Privacy Policy

This is a working draft provided for product development. It is not legal advice and has not been reviewed by counsel. Replace with an attorney-reviewed policy before commercial launch.

1. What we collect

Account information (name, email), organization and business information you provide, content you upload to your knowledge base, guest conversation data processed on behalf of your organization, and usage and device information needed to operate the service.

2. How we use it

To provide and secure the service, process AI requests against your own organization's knowledge, send transactional communications, bill subscriptions, and improve platform reliability. We do not sell personal information and we do not use one customer's data to serve another.

3. Processors we rely on

Infrastructure and subprocessors include Supabase (database, authentication, storage), Vercel (hosting), OpenAI (AI processing), Stripe (payments), Resend (email), and Twilio (SMS), each receiving only the data needed for their function.

4. Guest data

When your organization uses TELLIIANO to communicate with guests, your organization is the controller of that data and TELLIIANO is a processor. The platform includes tools for exporting and deleting guest data to support privacy requests you receive.

5. Retention

Data is retained while your subscription is active and for 30 days after termination for export, unless you request earlier deletion. Audit logs may be retained longer where required for security.

6. Security

Row-level tenant isolation, encryption in transit and at rest, server-side authorization, and append-only audit logging. See our Security page for details.

7. Your rights

Depending on your jurisdiction you may have rights to access, correct, export, or delete personal information. Contact privacy@telliiano.ai (placeholder address).

8. Cookies

We use strictly necessary cookies for authentication and session management. Optional analytics cookies are used only with consent where required.