Privacy Policy

1. Data Controller

TalnFlo Inc. ("TalnFlo," "we," "us," or "our") is the data controller responsible for your personal data. For questions about how we handle your data, contact us at [email protected].

2. Information We Collect

We collect data in two categories:

a) Information You Provide

• Name, email address, and customer type when you sign up for our beta program
• Any other information you voluntarily submit through forms or communications

b) Information Collected Automatically (with consent)

• Device type (mobile, tablet, desktop), browser name, screen resolution, and language preference
• Pages visited, time on page, scroll depth, click count, and bounce rate
• Referrer URL, UTM parameters (source, medium, campaign)
• Randomly generated session IDs (not linked to your identity)

We do not collect IP addresses, precise geolocation, financial information, or sensitive personal data.

3. Legal Basis for Processing (GDPR)

Under the EU General Data Protection Regulation (GDPR), we process your data based on:

• Consent (Art. 6(1)(a)): Analytics and marketing cookies are only activated after you explicitly opt in via our cookie banner.
• Legitimate Interest (Art. 6(1)(f)): Strictly necessary cookies for site functionality and security.
• Contract (Art. 6(1)(b)): Processing data to manage your beta signup and deliver our services.

4. How We Use Your Information

• Process your beta signup and communicate product updates
• Analyze aggregate site traffic to improve performance and content
• Measure marketing campaign effectiveness (only with your consent)
• Ensure site security and prevent abuse
• Comply with applicable laws and regulations

5. Data Sharing & Disclosure

We do not sell, trade, rent, or share your personal information with third parties for their marketing purposes. We may share data with:

• Service Providers: Trusted infrastructure providers who process data on our behalf, subject to data processing agreements
• Legal Requirements: When required by law, court order, or to protect our legal rights

6. Cookie Policy

We use cookies and similar technologies as follows:

Categories of Cookies

Managing Your Preferences

• Use the cookie settings at the bottom-left of any page to change preferences at any time
• Your browser settings can also block or delete cookies

No Cookies Before Consent

We do not set any analytics or marketing cookies until you have made an active choice. If you dismiss or reject the banner, only strictly necessary data (your consent preference) is stored.

7. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, role-based access controls, and regular security assessments. However, no method of electronic storage is 100% secure.

8. Data Retention

• Beta signup data: Retained until you request deletion or the beta program ends
• Analytics data: Automatically deleted after 12 months
• Marketing data: Automatically deleted after 6 months
• Consent records: Retained for 3 years as proof of consent (regulatory requirement)

9. Your Rights Under GDPR (EU/EEA/UK)

If you are located in the EU, EEA, or UK, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time via our cookie settings or by contacting us (does not affect prior lawful processing)
• Right to Data Portability: Receive your data in a portable format

To exercise these rights, contact [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority in your country of residence.

10. Your Rights Under CCPA/CPRA (California)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request what personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt Out: Opt out of the sale or sharing of personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

We do not sell personal information as defined under the CCPA/CPRA. We do not use sensitive personal information for purposes beyond what is disclosed in this policy.

To exercise these rights, contact [email protected]. We will verify your identity and respond within 45 days.

11. Other US State Privacy Laws

We comply with applicable state privacy laws including but not limited to:

• Virginia (VCDPA): Right to access, correct, delete, and opt out of targeted advertising
• Colorado (CPA): Right to opt out of profiling and targeted advertising
• Connecticut (CTDPA): Right to access, correct, delete, and data portability
• Other states: Applicable consumer privacy rights

12. International Data Transfers

Your data may be processed in countries outside your country of residence, including the United States. When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission where applicable.

13. Children's Privacy

Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 16, we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date. For material changes, we will provide prominent notice (such as a banner on our website). Continued use of our services after changes constitutes acceptance.

15. Contact Us

For questions, concerns, or to exercise your privacy rights:

• Email: [email protected]
• TalnFlo Inc.

We aim to respond to all requests within 30 days (or 45 days for CCPA requests).