Hero Cloud Image

Privacy policy

last updated : 25th August 2025

Introduction

We are committed to protecting your privacy and providing a secure and enjoyable online experience. This Privacy Policy governs the manner in which we collect, use, maintain, and disclose information collected from users (each, a "User") of the  product website ("Site").

Who we are

Tactiva (“we”, “us”) operates AI-powered promotional campaigns and this website.Controller: Tactiva SRL, Portelanului Street, 3, ap. 7, Cluj-Napoca, Contact: privacy@tactiva.ro | +4.0749.835.380. If we process data as a processor for brand clients, those clients are the controllers for their campaigns.

Scope

Website
Identification & contact: name, email, phone, company, role. Booking info: preferred date/time, notes. Technical data: IP, device, browser, pages viewed (via cookies or similar).
Promotions
Receipt image & parsed data (store, date, items, totals, VAT). Account & fulfilment: name, email/phone, delivery address (if needed for prizes). Zero-party preferences (what you voluntarily tell us: flavor, pack size, channel, reward type). Event telemetry: uploads, validations, play/completion, rewards, error codes. Chatbot logs: questions, intents, outcomes (PII masked where possible). We do not intentionally collect special category data.

Data we collect

We may collect payment information when Users make a purchase on our Site. This information is used solely for the purpose of processing payments and is securely handled by our payment processing partners.

Why we use your data (purposes & legal bases)

Run the promotion you entered: validate receipts, apply rules, issue rewards, manage draws, contact winners (Contract).
Provide the website and demo scheduling, respond to inquiries (Contract/Legitimate interests).Prevent fraud and ensure fairness (Legitimate interests).
Analyze performance in aggregate (Legitimate interests).
Personalize rewards/messages using your consented preferences (Consent—you may withdraw anytime).
Meet legal obligations (e.g., prize taxes, accounting) (Legal obligation).
We never sell your personal data.

Data minimization & separation

PII vault (contact, winners) is stored separately from analytics tables (anonymized IDs). Receipt images auto-delete after parsing (see retention).

Retention

Receipt images: 30–90 days (then deleted or redacted) unless.
Parsed receipt/entry data: 12–24 months (reporting/legal).
Zero-party preferences: 6–12 months per field (time-to-live).
Chatbot/telemetry logs: 6–12 months.Winners & draw logs: 3–5 years (legal).
Demo/CRM records: while active business relationship or until you request deletion unless law requires longer.
If we process data as a processor for brand clients, those clients are the controllers for their data.

Sharing & processors

We use vetted service providers for hosting, storage, email/SMS, analytics, CRM and automation (e.g., secure cloud, HubSpot/Airtable, Make/Zapier, SMS/email gateways). All are bound by contracts (DPAs), confidentiality and security obligations. We don’t allow their independent use of your data.

Automated decision-making

AI/OCR parses receipts; rule engine decides eligibility; RNG handles draws. You can request human review if you believe an automated decision is wrong.

Your rights (GDPR/UK GDPR)

You can access, rectify, delete, restrict or object to processing, and request data portability. Where processing relies on consent, you can withdraw it at any time. To exercise rights: email privacy@tactiva.ro. You also have the right to complain to a supervisory authority. In Romania: ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal).

Children

Our services are not intended for children under the applicable age of consent. We use age gates where required.

Third-party links

Our site may link to third-party sites; their privacy practices apply on those sites.

Changes to this policy

We may update this policy from time to time. The “Last updated” date will change and, where appropriate, we will provide a notice.

Contact

Questions or requests: privacy@tactiva.ro Postal: Tactiva SRL, Portelanului Street, 3, ap.7, Cluj-Napoca,  DPO : Horatiu Cosma, horatiu.cosma@tactiva.ro

Questions 
and answers

We have answers to your questions about services and approach.

Got more questions?

Contact us for more information.

Contact us
How does AI receipt validation work?
Are draws fair and auditable?
What data do you store? GDPR?
What if my receipt is rejected or blurry?

Start your Campaign!

With Tactiva's Campaign Analytics, you have access to insightful, real‑time reports that help you measure effectiveness, engagement, and success.

Check Icon

Discover top opportunities

Check Icon

Apply with our form