This Privacy Policy explains how TalleFlow, Corp. (“TalleFlow,” “we,” “our,” or “us”) collects, uses, shares, and protects personal information when you access or use our website, platform, and related services (collectively, the “Services”).By using the Services, you agree to the collection and use of information as described in this Privacy Policy.
1. Information We Collect
a. Information You Provide Directly
We collect information you provide when you:
Create or manage an account
Use the Services
Communicate with us
Make a payment
This may include:
Name
Email address
Business information
Authentication credentials (including via Google Sign-In)
Billing and subscription details
Content you upload or create (documents, forms, messages, files)
TalleFlow Pay details you provide or authorize (for example payout account information via Stripe Connect, and payment cards saved for job deposits, balances, or provider recovery charges, with consent recorded in the product)
b. Client & End-Client Data
When you use TalleFlow to manage your business, you may collect personal information about your own clients or end clients through client portals, contracts, forms, or other tools.
In these cases:
You are the data controller
TalleFlow acts as a data processor
End clients must direct data access, correction, or deletion requests to the business that invited them to use TalleFlow.
c. Automatically Collected Information
We automatically collect limited technical and usage information, including:
IP address
Device and browser type
Operating system
Log files
Feature interactions and usage events
This information is used to operate, secure, and maintain the Services. Some information is collected automatically through cookies and similar technologies. On the marketing website (talleflow.com), non-essential cookies and tags, including Google Analytics cookies, the Meta Pixel and the Tawk.to live chat widget, load only after you opt in via our cookie consent banner (“Manage settings”) or the cookie preferences icon; see our Cookies Policy. In the TalleFlow web application and client portal, product analytics (including Amplitude and session replay when enabled) and optional support tools (including live chat where enabled) run only after you opt in via the in-product cookie preference controls. On the marketing website, live chat is provided by Tawk.to and loads only after Marketing consent, as described in our Cookies Policy. You can change your preferences at any time in Account and Security (Cookie preferences) in the web app, or via Cookie preferences in the client portal footer.
d. Mobile applications
We offer a TalleFlow mobile application for iOS. An Android version may be available in beta. The apps use the same account system as the web Services. They may collect account identifiers, device type, app version, and usage events needed to operate and secure the app, subject to the same purposes and retention rules in this Privacy Policy. App Store and Google Play disclosures (where applicable) describe platform-level privacy labels; this Privacy Policy governs how TalleFlow processes personal information in the apps.
2. How We Use Information
We process personal information under one or more lawful bases under applicable law (for example: performance of a contract; legitimate interests that are not overridden by your rights; consent where required; and legal obligation). We maintain an internal record of processing that maps each purpose to its lawful basis; you may request a summary by contacting[email protected]. We use personal information to:
Processing purposes (summary)
The table below summarizes the main purposes for which we process personal information, the categories of data involved, our primary lawful basis under GDPR (where applicable), typical recipients/processors, and retention. This is a summary; details are available on request at[email protected].
International transfers: Personal data may be processed in the United States and other countries where we or our providers operate. Where GDPR requires it, we use appropriate safeguards (such as SCCs, adequacy, and/or EU–U.S. Data Privacy Framework for certified providers). Ask[email protected]for the mechanism used for a specific provider.
Provide, operate, and maintain the Services
Authenticate users and secure accounts
Process payments and manage subscriptions, including TalleFlow Pay job payments, holds and releases to providers, refunds and related recovery charges, and payout account setup via Stripe Connect
Send service-related and marketing communications
Monitor usage and improve product functionality
Provide customer support
Comply with legal obligations
TalleFlow Pay (marketplace jobs)
When you use TalleFlow Pay, we process payment and payout information needed to collect job payments from hirers, hold and release amounts to providers, handle refunds and disputes under our Terms, and (for providers) charge a saved card for refunds, chargebacks, or fees the provider causes, where the provider has agreed in the product. Card numbers are handled by Stripe; TalleFlow stores payment-method references and related metadata, not full card numbers. Payout accounts are set up through Stripe Connect. Regular invoicing is unchanged and may use separate Stripe account settings from TalleFlow Pay.
Marketing emails are sent only to people who have opted in to receive them. You may opt out at any time using the unsubscribe link included in our communications.
Customer business data (your workspace)
When you use TalleFlow to run your business, data you enter or generate in the Services—such as CRM contacts, projects, documents, bookings, invoices, pricing, packages, and messages—is processed to provide the features you configure. We treat this as your business data.
We do not sell your business data or your clients’ personal information.
We do not use your business data (including booking, pricing, or invoice information) to create public marketing content, industry benchmark reports, pricing guides, or similar publications, unless you explicitly opt in to a separate program that we describe at the time of enrollment.
We may use de-identified and aggregated information derived from use of the Services solely for internal product improvement, security, reliability, and analytics. We design these aggregates so they do not identify you, your business, or your clients in published outputs.
3. AI & Data Usage (Non-Google Data)
TalleFlow may use anonymized and aggregated data to improve internal systems and product functionality, including AI-powered features. Such use is limited to internal operations and is not used to create public industry reports, benchmark publications, pricing guides, or other marketing content unless you explicitly opt in to a separate program as described in Section 2.
We do not use identifiable customer, client, or end-client data to train AI models.
AI features are assistive only and require human review before use.
4. Google User Data & API Services
TalleFlow may access Google user data only when you explicitly choose to connect Google services (such as Google Sign-In or other Google integrations).
How Google User Data Is Used
Accessed only as required to provide the specific user-requested feature
Used solely within the TalleFlow application
Not used for advertising purposes
Not sold
Not shared, except as strictly necessary to provide the requested functionality
Not retained longer than necessary to operate the feature
Not used to train AI or machine learning models
Compliance Statement
TalleFlow’s use and handling of Google user data complies with:
The Google API Services User Data Policy
The Limited Use requirements
CASA (Cloud App Security Assessment) standards
If there is any conflict between this section and other parts of this Privacy Policy,this section governs Google user data handling.
5. Meta / Facebook & Instagram User Data
TalleFlow may access Meta (Facebook and Instagram) data only when you explicitly choose to connect your Facebook Page and/or Instagram Business account to the Services.
How Meta user data is used
When you connect Meta, we may access, with your authorization:
Facebook Page and Instagram Business account information
Posts
Messages
Comments
We use this data only to provide the Meta-connected features you enable in TalleFlow (for example, viewing and managing social messages and related content in your workspace).
Accessed only as required to provide the specific user-requested feature
Used solely within the TalleFlow application
Not used for TalleFlow’s own advertising purposes
Not sold
Not shared, except as strictly necessary to provide the requested functionality or as required by law
Not retained longer than necessary to operate the feature
Not used to train AI or machine learning models
Disconnecting and deletion
If you disconnect Meta from TalleFlow, we remove the access tokens used for that connection. Meta-linked social messages and related Meta data stored for the feature are deleted when you disconnect, when you request deletion, or when Meta sends a data deletion request for your Meta user, subject to any short processing window needed to complete the deletion.
For instructions on requesting deletion of Meta data associated with your TalleFlow account, see our Data Deletion page at https://talleflow.com/data-deletion.
Conflict rule
If there is any conflict between this section and other parts of this Privacy Policy regarding Meta user data, this section governs Meta user data handling.
6. Connected AI tools (MCP)
TalleFlow may offer a Model Context Protocol (MCP) connection so that, on paid plans only, you can connect supported AI assistants (for example, tools listed in our product documentation) to your TalleFlow workspace.
When you enable an MCP connection:
Access is user-initiated and limited to the scopes you authorize for that connection
The connected AI tool may receive workspace data you choose to expose through that connection in order to answer your prompts or take actions you request
We do not use that connection to sell your data or to train public AI models on your identifiable business or client data
You can disconnect the MCP connection in product settings; after disconnect, new access through that connection stops
Availability is limited to paid plans as described on our pricing and product pages
Your use of any third-party AI assistant is also governed by that provider’s terms and privacy policy. TalleFlow is not responsible for how a third-party AI provider processes data once you have authorized the connection.
7. Affiliate and referral program
If you join our affiliate or referral program (see https://talleflow.com/refer), or you sign up through an affiliate link, we process referral identifiers and related contact details so we can attribute referrals, apply eligible discounts, and pay affiliates. We use FirstPromoter (or a successor affiliate platform) as a processor for this program. Affiliate cookies or similar identifiers may be set as described in our Cookies Policy when you use referral links. We do not sell personal information in connection with the affiliate program.
8. How We Share Information
We do not sell personal data.
We do not sell personal data. We share information with trusted third-party service providers (processors) only as necessary to operate the Services. Examples include:
Payment processors (e.g., Stripe), including Stripe Connect for TalleFlow Pay payout accounts
Authentication providers (e.g., Clerk)
Email delivery services (e.g., Resend)
Analytics and monitoring tools (e.g., Amplitude; error monitoring providers where configured)
Cloud infrastructure and hosting providers (e.g., Railway, Amazon Web Services / S3, MongoDB Atlas)
Website hosting and forms (e.g., Framer)
Edge computing (e.g., Cloudflare)
Productivity tools (e.g., Google Workspace)
Meta Platforms (Facebook / Instagram), only when you connect those accounts to use Meta-linked features
Customer support and product feedback tools (as configured from time to time)
Affiliate platform (e.g., FirstPromoter), when you participate in our referral program or arrive via an affiliate link
9. Cookies & Analytics
We use cookies and similar technologies to support core functionality, analyze website performance, and measure marketing effectiveness.
Essential cookies are required for the Services to function properly and cannot be disabled.
Essential cookies are required for the Services to function and cannot be disabled. On the marketing website, analytics and advertising cookies are described in our Cookies Policy and are controlled by the website cookie settings where available. In the TalleFlow web application and client portal, product analytics tools (including Amplitude and session replay when enabled) require your opt-in through the cookie preference banner and Cookie preferences controls. You may withdraw consent at any time using those same controls.
For more detailed information about how we use cookies and similar technologies, please see our Cookie Policy.
10. Data Retention
When an account is deleted:
Data may be retained for a limited period in accordance with our Terms of Service
Certain records, such as billing or legal records, may be retained as required by law
11. Data Security
We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Your Rights & Choices
Depending on your location (including where GDPR or similar laws apply), you may have the right to:
Access your personal information and receive a copy (data portability where applicable)
Request correction, deletion, restriction of processing, or objection to certain processing
Opt out of marketing communications (and withdraw consent where processing is based on consent)
Requests related to client or end-client data must be made through the business that collected the data. You may also contact us at[email protected]to exercise privacy rights. For cookie and analytics preferences: use Cookie preferences in the TalleFlow web app (Account and Security) or the client portal footer; on the marketing website, use the cookie consent banner (“Manage settings”) or the cookie preferences icon.
Privacy-related requests may be submitted to <a href="mailto:[email protected]“>[email protected]</a>.
13. Children’s Privacy
The Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.
14. California Privacy Rights
TalleFlow does not sell personal information.
We may share limited personal information with advertising partners for marketing and measurement purposes only where permitted by law and only with your consent.
California residents have the right to opt out of the sharing of personal information for targeted advertising. You may exercise this right through marketing-website cookie settings (including “Manage settings” in the cookie banner or the cookie preferences icon), by enabling Global Privacy Control (GPC) in your browser where supported (we honor GPC as a request to deny non-essential cookies on our marketing site), or by contacting us at[email protected].
15. International Users
TalleFlow, Corp. is based in the United States. If you access the Services from outside the United States, your information may be processed in the United States and other countries where we or our service providers operate (including providers listed in Section 5). Where required by applicable law (including GDPR Chapter V), we rely on appropriate transfer safeguards such as an adequacy decision, Standard Contractual Clauses (SCCs), and/or the EU-U.S. Data Privacy Framework for certified providers-not on consent to transfer alone. You may request details of the transfer mechanism used for a specific provider by contacting[email protected].
Where GDPR applies, we are committed to complying with applicable data protection laws. If an EU Article 27 representative is required for our activities, we will appoint one and publish their contact details here and in our Privacy Policy contact section. Until then, privacy rights and GDPR inquiries should be sent to[email protected].
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Continued use of the Services after changes become effective constitutes acceptance of the updated policy.
17. Contact Us
If you have questions about this Privacy Policy, our data practices, privacy rights requests, international transfers, or (where applicable) our EU Article 27 representative once appointed, please contact us at:
[email protected]
Free resources and follow up emails from our website
This section covers the free resources (checklists and templates) you can request on talleflow.com. TalleFlow, Corp., 7315 E Saddlehorn Way, Orange, CA 92869, USA, is responsible for this information. Contact: info@talleflow.com.
What we collect. Your email address, the answer you chose (for example, “chasing deposits”), whether you ticked the box for follow up emails, the wording of that box, the date and time, and the page you were on. We don’t ask for your name or phone number.
Why, and our legal basis.
To send the resource you asked for. You asked us to, so we send it at your request.
To send two short follow up emails on the same topic, the last of which explains how TalleFlow can help. Only if you ticked the box. This is based on your consent, which you can withdraw anytime by unsubscribing.
To keep a record of your sign up and your choice, so we can show what you agreed to. This is our legitimate interest in proving consent and handling your requests.
We don’t send you anything else unless you separately agree to it.
Email activity. Our emails contain a small image and tracked links that tell us whether an email was opened and which links were clicked, along with the time and basic device information. We use this only to see which emails are useful. Blocking images in your email app stops open tracking, but link clicks are still recorded.
Who handles it. These service providers process your information for us, under their data processing terms:
Framer (website hosting and form processing, including spam checks)
Cloudflare (a small service that passes your sign up to our email provider)
Resend (stores your contact details and sends our emails)
Google (our email inbox at info@talleflow.com, where your replies arrive)
Some of them process data in the United States. For visitors in the EU and UK, see “International Users” (Section 12) for the safeguards we use.
Sale and sharing. We don’t sell this information, and we don’t share it for cross-context behavioral advertising.
How long we keep it. While you’re on the list, and no longer than 24 months after you last asked for a resource. Then we delete your details. If you unsubscribe, we keep only your email address and the date on a “do not email” list, so we can respect your choice.
How to unsubscribe. Every email has an unsubscribe link, and your email app may also show an Unsubscribe button. You can also email info@talleflow.com. Unsubscribing stops all of these emails.
Your rights. Depending on where you live, you can ask to access, correct, delete or receive a copy of your information, object to or restrict how we use it, and withdraw consent at any time. Withdrawing doesn’t affect emails already sent. Email info@talleflow.com, and we’ll reply within one month. If you’re in the EU or UK, you can also complain to your local data protection authority (in the UK, the Information Commissioner’s Office).
Questions about this Privacy Policy?