Privacy Policy

1. Introduction

Tactical Digest ("we," "us," or "our") is committed to protecting your privacy and the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our tactical equipment tracking service.

Important: We understand that equipment information can be sensitive. This policy outlines our commitment to protecting your data with the highest level of security and discretion.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

• Email address (for account access and communication)
• Password (encrypted and never stored in plain text)

Payment Information: We do not collect or store payment information directly. All payment processing is handled securely by Stripe, our payment processor.

2.2 Equipment Information

You voluntarily provide detailed information about your equipment, including:

• Firearm specifications (manufacturer, model, caliber, etc.)
• Bow specifications (manufacturer, model, draw weight, etc.)
• Personal notes and observations
• Any other equipment details you choose to record

2.3 Technical Information

We collect minimal technical information necessary for the service to function properly. This may include basic session information required for authentication and security purposes.

3. How We Use Your Information

We use your information solely for the following purposes:

• Service Provision: To provide and maintain your equipment tracking service
• Account Management: To manage your account, subscription, and billing
• Security: To protect against unauthorized access and maintain data integrity
• Communication: To send important service updates and respond to support requests
• Improvement: To analyze usage patterns and improve our service (using anonymized data only)

4. Data Security and Encryption

We implement industry-standard security measures to protect your sensitive equipment data:

• Encryption: All data is encrypted both in transit (HTTPS/TLS) and at rest using Rails' Active Record encryption
• Access Controls: Strict access controls limit who can view your data
• Secure Infrastructure: Our infrastructure is regularly monitored and updated
• Payment Security: Payment processing is handled by Stripe, a PCI-compliant payment processor

5. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your equipment information to third parties. We may only disclose your information in the following limited circumstances:

• Legal Requirements: When required by law, court order, or legal process
• Safety: To protect the safety of individuals or prevent illegal activities
• Service Providers: To trusted service providers who assist in operating our service (under strict confidentiality agreements)
• Business Transfer: In the event of a merger or acquisition (with continued privacy protection)

6. Your Privacy Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Portability: Request an export of your equipment data
• Withdrawal: Withdraw consent for data processing (may limit service availability)

To exercise these rights, contact us through the support channels provided in the service.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Upon account closure:

• Equipment data is permanently deleted within 30 days
• Basic account information may be retained for legal compliance purposes
• Payment records are retained according to financial regulations

8. Cookies and Tracking

We use essential cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Ensure security and prevent fraud
• Analyze service usage (anonymized)

You can control cookie settings through your browser, though this may affect service functionality.

9. International Users

If you are accessing our service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

10. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of any material changes through:

• Email notification to your registered email address
• Prominent notice within the service
• Updated effective date at the top of this policy

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the support channels provided in the service.