Privacy Policy

This Privacy Policy explains how TalleFlow, Inc. (“TalleFlow,” “we,” “our,” or “us”) collects, uses, shares, and protects personal information when you access or use our website, platform, and related services (collectively, the “Services”).

By using the Services, you agree to the collection and use of information as described in this Privacy Policy.

1. Information We Collect

a. Information You Provide Directly

We collect information you provide when you:

• Create or manage an account
• Use the Services
• Communicate with us
• Make a payment

This may include:

• Name
• Email address
• Business information
• Authentication credentials (including via Google Sign-In)
• Billing and subscription details
• Content you upload or create (documents, forms, messages, files)

b. Client & End-Client Data

When you use TalleFlow to manage your business, you may collect personal information about your own clients or end clients through client portals, contracts, forms, or other tools.

In these cases:

• You are the data controller
• TalleFlow acts as a data processor

End clients must direct data access, correction, or deletion requests to the business that invited them to use TalleFlow.

c. Automatically Collected Information

We automatically collect limited technical and usage information, including:

• IP address
• Device and browser type
• Operating system
• Log files
• Feature interactions and usage events

This information is used to operate, secure, and maintain the Services.

2. How We Use Information

We use personal information to:

• Provide, operate, and maintain the Services
• Authenticate users and secure accounts
• Process payments and manage subscriptions
• Send service-related and marketing communications
• Monitor usage and improve product functionality
• Provide customer support
• Comply with legal obligations

Marketing emails are sent by default. You may opt out at any time using the unsubscribe link included in our communications.

3. AI & Data Usage (Non-Google Data)

TalleFlow may use anonymized and aggregated data to improve internal systems and product functionality, including AI-powered features.

We do not use identifiable customer, client, or end-client data to train AI models.

AI features are assistive only and require human review before use.

4. Google User Data & API Services

TalleFlow may access Google user data only when you explicitly choose to connect Google services (such as Google Sign-In or other Google integrations).

How Google User Data Is Used

• Accessed only as required to provide the specific user-requested feature
• Used solely within the TalleFlow application
• Not used for advertising purposes
• Not sold
• Not shared, except as strictly necessary to provide the requested functionality
• Not retained longer than necessary to operate the feature
• Not used to train AI or machine learning models

Compliance Statement

TalleFlow’s use and handling of Google user data complies with:

• The Google API Services User Data Policy
• The Limited Use requirements
• CASA (Cloud App Security Assessment) standards

If there is any conflict between this section and other parts of this Privacy Policy, this section governs Google user data handling.

5. How We Share Information

We do not sell personal data.

We may share information with trusted third-party service providers only as necessary to operate the Services, including:

• Payment processors
• Authentication providers
• Email delivery services
• Analytics and monitoring tools
• Cloud infrastructure and hosting providers
• Customer support tools

All service providers are contractually limited to using personal information only to perform services on our behalf and are required to protect it.

6. Cookies & Analytics

We use cookies and similar technologies to:

• Maintain authentication
• Analyze usage and performance
• Improve the user experience

You may control cookies through your browser settings. Disabling cookies may limit certain functionality.

7. Data Retention

We retain personal information for as long as necessary to provide the Services and as described in our Terms of Service.

When an account is deleted:

• Data may be retained for a limited period in accordance with our Terms of Service
• Certain records, such as billing or legal records, may be retained as required by law

8. Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights & Choices

Depending on your location, you may have the right to:

• Access your personal information
• Request correction or deletion
• Opt out of marketing communications

Requests related to client or end-client data must be made through the business that collected the data.

Privacy-related requests may be submitted to info@talleflow.com.

10. Children’s Privacy

The Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

11. International Users

TalleFlow is based in the United States. If you access the Services from outside the United States, you consent to the transfer and processing of your information in the United States.

While we do not currently target users in the European Union, we are working toward broader compliance standards as the platform grows.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Continued use of the Services after changes become effective constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

info@talleflow.com

‍