Privacy Policy

This Privacy Policy explains how PM TECHNOLOGIES ("Talko AI", "we", "us") collects, uses, discloses and safeguards personal information when you use our website and platform (the "Service"). By using the Service you agree to the practices described here.

For information about your own account and use of the Service (such as your name, email and billing details), Talko AI acts as the data controller.

For the personal data of your end-customers that flows through the Service — the contacts and conversations on your connected WhatsApp, Instagram, Messenger and web-chat channels, and the comments and reviews on your connected YouTube channel and Google Business Profile — you are the data controller and Talko AI acts as your data processor, processing that data on your instructions to provide the Service.

• Account information: name, business name, email, phone, password (stored hashed), and the industry, team size and use-case details you provide at sign-up.
• Billing information: plan, subscription status and payment metadata. Card details are handled by our payment processor and are not stored by us.
• Channel & integration data: the credentials, API keys and OAuth tokens you connect (encrypted at rest), and the messages, contacts and media exchanged on your connected channels — including comments and video metadata from a connected YouTube channel, and reviews and business-location data from a connected Google Business Profile.
• AI keys: the AI provider keys you supply, stored encrypted and used only to generate replies for your account.
• Usage data: log data, device and browser information, IP address, feature usage and diagnostic information.
• Cookies and similar technologies, as described in our Cookie Policy.

• To provide, operate, secure and improve the Service.
• To authenticate users, manage accounts and process billing.
• To generate AI responses using the keys and knowledge base you provide.
• To send service, security and transactional communications, and — where permitted — product updates you can opt out of.
• To detect, prevent and address fraud, abuse and security or technical issues.
• To comply with legal obligations and enforce our terms.

Where applicable law requires a legal basis, we rely on: performance of our contract with you; our legitimate interests in operating and securing the Service; your consent (which you may withdraw); and compliance with legal obligations.

We do not sell personal information. We share information only as needed to run the Service, with sub-processors and partners that are bound by appropriate confidentiality and data-protection obligations, including:

• Meta Platforms — to send and receive messages and comments on WhatsApp, Instagram and Messenger.
• Google — to read, post and moderate comments via YouTube API Services on a YouTube channel you connect, and to read and reply to reviews via the Google Business Profile APIs on a Business Profile you connect.
• AI providers you choose (such as Google Gemini, OpenAI or Anthropic) — to generate replies using your own API key, billed to your provider account.
• OpenAI, L.L.C. — to screen outbound messages and uploaded images against our content-safety rules before they are sent. This check runs on our key for every business, separately from the AI provider you choose for replies.
• Payment processors (such as Stripe or Razorpay) — to handle subscriptions and payments.
• Vercel Inc. — application hosting.
• Supabase, Inc. — managed database and file storage.
• Professional advisers, and authorities where required by law or to protect rights and safety.

We may also disclose information in connection with a merger, acquisition or sale of assets, subject to this Policy.

Requests from public authorities. We may disclose personal information to courts, regulators, law-enforcement or other public authorities where we are legally required to do so. We assess each request for legal validity and scope, disclose only what the request compels rather than the wider account, keep a record of what was disclosed and to whom, and notify the affected business unless we are legally prohibited from doing so. We have not received a national-security request for personal information.

Where you connect a YouTube channel, Talko AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. Data obtained through YouTube API Services is also subject to the Google Privacy Policy (https://policies.google.com/privacy), and your use of a connected YouTube channel is subject to the YouTube Terms of Service (https://www.youtube.com/t/terms).

We use YouTube API Services and Google Business Profile data only to provide the comment-automation, moderation and review-reply features you enable for your own connected channel and Business Profile — never to serve ads, to train generalised AI or machine-learning models, or for any purpose you have not requested. Access tokens are stored encrypted and are used solely on your instructions.

Talko Copilot is our optional Chrome extension. It is a client of your own Talko AI workspace: it communicates only with our API over HTTPS, using a workspace API key you create and paste in yourself, and it sends nothing to any third party.

• Stored on your device only: your workspace API key and your capture preferences, held in the browser's extension storage. Uninstalling the extension removes them.
• Sent to your workspace, and only when you act: the text you highlight, the contact details you choose to keep after pressing “Scan page”, the address of the page they came from, and the messages, tags, notes, pipeline changes and orders you create from the extension.
• Not collected: your browsing history, your page contents, cookies, form data, or anything from a page you have neither selected yourself nor asked the extension to scan.

The extension does not monitor the websites you visit and does nothing in the background. It reads a page in exactly two situations, both of which you start yourself. When you highlight text, its content script offers an action on that selection. When you press “Scan page”, it looks once through the visible text of the tab in front of you for names, phone numbers and email addresses, and lists what it found so you can review it — those results stay in the extension window and only the rows you tick are sent to your workspace; the rest are discarded when you close it. Nothing is captured, drafted, saved or sent without your click.

It does not act on your behalf inside WhatsApp, Instagram, Facebook, LinkedIn or any other platform — messages are sent through those platforms' official APIs by your Talko AI workspace, subject to their messaging policies.

Leads and conversations created through the extension are stored in your own workspace and are treated exactly like data created in the portal: you remain the data controller and we act as your processor, as described in section 2. We do not sell extension data, use it for advertising, use it to train generalised AI models, or use it for any purpose other than providing the features you invoke.

PM TECHNOLOGIES is established in India, and your information may be processed outside your own country. In particular, the AI, hosting and content-safety providers named in section 6 — Anthropic, PBC, OpenAI, L.L.C., Google LLC and Vercel Inc. — are established in the United States and process data there. Our managed database and file storage are provided by Supabase, Inc. in the hosting region configured for our workspace.

Where we transfer personal data internationally, we use appropriate safeguards, such as standard contractual clauses, where required by applicable law.

We retain personal information for as long as your account is active or as needed to provide the Service, and thereafter only as required to comply with legal obligations, resolve disputes and enforce agreements. You can request export or deletion of Your Data; on account termination we delete or anonymise data within a reasonable period, subject to legal retention requirements. If you disconnect a YouTube channel or Google Business Profile, we delete the associated OAuth tokens promptly and stop accessing the Google API on your behalf.

We use technical and organisational measures designed to protect personal information, including encryption of credentials, API keys and OAuth tokens at rest, per-business data isolation with row-level security, access controls and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, delete, export or restrict the processing of your personal data, and to object to processing or withdraw consent. To exercise these rights, contact info@thetalko.in. Where Talko AI acts as a processor for end-customer data, requests from those individuals should be directed to the business that controls that data. You can revoke Talko AI's access to your Google account at any time via https://myaccount.google.com/permissions.

We use cookies and similar technologies as described in our Cookie Policy.

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email, and the "last updated" date below will reflect the current version.

For privacy questions or to exercise your rights, contact us at info@thetalko.in.