Privacy Policy
Last updated: 29.09.2026
Overview
This Privacy Policy explains what Tatiana Goriacheva PR Beograd (“Talemo,” “we,” “our,” or “us”) collects when you use Talemo — the website at talemo.app, the web application and the AI programs you connect to Talemo (together, the “Service”) — why we collect it, who else handles it, how long we keep it and how you can delete it.
Talemo is a work system for small service businesses: clients, bookings, the team and the money in one place, with an AI assistant that does routine work on request.
- Data controller
- Tatiana Goriacheva PR Beograd
- Registered address
- Uroša Martinovića 16, 11070 Beograd, Serbia
- Registration number
- 68098653
- Tax number (PIB)
- 115102121
- Contact
- panic@talemo.app
Who Decides What Happens to the Data
Talemo is organized in three levels: an organization (the one who pays — a company or a person), its businesses, and their branches.
- Your account — your name, email, sign-in and devices — is ours to protect: for this data we are the controller.
- The records a business keeps in Talemo — its clients, their contacts, bookings, notes, files and conversations — belong to the organization that runs the business. For them the organization is the controller and we process the data on its behalf, with one exception: the archive of closed businesses described under “How Long We Keep Data,” which we keep for our own legal and audit needs.
If you are a client of a business that uses Talemo, the business decides what happens to your data. Please contact it first; if you cannot reach it, write to panic@talemo.app.
What We Collect
Your account
Your name, email address and password, or the basic profile that Google or Apple share when you sign in with them. We never see your password: our sign-in service, which we run ourselves, keeps only a protected hash of it. We also record the language and time zone of your device, and, to protect your account, the device, time and IP address of each sign-in; a sign-in from a new device gets you an email about it.
Your organization and businesses
Names, whether the organization is a company or a person, addresses and time zones of branches, who is in the team and with which role.
Business records
Everything a business enters into Talemo or receives through it: clients and their contacts, bookings, notes, files and conversations.
The AI assistant
What you ask the assistant, what it answers, the records it used and every call it made to a language model. We keep a full record of each assistant run, content included, to account for its cost and to investigate problems.
Connected programs and keys
Which AI programs you connected to Talemo (for example Claude or ChatGPT), which businesses you allowed them to reach, and the business keys you created. Of a business key we keep only a fingerprint, never the key itself.
Payments
Payments are handled by Polar, the merchant of record for every purchase. We receive the order, the credit package, the amount, the time and the status of the payment — not your card details. We keep a ledger of credits added, transferred and spent.
Technical data
Logs, traces and error reports of requests: time, operation, result, error code and request identifier. Errors in your browser reach our monitoring through our own server, without your IP address.
The letters we send you — codes, sign-in alerts, notices about your account, money and businesses — and whether they were delivered.
How We Use It
- To run the Service: sign you in, keep your businesses’ records, carry out what you and the assistant ask for.
- To keep your account safe: new-sign-in alerts, the “It wasn’t me” button in them, signing out everywhere.
- To bill for use: measure what the assistant and storage cost, keep the credit balance and its ledger, send letters about the balance and blocks.
- To support you when you ask for help.
- To prevent fraud and abuse and to protect the Service.
- To improve Talemo, using de-identified samples that no longer point to a person.
- To meet legal obligations, such as accounting and answering lawful requests.
We do not sell personal data and do not use it for advertising. The letters we send are about your account and your businesses; we do not send marketing.
The AI Assistant and the Online Admin
Talemo has two kinds of AI work. The assistant works for you and your team inside Talemo. The online admin answers a business’s clients in its connected channels, when the business turns it on.
For both, the request and the records needed for the task are sent to a language model through OpenRouter, which passes them to the model provider. We route these requests only to providers that do not store them and do not use them for training, located in the European Union or the United States, and we tell OpenRouter not to keep or collect them. OpenRouter and the model provider process this content under their own terms.
The assistant acts only within the rights of the person who asked it, and its words are marked as its own. The online admin acts only within the rules the business set for it. Both can be wrong: check what matters before you rely on it or send it to a client.
Programs You Connect
You can connect an outside AI program to Talemo — for example Claude or ChatGPT — or create a business key for a program on your computer. Such a program reads and changes records on your behalf, only in the businesses you allowed and only within your own rights. What the program’s provider does with the data it receives is governed by that provider’s terms, not by ours. You can disconnect a program or revoke a key at any time; a key also stops working when its term ends or when the person who created it leaves the business.
Messaging Channels
A business can connect WhatsApp, Instagram or Messenger. Then we receive, on the business’s behalf, the messages its clients send and the business’s replies, the identifiers the channel uses (phone numbers, usernames, account and chat IDs), attached media and delivery status. The business is the controller of this data and is responsible for having a lawful basis to message its clients.
When the Online Admin Answers Clients
A business chooses, for each channel and each conversation, whether the online admin answers by itself, only prepares drafts for a person to send, or stays off. A newly connected channel starts with drafts.
- It says it is AI. The first message of a new conversation says, in the client’s language, that an AI assistant is answering. It says so again after 30 days of silence and when a person hands the conversation back to it. A business can reword this message but cannot remove it.
- A person is always reachable. A client can ask for a person at any time. The conversation then pauses until someone in the business takes it and hands it back. The online admin also hands the conversation to people when the client complains or when the business’s rules say so.
- What it can do. It answers questions from what the business told Talemo, books visits and moves them. Cancellations are decided by people. It fills in the fields the business defined for its conversations — for example, which service the client wants — and does not change a field after a person corrected it.
- Where it answers. Only inside the time window in which the channel lets a business reply to a client who wrote to it.
Each step of the online admin is recorded in the business’s log, so the business can see what it did and why.
Business Knowledge
A business can write down what the assistant and the online admin should know: services, prices, rules, answers to common questions. To find the right piece quickly, we turn these texts, and the questions clients ask, into search vectors. This is done through OpenRouter by DeepInfra, Inc. (United States), which does not store these requests.
When the online admin cannot find an answer, the question goes to the business’s queue of questions without an answer: we keep the short question as the online admin put it, not the client’s whole message. Only people who can see that conversation see the client’s words. A person decides what the answer is.
Visit Confirmations and Reminders
A business can have Talemo confirm a booking and remind the client before the visit, by the rules it sets for each branch — for example, 24 hours before. These messages are put together by Talemo from a template, without AI. They contain the client’s name, the service, who will do it, the date and time, and the address of the branch.
They go to the client’s main contact, and only after the client confirmed that contact by writing to the business from it. They go through the channel the client wrote from — WhatsApp, Instagram or Messenger. Outside the time window in which a channel allows ordinary replies, they are sent only through WhatsApp, as a message template that we submit to Meta on the business’s behalf. A client can answer the reminder like any message; the answer goes to the business’s conversation. A reminder that was not sent before the visit starts is withdrawn, and its text is erased.
The business is the controller of these messages and is responsible for having its clients’ permission to receive them where the law or WhatsApp’s rules require it.
Conversation Fields and Exports
A business can define fields for its conversations and the steps the online admin follows. We also record from which Meta ad a conversation started, when Meta tells us.
People with the right to do so can download the business’s conversations as a CSV file. The file does not include notes, categories, the person in charge or phone numbers. We keep a record of each download — who made it, with which filters and how many rows, without names or message text — and the owners are told when someone else downloads. This record is not deleted, so the business can always see who took its data out.
If a business turns on the first-step questions of its scenario for Instagram or Messenger, we send these questions to Meta, which shows them to clients who open a chat with the business.
Support Access
Our support team enters a business only when a person in it grants access in the product, for reading or with full rights, and everyone in the business sees that support is inside for as long as it is. In exceptional cases — legal requirements, fraud, abuse or a threat to security — we may access a business without asking. Such access goes a separate way, needs a stated reason and is written to our internal log.
Who Else Handles the Data
We use these providers to run the Service. Each receives only what its part of the work needs:
- Google Cloud — hosting, databases, file storage and keeping our secrets;
- Cloudflare — network, domain names, these pages and incoming email to talemo.app;
- Resend — sending our letters;
- Polar — payments, as merchant of record; Polar handles your payment details under its own privacy policy;
- OpenRouter and the providers of the language models it routes to — the assistant’s and the online admin’s work;
- DeepInfra (United States), through OpenRouter — search vectors for business knowledge and clients’ questions;
- Meta — when a business connects WhatsApp, Instagram or Messenger: the messages, message templates and first-step questions go through Meta’s platforms under Meta’s terms;
- Grafana Labs — logs, traces and error reports, stored in Grafana Cloud in Germany;
- Google and Apple — only if you choose to sign in with them.
Besides them, we share data with the people you authorise — your team, support when you let it in, the programs you connect — and with authorities where the law requires it. Some providers process data outside Serbia and the European Union; we rely on their data protection terms for these transfers.
How Long We Keep Data
- Your account stays until you delete it. Deletion happens 30 days after you ask for it, and signing in during those 30 days cancels it. Then your sign-in, profile, devices, memberships, keys and letters are deleted. Records you made in businesses stay with those businesses.
- A business’s records are kept while the business is open. When the owner closes a business, or it closes after five days of hard block for lack of credits, its data — personal data and messages from connected channels included — moves from working storage to an archive. For 30 days the business can be restored. The archive is kept for three years, after which we review it. While archived, the data is used only for legal questions, audits and fraud investigations, and for de-identified samples. Keeping this archive is a condition of using Talemo: you accept it when you create an account. A business’s records include its knowledge and search vectors, the queue of questions, conversation fields and the online admin’s log; search vectors are deleted when the business closes.
- An organization lives while there is activity in it. After a year without any action inside it, we delete it and warn its owners 30 and 7 days before. The organization’s name, its businesses and its money ledger stay as records for accounting; its people and roles go to the archive.
- Money records are kept for as long as accounting and tax law require.
- Technical logs are kept for about 14 days in our monitoring and up to three months in an archive, then deleted.
- Backups may hold data for a short time after it was deleted.
When you ask us to erase your data, we delete it from working storage; what remains in the archive is locked and used only for the purposes above.
Your Rights
Subject to applicable law, including the GDPR and the Serbian Law on Personal Data Protection, you have the right to:
- access your personal data;
- have inaccurate data corrected;
- have your data erased;
- restrict processing;
- object to processing based on our legitimate interests;
- receive the data you gave us in a portable form;
- withdraw consent where processing is based on consent;
- complain to a supervisory authority — in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection.
You can change your profile and delete your account in the Service yourself; see Data Deletion. For anything else, write to panic@talemo.app.
Cookies and Browser Storage
We use the cookies that keep you signed in and protect the sign-in, and the browser’s storage for your preferences: theme, language and which business is open on this device. We use no advertising or third-party analytics cookies.
Security
Data travels encrypted. Passwords are kept only as protected hashes by our sign-in service; business keys are kept only as fingerprints. Our staff enter a business only as described under “Support Access.”
Children
Talemo is made for businesses and is not meant for children under 16.
Changes to This Privacy Policy
We may update this Privacy Policy. The new version is posted on this page with a new “Last updated” date.
Contact
Questions about this Policy or your data: panic@talemo.app.
Non-Affiliation Disclaimer
Talemo is an independent service and is not affiliated with, endorsed by, or sponsored by Meta Platforms, Inc., WhatsApp LLC or Instagram, LLC. WhatsApp, Instagram and Messenger are trademarks of their owners; they are named here only to describe the channels a business can connect.