Updated 2026-09-30
GDPR and Privacy Rights
How access, correction, export, deletion, objection, restriction, and support requests work.
PRAXIS is part of TACITUS, an independent experimental project operated by Giulio Catanzariti. No TACITUS legal entity has been incorporated. Institutional terms, data handling and contracting parties must be established before an evaluation. Nothing on this page excludes rights or liabilities that applicable law does not allow to be excluded.
Rights Requests
Where GDPR or similar privacy law applies, users may request access, correction, export, deletion, restriction, objection, or portability for personal data processed by PRAXIS.
Requests can be sent to security@tacitus.me. PRAXIS may need to verify account ownership before acting on a request.
Workspace and Generated Data
Saved context, uploaded documents, source receipts, conversations, generated outputs, and audit trails may contain user-provided or user-derived personal data.
Deletion and export requests must identify their scope across workspace records, documents, outputs and operational records. Any legal, security, billing, abuse-prevention or backup exception must be assessed and communicated rather than inferred from deleting a sign-in identity.
International Processing
The current production baseline uses United States infrastructure unless a separate enterprise arrangement states otherwise.
EU residency, transfer-impact review, and expanded DPA support remain tracked launch-readiness items for regulated deployments.