Privacy policy

Last updated 14 October 2026

Tacit (tacitme.com) is run by Kulchandra Kandel, an individual based in India. This page explains what Tacit collects, why, and what you can do about it. Questions or requests: hi@tacitme.com.

What we collect

  • Your account: your name and email address, and your password stored only as a secure hash. If you sign in with an emailed code, we send that code to your email address.
  • Sign-in sessions: while you're signed in, we keep a session with its expiry date, the IP address it started from and your browser's user agent, to keep you signed in and to spot misuse.
  • Your library: the skills you save, the drafts you save (from the site or from a chat through our connector), and the skills you publish.
  • Connected apps: when you connect an app such as Claude or ChatGPT to your account, we keep the app's registration (its name and the address it returns to), your approval, and the access tokens we issue to it.
  • Request logs: our hosting provider records technical details of requests to the site (such as IP address, address requested and time) to run it and keep it secure.

What we don't collect

  • We don't see your conversations with your AI. Through the connector, your AI sends us only what a tool needs: the words it searches for, a skill's id, or a draft's text when you ask it to save one.
  • We don't use advertising, analytics or tracking scripts. The only cookie we set is the one that keeps you signed in.
  • We don't sell or rent your information, and we don't use it to train AI models.

Why we use it

To run your account and keep you signed in, to save and publish skills when you ask, to let the apps you approve act on your behalf, to answer you when you contact us, and to keep Tacit secure and working.

What's public

Skills you publish are public, with your name on them, and AI apps can read them. Drafts and your saved skills are private to your account. Community skills on Tacit come from public sources and are credited to their authors.

Who processes it for us

  • Cloudflare hosts the site and its database and handles our domain. Data may be processed in data centres outside India.
  • Resend sends sign-in emails, when emailed codes are used.

We don't share your information with anyone else unless the law requires it.

How long we keep it

  • Your account and library: until you delete them or ask us to delete your account.
  • Drafts: until you publish or delete them, or delete your account.
  • Sessions: until they expire or you sign out. Access tokens for connected apps expire after an hour; refresh tokens after 30 days.
  • Request logs: for the short period our hosting provider keeps them.

Your choices and rights

  • You can delete any skill you published from its edit page.
  • To stop an app using your account, remove the Tacit connector in that app, and email us if you also want its access revoked on our side.
  • You can ask us to show you, correct or delete your information, or to delete your account, by emailing hi@tacitme.com from your account's email address. We reply within 30 days.
  • If you have a complaint about how we handle your information, write to the same address; it reaches the person responsible.

Children

Tacit is for people 18 and older. Don't create an account if you're younger.

Changes

If we change this policy, we'll update the date above, and say so on the site for important changes. See also our terms and support.