Tackfy

Privacy Policy

Last updated 1 September 2026

Tackfy is an internal contact management tool operated by Express Print (Singapore). It gathers business contact details from systems we already control, checks whether the email addresses are deliverable, and copies them into our email marketing platform.

This policy explains what the tool accesses, what it keeps, and who it shares it with.

Who uses Tackfy

Tackfy is not a public service. Access is restricted to staff of Express Print by password. We do not offer accounts to anyone else, and there is no sign-up.

What Tackfy accesses

Google account data. With your permission, Tackfy connects to one Gmail mailbox using the gmail.readonly scope. It reads only the address headers of messages — From, To, Cc, Reply-To and Date — in the Inbox and Sent folders.

Tackfy does not read message bodies, does not open or download attachments, and cannot send, delete, label or alter anything in the mailbox. Access is read only, and no message content is stored at any point.

Microsoft account data. Where a Microsoft mailbox is connected, Tackfy uses the Microsoft Graph API with the Mail.Read permission and reads the same address fields on the same read-only basis.

Payment platform data. Tackfy reads customer records from our own Stripe and HitPay accounts using read-only API keys limited to customer lists. It retrieves names, email addresses and phone numbers. It has no access to card details, bank details, payment amounts or the ability to move money.

Uploaded files. Staff may upload CSV files of contacts.

What Tackfy stores

For each contact, Tackfy keeps only what is needed to contact them and to avoid duplicates:

Data is held in a Cloudflare D1 database in Cloudflare's network. Nothing is sold, rented or made available for advertising.

Who we share it with

Each of these processes the data on our behalf under their own terms. We share nothing with anyone else, and we do not sell contact data.

Google API Services User Data Policy. Tackfy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data obtained from Gmail is used solely to build our own contact list. It is never used for advertising, never sold or transferred to others except as described above, and is not used to train generalised artificial intelligence models. No human reads Gmail data except as needed to operate and support the tool, and only with permission.

How long we keep it

Contact records are kept while they remain useful for business communication, and are deleted when they are not. Deleting a contact in Tackfy removes it permanently from our database, though a copy may remain in Systeme.io until deleted there too.

Withdrawing access

The owner of a connected mailbox can revoke Tackfy's access at any time at myaccount.google.com/permissions for Google, or at account.live.com/consent/Manage for Microsoft. Tackfy stops reading the mailbox immediately. Contacts already collected stay in our database unless deletion is requested.

Your rights over your information

If you have been in touch with Express Print and want to know what we hold, or want it corrected or erased, write to mail.expressprint@gmail.com and we will action it. Every marketing email we send also carries an unsubscribe link.

Security

Access to Tackfy requires a password. Credentials for connected services are held as encrypted secrets and are never shown in the interface. All connections use HTTPS.

Changes

If this policy changes, the date at the top of this page changes with it.

Contact

Questions about this policy: mail.expressprint@gmail.com