Privacy Policy

Effective date: to be set at publication — draft prepared for review (September 2026). Operator: Tellco Voice And Data Inc. (“Tellco Labs”).

1. Overview

This Privacy Policy explains what information Talaria (“the service”) collects, why we collect it, and the choices you have. Talaria is operated by Tellco Voice And Data Inc. (“Tellco Labs,” “we,” “us”).

We have tried to write this policy in plain language and to describe what the service actually does today. We do not sell your personal information. If you have questions, contact us at hello@tellcolabs.com.

2. What We Collect

Account information

When you create an account, we collect:

• your chosen username and organization name; and
• a password, which is stored only as a one-way hash (bcrypt) — we cannot read it, and it is never stored in plain text.

The registration form includes an optional email field. At this time, an email entered there is not stored or used by the service, so please do not rely on it for communications from us.

API keys

• Talaria API keys let your applications call the service. We store only a one-way hash of each key (bcrypt). The full key is shown to you once, when it is created; it cannot be recovered later. We also keep a short prefix and usage counters so you can identify and manage your keys.
• Model provider keys (BYOM). When you bring your own model, you may give us an API key for that provider. These keys are encrypted before they are stored, using encryption keys unique to your organization. They are decrypted only briefly, in memory, when Talaria needs to make a call on your behalf, and every decryption is recorded in an audit log.

Usage data

When you make requests through the service, we keep usage records that include:

• the content of your requests (the prompts and messages you send);
• which model and provider was selected for each request;
• timestamps, token counts, and cost estimates;
• an identifier for your API key and organization; and
• outcome information used to assess response quality.

These records are what power your dashboard’s spend tracking, budgets, and analytics, and they help us improve how Talaria chooses models. Because request content is stored in usage records, please do not send information you are not comfortable storing with us. Where your organization enables Talaria’s guardrails, PII-redaction features can screen request content before it is stored.

Billing information

Paid plans are processed through Stripe:

• Stripe collects and stores your payment card details — card numbers never touch Tellco-operated servers.
• We store subscription references (your organization, Stripe customer reference, plan, and billing period) and invoice records (amount, currency, status) so we can provide the service and support you.
• Stripe may collect a billing email from you at checkout for receipts.

Technical logs

Like most services, we keep routine technical and security logs (for example, of sign-in events and errors) to operate and protect the service.

3. How We Use It

We use the information above to:

• provide and operate the service — routing your requests to the model you or Talaria selects, and powering your dashboard;
• transmit your requests to the model providers you use, so they can generate responses;
• track spend, enforce plan limits and budgets, and bill for paid plans;
• analyze usage to improve routing quality — for example, learning which models perform best for different types of requests;
• keep the service secure, investigate abuse, and respond to your support requests; and
• meet our legal and accounting obligations.

4. Retention

Usage records are kept for up to 365 days by default, after which they are purged by a retention process. Account information is kept while your account is active. Billing records are kept as required for accounting and tax purposes.

5. Sharing & Third Parties

We do not sell your personal information. We share information only as needed to run the service:

• Model providers. Your requests are forwarded to the model provider selected for each call (for example, OpenAI, Anthropic, DeepSeek, Google, or a provider you registered yourself). Those providers’ own privacy practices apply to the data they receive.
• Stripe processes payments and stores payment card details on its own systems under its own privacy policy.
• Accounting tools. Paid invoice records (including your organization name and, where provided, a billing email) may be shared with Tellco’s internal accounting systems.
• Legal compliance. We may disclose information where required by law, or to protect the rights, property, or safety of Tellco Labs, our customers, or others.

6. Security

We take reasonable measures to protect the information we hold, including:

• passwords and API keys stored as one-way hashes;
• provider API keys encrypted at rest with per-organization encryption keys, with the master key material split between an environment variable and a protected server file (chmod 600), and every key decryption written to an append-only audit log;
• encryption of traffic between your applications and the service in transit;
• tenant isolation — each organization’s data is kept separate from every other organization’s; and
• limited, role-based access to production systems for Tellco staff.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your Rights

If you are in Canada, PIPEDA and comparable provincial laws give you rights to access the personal information we hold about you, to correct inaccuracies, and to withdraw consent where applicable. You can also request that we delete your account and its data. To exercise any of these rights, email hello@tellcolabs.com and we will respond within 30 days.

8. Where Data Is Stored

Customer data is stored on Tellco-operated infrastructure. We do not currently make specific geographic hosting commitments.

9. Cookies

When you sign in to the dashboard, we set a secure session cookie so you stay signed in. We do not use advertising or cross-site tracking cookies.

10. Children

Talaria is intended for organizations and adults. It is not directed to children under 13, and we do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and update the effective date above. We encourage you to review it periodically.

12. Contact

Privacy questions or requests: hello@tellcolabs.com — Tellco Voice And Data Inc. (Tellco Labs). Sales and plan inquiries: sales@tellcolabs.com.