What this notice covers
Tallis is a personal AI agent you reach in a private web chat or a private Telegram chat. This notice explains what Tallis handles to provide the service, which services process your content, and the controls available to you.
One customer has one private Agent Cell. Customer content, files, memory, browser state, credentials, and encryption keys are isolated from every other customer. Shared service records contain account, routing, billing, budget, and audit metadata, not tenant message bodies or file contents.
Information Tallis handles
Depending on what you ask Tallis to do, the service handles your web session or Telegram identity and messages, conversation history, durable memories, uploaded and generated files, schedules, connection metadata, browser session state, action proposals, action history, receipts, and service usage records.
Credentials and authentication codes are encrypted and confined to the service that needs them. Tallis does not infer credentials, financial details, health details, sensitive traits, or legal matters into durable memory.
Where processing happens
Tallis sends only the content a task needs, and this is the whole list of services that receive it.
Scaleway hosts the service. Your Agent Cell, its encrypted disk, its disk copies and the shared account records run in Scaleway's Paris region in France. Your content stays in that region for as long as your account does.
Scaleway also operates the models that read, write and reason for your tasks, and the model that turns a Telegram voice note into text. They receive the part of your conversation, and the workspace content, that the task needs. Scaleway publishes that it does not retain the content of these requests and does not train base models on it, and that it may retain a request temporarily to investigate an operational or security incident, giving two weeks as its example limit. That is Scaleway's published policy, not a Tallis guarantee.
Linkup operates the web searches Tallis runs for you. It receives the search terms, which Tallis composes from your request, and retains its own records under its own terms. It does not receive your files or your durable memories.
When Tallis opens a web page or document, it fetches the page itself, so the site sees a request from your Agent Cell.
Telegram carries your conversation if you use the Telegram chat, and retains it under Telegram's own terms. The web chat runs on Tallis's own service with no messaging provider in the middle.
Stripe processes payment. It does not receive your conversation, your files or your durable memories.
Services you connect receive the information and instructions needed for the work you authorize. Their own privacy terms also apply to what they retain.
Operations and support access
Tallis keeps privacy-minimized operational telemetry to detect delays, failures, resource growth, service restrictions, and unexpected cost. Tallis does not use customer content for surveillance and does not use it to train providers. A selected provider may have its own processing terms, which are separate from how Tallis uses the content.
Support tools show health and metadata by default. Access to tenant content requires a recorded, time-limited support grant from you, except where access is legally required.
This static notice loads no analytics, scripts, cookies, fonts, or other remote assets.
Retention and recovery
Active service content stays in your Agent Cell while needed for your account and requests. Tallis keeps seven daily recovery points of your disk plus one taken before every update to your agent, in the same provider's storage in the same region. A cancellation snapshot may remain recoverable for up to 30 days after service ends.
Deleting an individual durable memory removes it from active retrieval immediately. Deleting all account content uses the confirmed deletion process below.
Export your data
Use /privacy in the web chat or in Telegram to request an export. It includes conversation history, durable memories, uploaded and generated files, schedules, connection metadata without credentials, action history, and receipts. Tallis records the request in the audit log and delivers an encrypted archive through an expiring authenticated link.
Cancel service
When you cancel, renewal stops at the end of the paid period. At service end, schedules stop, new work in the web chat and in Telegram is rejected, integrations are revoked, and the Agent Cell is suspended. The encrypted cancellation snapshot can remain recoverable for up to 30 days, then its key and data are destroyed.
Delete your data
Use /privacy in the web chat or in Telegram and choose deletion. A clear confirmation is required because the purge is irreversible. Once confirmed, active access stops and integrations are revoked immediately. Tallis destroys live tenant content and its encryption key within 24 hours. Destroying that key makes retained encrypted backups inaccessible immediately; physical backup objects expire within 30 days.
Billing records that Tallis must keep for legal or accounting purposes remain isolated from product content.
Questions and changes
Use /help in the web chat or in Telegram for privacy questions or support. Tallis will identify material changes to this notice by updating its effective date.