Privacy Policy

Tallium AI is a multi-tenant business software platform operated by Tallium Technologies FZ-LLC, Dubai, United Arab Emirates. Each customer organisation (a "workspace") has its own separate account and data.

For any privacy question, data request or complaint, email support@tallium.online. We aim to respond within 30 days.

For the business records you enter into Tallium AI, your organisation is the data controller and Tallium AI acts as a data processor on your instructions. For your own account and billing details, and for the website, Tallium AI is the controller.

• Account data: your name, business name, work email, phone number, role and authentication credentials.
• Business data you enter: invoices, transactions, products, stock, customers, contacts, appointments and similar records you or your team choose to store in Tallium AI.
• Billing data: subscription plan, billing contact and payment status. Card details are handled by our payment provider and are not stored on Tallium AI servers.
• Usage and technical data: device and browser type, IP address, approximate country, log timestamps and the actions taken in the product, used to keep the service secure, diagnose faults and improve it.
• Support data: the content of messages you send us by email, chat or WhatsApp.
• Google user data: only if you choose to connect a Google Account. See section 7 for the exact scopes, uses and retention.

• To provide, operate, secure and support the Tallium AI platform and the features you switch on.
• To process billing, manage your subscription and send service notices such as receipts, security alerts and downtime notifications.
• To diagnose faults, prevent abuse and protect the service and its users.
• To improve the product, using aggregated or de-identified usage data.
• To send product updates and marketing only where you have opted in. You can opt out at any time using the link in the message.

We do not sell personal data. We do not use your business data or any Google user data to serve advertising, and we do not use it to train generalised or standalone artificial intelligence models.

We process personal data to perform our contract with you, to meet legal and tax obligations, on the basis of your consent where consent is required (for example when you connect a Google Account or accept non essential cookies), and for our legitimate interest in keeping the service secure and improving it.

We share personal data only with service providers who help us run Tallium AI, and only under contract and on our instructions. Categories include cloud hosting and infrastructure, email delivery, payment processing, customer support tooling, error monitoring and product analytics.

We also share data where we are required to by law, and we may transfer data as part of a merger, acquisition or sale of assets, in which case we will give notice before your data becomes subject to a different privacy policy.

A current list of sub-processors is available on request from support@tallium.online.

• Data is encrypted in transit with TLS and encrypted at rest. Access by Tallium AI staff is restricted to the people who need it to operate the service and support you, and is logged.
• OAuth tokens and other third-party credentials are stored encrypted and are never exposed to other workspaces.
• Account and business data is retained for as long as your workspace is active.
• After cancellation, data is retained for 30 days so you can export it, and is then deleted from live systems. Encrypted backups are rotated and expire within 90 days.
• We may retain a limited set of records for longer where law requires it, for example invoicing and tax records.

Connecting a Google Account is entirely optional. Tallium AI works fully without it. If an administrator of your workspace chooses to connect your company Google Account, Tallium AI can create meetings for you, and this section describes exactly what we access, why, how long we keep it and how to revoke it.

7.1 The Google scope we request

Tallium AI requests a single Google OAuth scope, https://www.googleapis.com/auth/calendar.events, which allows Tallium AI to view and edit events on the calendars of the connected Google Account.

We request this scope because Tallium AI creates the calendar event for a meeting that a user or a customer books in Tallium AI, and generates the Google Meet video link that is attached to that event. This cannot be done with a read-only or free/busy scope, because a Meet conference link can only be created as part of writing a calendar event. Tallium AI does not request Gmail, Drive, Contacts or any other Google scope.

7.2 What Tallium AI does with it

• Creates calendar events on the connected company Google Account for meetings, demos and appointments booked through Tallium AI.
• Generates a Google Meet conferencing link on those events, so the organiser and attendees have a working video link.
• Adds the attendees chosen in Tallium AI to those events, so Google sends them the invitation, and updates the attendee list when it changes in Tallium AI.
• Updates an event when the meeting is rescheduled or its details change in Tallium AI, and cancels or deletes the event when the meeting is cancelled in Tallium AI.
• Reads back the events Tallium AI created, and the busy times on the connected calendar, so that Tallium AI can show the correct meeting status and avoid double booking a time slot.

Tallium AI stores only what it needs to keep the calendar and Tallium AI in sync: the OAuth tokens for the connected account, the Google account identifier and calendar identifier, and, for each meeting Tallium AI created, the Google event identifier, the Meet link, the start and end time, the title and the attendee email addresses that were entered in Tallium AI.

Tallium AI does not copy, index or store the contents of unrelated calendar events on the connected account. We do not access Google user data for any purpose other than providing these meeting features to the workspace that connected the account, and Google user data is never shared between workspaces.

7.3 Google API Services User Data Policy and Limited Use

In line with those Limited Use requirements, Tallium AI:

• Uses Google user data only to provide and improve the user-facing calendar and meeting features described in this section.
• Does not transfer Google user data to third parties except as necessary to provide and improve those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to users.
• Does not use Google user data for serving advertising, and does not sell Google user data.
• Does not use Google user data to develop, improve or train generalised or standalone artificial intelligence or machine learning models.
• Does not allow humans to read Google user data, unless we have your explicit consent for specific messages, it is necessary for security purposes such as investigating abuse, it is required to comply with applicable law, or the data is aggregated and de-identified for internal operations.

7.4 Retention and deletion of Google user data

• OAuth access and refresh tokens are stored encrypted and are held only while the Google connection is active.
• Disconnecting Google in Tallium AI immediately revokes and deletes the stored tokens, and the stored Google event identifiers and Meet links are deleted within 30 days.
• Revoking access from your Google Account has the same effect: the tokens stop working and are removed on the next attempted sync.
• If your workspace is closed, all Google user data held by Tallium AI is deleted within 30 days, and purged from encrypted backups within 90 days.
• Calendar events already created on your Google Account belong to that account. They stay on your Google Calendar until you delete them there, and are not affected by disconnecting Tallium AI.
• You can also ask us to delete Google user data at any time by emailing support@tallium.online.

7.5 How to revoke Tallium AI's access

• In Tallium AI: open Settings, then Integrations, then Google Calendar, and choose Disconnect.
• In your Google Account: go to https://myaccount.google.com/permissions, select Tallium AI, and choose Remove access.

Revoking access stops Tallium AI creating or updating any further calendar events. Meetings already booked in Tallium AI keep their existing Meet links.

A fuller description of the integration, including what a reviewer or an administrator sees at each step, is on the Google Calendar and Meet integration page.

Tallium AI is operated from the United Arab Emirates and uses cloud infrastructure that may process data in other countries. Where personal data is transferred across borders, we use providers that offer appropriate safeguards and contractual data protection terms.

Subject to applicable law, you may request access to the personal data we hold about you, ask us to correct or delete it, object to or restrict certain processing, withdraw a consent you previously gave, and request a copy of your data in a portable format. You can export your business data from within Tallium AI at any time.

To exercise any of these rights, email support@tallium.online. If you are an end user of a Tallium AI customer, we may refer your request to that customer, who controls the data.

Tallium AI is a business product and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.

We use essential cookies for login and security, and analytics and preference cookies where you consent. See the Cookie Policy for detail and for how to change your choice.

We may update this policy as the product changes. The date at the top of this page shows the last update. If a change materially affects how we handle your data, or changes what we do with Google user data, we will notify you in the product or by email before it takes effect.