Legal
The third parties we use to run the service, and what each one handles.
untactit is pre-launch. This document describes how we intend to operate and is published so you can see it early. It has not been through legal review and is not yet a binding agreement. If you need executed terms before that review completes, contact us and we will handle it directly.
Translations of this page may be provided for convenience. Where a translation conflicts with the English text, the English text controls.
Each of these is bound by written terms requiring protection at least equivalent to our own commitments. We remain responsible for their performance.
| Provider | Purpose | Data handled | Location |
|---|---|---|---|
| Amazon Web Services | Hosting, database, storage, backups | All service data | United States |
| Stripe | Payment processing | Billing contact, transactions. Card data goes directly to Stripe — we never receive it | United States |
| Sign-in (OIDC) | Identity provider subject identifier, email, name | United States | |
| Microsoft | Sign-in (OIDC) | Identity provider subject identifier, email, name | United States |
| Transactional email provider | Invitations, notifications, receipts | Email address, message content | United States |
| Error monitoring provider | Diagnostics and stability | Error traces, which may incidentally contain identifiers | United States |
Vendor selection for email and error monitoring is being finalized. Named providers will be published here, with 30 days' notice, before they process any customer data.
We give at least 30 days' notice before adding or replacing a subprocessor. To receive these notices, have your account administrator subscribe at privacy@untactit.com.
You may object on reasonable data protection grounds within the notice period. If we cannot resolve the objection, you may terminate the affected part of the service without penalty and receive a prorated refund.