decrypted to generate a reply. The text of a conversation is sent to Anthropic, our AI provider, under terms that forbid training on it and with no retention beyond the request. Demo transcripts are deleted 30 days after they are written, and you can end a session at any time.

The demo Threema contact is shared by every prospect. Your brief applies only to phones paired with your code.

Sub-processors

Threema GmbH (Switzerland) carries the messages. Anthropic provides the AI model for the demo assistant. Our hosting provider stores the data. We will publish changes to this list before they take effect.

Where data is held and which law applies

We are subject to the Australian Privacy Act 1988 and, where you are in the EU or Switzerland, we act as a processor under the GDPR and the Swiss Federal Act on Data Protection for customer deployments. The Australian Telecommunications and Other Legislation Amendment (Assistance and Access) Act 2018 applies to us as a provider; where we hold decryption keys we may be compelled to assist, and we will challenge requests we consider disproportionate.

Your rights

You can ask for a copy of what we hold about you, ask us to correct or delete it, and complain to the Office of the Australian Information Commissioner or your local data protection authority. Write to us and we will respond within 30 days.