TACTTIX Privacy Policy

1. Introduction & Scope

Who We Are

Welcome to TACTTIX. We are a business management SaaS platform designed specifically for the action sports industry, developed and operated by KJD Digital, LLC. We provide the software tools that allow event operators to manage ticket sales, digital liability waivers, event check-ins, and customer profiles.

Definitions

To ensure clarity throughout this Privacy Policy, we refer to two primary groups who interact with our system:

• Event Producers: The business entities, field operators, or organizations that subscribe to the TACTTIX platform to manage their operations and attendees.
• Consumers (or "Users"): The individuals who use the platform to purchase tickets, sign digital waivers, and manage their personal profiles to attend a specific event.

Our Role: Controller vs. Processor

Because TACTTIX is a multi-tenant platform hosting data for many different businesses, data privacy laws require a clear distinction regarding who controls personal data and who simply processes it.

• The Event Producer is the Data Controller: When a Consumer provides personal data—such as signing a legal liability waiver or purchasing a ticket for a specific event—they are interacting with that specific Event Producer. The Event Producer determines exactly what data is collected and the purpose for its use. Under applicable law, the Event Producer is the "Controller" (or "Business") of that information.
• TACTTIX is the Data Processor: KJD Digital, LLC acts strictly as a "Processor" (or "Service Provider"). We process and store this information securely on behalf of the Event Producer to facilitate their core operations. We only handle the data to provide our software services according to the Event Producer's instructions. TACTTIX does not sell this data, and we are not responsible for the privacy practices of the Event Producers who utilize our platform.

2. Information We Collect

To provide the TACTTIX platform and enable Event Producers to seamlessly manage their event operations, we collect several categories of information. This data is collected directly from you, automatically through your use of the service, or via trusted third-party partners.

Information You Provide Directly

When you interact with the TACTTIX platform—whether registering for an account, purchasing an event ticket, or executing a liability waiver—we collect the following personal data on behalf of the Event Producer:

• Account and Profile Data: To establish and manage your user profile, we collect your first and last name, email address, password, and phone number.
• Ticketing and Purchase Data: When you purchase tickets, we collect your billing address and retain a record of your event purchase history. Note: TACTTIX does not directly collect, process, or store complete credit card numbers. All financial transactions are securely processed by our authorized payment gateways (e.g., Square or Stripe).
• Waiver and Legal Data: When you complete a digital liability waiver for a specific event, we collect the information required by the Event Producer to execute that legal document. This typically includes your full legal name, date of birth, emergency contact information, and your digital signature.

Information Collected Automatically

As you navigate and interact with our platform, we automatically record certain technical and usage information to ensure security and optimize performance:

• Device and Network Data: We collect your internet protocol (IP) address, browser type and version, operating system, and unique device identifiers.
• Site Analytics and Log Files: We use cookies, log files, and similar tracking technologies to monitor how users interact with the platform (e.g., pages visited, session duration). This data is strictly used for platform improvement, troubleshooting, and security monitoring.

Information from Third Parties

We may receive limited information about you from external service providers to facilitate platform functionality:

• Payment Processors: After you make a purchase, our payment gateways send back transaction status data (such as successful payment tokens, transaction IDs, or decline notices) so that we can officially issue your digital tickets and update your account history.

3. How We Use the Information

We use the personal information collected through the TACTTIX platform strictly to provide, maintain, and secure our services on behalf of the Event Producers. Specifically, we use this data for the following purposes:

• To Provide the Service: The core function of TACTTIX is to facilitate seamless event operations. We use your information to process ticket sales, manage day-of-event check-ins, and securely attach digitally signed liability waivers to your customer profile so they can be accessed by the specific Event Producer hosting your event.
• Communication: We use your contact information to send essential transactional and operational messages. This includes delivering ticket purchase confirmations, providing digital copies of your signed waiver receipts, and facilitating necessary account security actions, such as password resets.
• Platform Improvement: To ensure TACTTIX remains reliable and efficient, we analyze site usage data and technical logs. This information helps us monitor platform performance, identify and resolve software bugs, and continuously improve the overall user experience.
• Security and Fraud Prevention: Protecting the integrity of the platform and the legal validity of the executed documents is critical. We utilize user data to verify identity during the account creation and check-in processes, monitor for unauthorized platform access, and prevent fraudulent transactions.

4. How We Share and Disclose Data

Because TACTTIX operates as a service provider for various event operators, your data is shared under specific, limited circumstances to ensure the successful execution of those events. We do not sell your personal data to data brokers or third-party marketers. We share your information only in the following ways:

• With Event Producers: When you purchase a ticket, register for an event, or execute a digital liability waiver through TACTTIX, you are directing us to share your personal and transactional information with that specific Event Producer. This sharing is strictly necessary for the Event Producer to manage their event, verify your check-in, and retain their required legal documentation. Please note: Once your data is shared with an Event Producer, they act as the Data Controller. TACTTIX is not responsible for the privacy practices, marketing activities, or subsequent data use by those independent Event Producers. We encourage you to review the individual privacy policies of the Event Producers whose events you attend.
• With Service Providers: We employ trusted third-party companies and individuals to facilitate our platform ("Service Providers"). This includes cloud hosting providers, payment processors (such as Square or Stripe) to securely handle transactions, and email delivery services to send your digital tickets and receipts. These Service Providers have access to your personal information only to perform specific tasks on our behalf and are legally obligated not to disclose or use it for any other purpose.
• For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency). Crucially, because our platform facilitates the execution of legal liability waivers, we may share relevant data—including digital signatures and time stamps—to defend against legal claims, enforce our Terms of Service, or protect the rights, property, or safety of TACTTIX, KJD Digital, LLC, our Event Producers, or the public.
• Business Transfers: If TACTTIX or KJD Digital, LLC is involved in a merger, acquisition, reorganization, or asset sale, your personal information may be transferred as a business asset. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.

5. Data Retention

Because TACTTIX operates as a dual-function platform (managing both consumer profiles and legal liability documents for Event Producers), our data retention practices vary depending on the type of information collected.

General Account and Transaction Data

We retain your personal profile data (such as name, email, and phone number) and ticketing purchase history for as long as your TACTTIX account remains active. This allows you to log in, view your past event attendance, and quickly register for future events. If you choose to delete your TACTTIX account, this general profile and transaction data will be removed from our active systems, subject to the legal exceptions noted below.

Digital Waivers and Legal Documentation

Important Exception: Digital liability waivers are legally binding documents executed between you (the Consumer) and the specific Event Producer hosting your event.

• Indefinite Retention: Because Event Producers require these waivers to protect against future liability claims, any digital waiver you sign through the TACTTIX platform, along with the specific personal data contained within it (e.g., full legal name, date of birth, emergency contact, timestamp, and digital signature), is securely retained on behalf of that Event Producer indefinitely, or for as long as the Event Producer determines is legally necessary.
• Exemption from Deletion Requests: Requests to delete your TACTTIX user account will not result in the deletion of previously executed liability waivers or the personal data embedded within those legal documents. Those records must be maintained by the Event Producer for compliance and legal defense purposes.

System Logs and Analytics

Data collected automatically, such as IP addresses or site usage analytics, is retained only as long as necessary to maintain system security, monitor performance, and improve the platform. This data is typically aggregated or anonymized on a routine basis.

6. Data Security

At KJD Digital, LLC, we take the security of your personal information and legal documentation seriously. We implement a variety of industry-standard administrative, technical, and physical safeguards designed to protect the data processed through the TACTTIX platform against unauthorized access, alteration, disclosure, or destruction.

Our primary security measures include:

• Encryption in Transit: We utilize secure, standard encryption protocols (such as TLS/SSL) to protect data as it is transmitted between your device and our servers. This ensures that sensitive actions, such as executing a digital liability waiver or transmitting transaction details, remain protected.
• Secure Infrastructure: TACTTIX data is hosted on trusted, secure cloud environments that employ active firewalls, continuous security monitoring, and robust access controls to prevent vulnerabilities.
• Restricted Access: Access to the underlying database and user information is strictly limited to authorized KJD Digital, LLC personnel who require such access to provide technical support, maintain the platform, or ensure operational reliability.

Shared Responsibility

While we continuously strive to use commercially reasonable and acceptable means to protect your personal information, it is important to understand that no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee absolute security. The protection of your data is a shared responsibility; you are responsible for maintaining the confidentiality of your TACTTIX account credentials and for notifying us immediately if you suspect any unauthorized use of your account.

7. User Rights and Choices

Depending on your jurisdiction (including frameworks like the California Consumer Privacy Act and the European General Data Protection Regulation), you may have specific legal rights regarding your personal information. Regardless of where you reside, TACTTIX is committed to providing all users with transparency and control over their data.

Access and Correction

You have the right to know what personal information we hold about you and to ensure its accuracy. You can review, update, or correct most of your profile information—such as your name, email address, and phone number—at any time by logging into your TACTTIX account settings. If you need assistance accessing or correcting data you cannot edit yourself, you may contact us directly.

Deletion (Right to be Forgotten)

You have the right to request the deletion of your personal information and the closure of your TACTTIX account.

• The Legal Waiver Exception: Please note that the right to data deletion is not absolute. As detailed in Section 5, digitally signed liability waivers are legally binding documents executed between you and the Event Producer. Because Event Producers have a compelling legal necessity to retain these records to defend against potential liability claims, any data embedded within an executed waiver (including your name, date of birth, emergency contact, and signature) is strictly exempt from deletion requests. This data will remain securely stored on behalf of the Event Producer, even if your broader TACTTIX user profile is permanently deleted.

Opt-Out Choices

• Marketing Communications: You can opt out of receiving promotional emails or newsletters from TACTTIX at any time by clicking the "unsubscribe" link provided at the bottom of our emails. Please note that opting out of marketing messages does not opt you out of essential transactional communications, such as ticket purchase receipts, digital waiver copies, and account security notices.
• Cookies and Tracking: You can configure your web browser to refuse all or some cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that certain parts of the TACTTIX platform—such as maintaining an active login session—may become inaccessible or fail to function properly.

Exercising Your Rights

To exercise any of the rights described above, please contact us using the information provided in Section 10. Because TACTTIX acts as a Data Processor for the Event Producers, if your request pertains to data controlled by a specific Event Producer, we will promptly forward your request to them and assist them in fulfilling it as required by law.

8. Children's Privacy (COPPA)

Given the nature of the action sports industry, including paintball, airsoft, and laser tag, many of the events managed through TACTTIX involve minor participants. We are committed to protecting the privacy of children online and strictly comply with the Children's Online Privacy Protection Act (COPPA).

Platform Use by Children Under 13

TACTTIX is not directed at, nor do we knowingly collect personal information directly from, children under the age of 13. Children under 13 are strictly prohibited from creating a TACTTIX account, purchasing event tickets, or attempting to execute a digital liability waiver independently.

Parental and Guardian Consent

To facilitate the participation of minors in action sports events, TACTTIX requires that a parent or legal guardian interact with the platform on the child's behalf. Specifically:

• Account Creation and Ticketing: A parent or legal guardian must create their own TACTTIX account and purchase any necessary tickets for the minor.
• Legal Waivers: All digital liability waivers for minors must be completed and signed by the parent or legal guardian acting as the authorized representative. During this process, the parent or guardian may provide the minor's name and date of birth strictly for the purpose of executing the Event Producer's required legal documentation.

Parental Rights

Parents and legal guardians have the right to review, update, or request the deletion of any personal information provided on behalf of their child. To exercise these rights, parents may access their TACTTIX account settings or contact us directly. Please note that, as outlined in Section 5, information embedded within legally executed liability waivers cannot be deleted and must be retained by the Event Producer for liability protection.

If we learn that we have inadvertently collected personal information directly from a child under 13 without verifiable parental consent, we will take immediate steps to securely delete that information from our active systems.

9. Changes to the Privacy Policy

As the TACTTIX platform evolves, we may update this Privacy Policy from time to time to reflect changes in our data practices, new software features, or updates to legal and regulatory requirements.

Notification of Material Changes

If we make material changes to how we collect, use, or share your personal information, we will provide prominent notice before the changes take effect.

• For Event Producers: We will notify you directly via the primary administrative email address associated with your TACTTIX account, as well as through a notification dashboard within the platform.
• For Consumers: We will notify you by sending an email to the address registered to your account and by posting a prominent notice on the TACTTIX homepage and login screens.

Effective Date and Versioning

At the top of this Privacy Policy, we will always display a "Last Updated" date so you can quickly determine if the document has been revised since your last review.

Continued Use

We encourage both Event Producers and Consumers to review this Privacy Policy periodically. Your continued use of the TACTTIX platform following the posting of an updated Privacy Policy will constitute your acknowledgment and acceptance of those changes. If you do not agree with the updated terms, you must stop using the platform and may request the deletion of your account (subject to the legal waiver retention exceptions detailed in Section 5).

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how your personal information is handled within the TACTTIX platform, we encourage you to reach out to us.

Contacting KJD Digital, LLC

As the Data Processor and platform operator, you can direct your privacy and platform-related inquiries to us at:

• Email: [email protected]
• Mailing Address: KJD Digital, LLC, 1235 Providence Blvd, Ste R #520, Deltona, FL 32725

Contacting an Event Producer

Please remember that for data where the Event Producer is the Data Controller (such as event rosters or executed digital liability waivers), you may need to contact the specific Event Producer directly to exercise certain data rights. If you are unsure how to reach an Event Producer whose event you attended, you may contact us at the email address above. While we cannot modify or delete legally binding documents held on their behalf, we will do our best to forward your request to the appropriate business entity.