Privacy Policy

Talklen ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have under applicable data protection laws including the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA), and the Australian Privacy Act 1988.

If you have questions about this policy, contact us at privacy@talklen.com.

1. Who we are

Talklen is a SaaS platform that helps professionals create AI-ready public pages with an AI concierge. We provide:

• A public profile page at your own address (e.g., talklen.com/@yourname)
• An AI concierge that answers visitor questions from your verified knowledge
• Knowledge management tools for content you publish
• Lead capture and visitor feedback features

2. What data we collect

2.1 Account data (from you)

• Email address
• Name
• Username (optional)
• Password hash (if you register with email/password)
• Google ID (if you register with Google OAuth)

2.2 Profile data (from you)

• Professional name, title, company, location
• Bio, experience, photo URL
• Booking URL, contact links (LinkedIn, email, website, phone, address)
• Knowledge items and documents you publish (text content you author)

2.3 Visitor data (from your visitors)

• Messages sent to your AI concierge
• Enquiry form submissions (name, email, and optional fields you enable)
• Visitor feedback and ratings on AI responses
• IP address and user agent (for rate limiting and security)

2.4 Billing data

• Subscription plan and status
• Payment processing is handled by Paddle — we do not store credit card numbers
• Billing transaction records (amounts, dates, plan changes)

2.5 Usage data

• Page view counts (aggregated, no individual visitor tracking)
• AI conversation logs (to serve the chat and improve response quality)
• Knowledge item click and interaction statistics

3. How we use your data

4. AI processing

When visitors send messages to your AI concierge, those messages are processed by AI models to generate responses. Specifically:

• Visitor messages are combined with your published knowledge items to generate contextual responses
• We use Alibaba Cloud Model Studio (Qwen) as our AI model provider; inference runs in mainland China
• We do not use your messages or your knowledge items to train AI models, and we do not subscribe to any provider product whose terms license your content for model improvement
• Conversation logs are stored to serve the chat interface and for you to review visitor interactions

As a Talklen user (data controller for your profile), you decide what knowledge to publish. The AI concierge only responds from knowledge you have authored and published — it does not fabricate information.

5. Third-party service providers

We use the following processors to deliver our services:

All processors are contractually bound to protect your data and use it only to provide their services to us.

6. Data retention

• Account data: retained for the lifetime of your account, plus 30 days after deletion request
• Conversation logs: retained for the lifetime of your account
• Billing records: retained for 7 years (tax and legal obligations)
• Visitor messages: retained as part of conversation logs; deleted when your account is deleted

7. Your rights

Depending on your location, you may have the following rights:

• Access: request a copy of the personal data we hold about you
• Rectification: correct inaccurate data (you can edit your profile and knowledge directly)
• Erasure: request deletion of your account and all associated data
• Portability: receive your data in a machine-readable format
• Restriction: request that we limit processing of your data
• Objection: object to processing based on legitimate interest
• Withdraw consent: where processing is based on consent, withdraw it at any time

California residents (CCPA): You have the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information.

To exercise any of these rights, contact us at privacy@talklen.com or use the account deletion feature in your settings.

8. Where your data is processed

Our application and database run in the United States (Virginia). Concierge AI inference is provided by Alibaba Cloud Model Studio (Qwen), which processes each message in mainland China. If you use Talklen from another country, your data is still processed in those locations.

9. Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (TLS/HTTPS)
• Password hashing with bcrypt
• JWT-based authentication with short-lived tokens
• Rate limiting on public endpoints
• Regular security reviews

10. Cookies

We use only strictly necessary cookies and local storage for authentication (JWT tokens). We do not use tracking cookies, analytics cookies, or marketing cookies. No cookie consent banner is required because no non-essential cookies are used.

11. Children's privacy

Our services are not directed to individuals under 16 (or 13, depending on jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our website. The "Last updated" date at the top reflects the most recent revision.

13. Contact us

If you have questions about this Privacy Policy or wish to exercise your data protection rights:

• Email: privacy@talklen.com
• Website: talklen.com