Privacy Policy
Last updated:
Tallibo ("the service") is run by , a company registered in , USA ("we", "us"). This page explains what we collect, why, and the choices you have. We keep it short and plain.
What we collect
- Account details: your email address and a password (stored only in scrambled form by our sign-in provider; we can never read it).
- Your business records: everything you type into the app: business details, logo, signature and stamp images, receipt photos, bank statement lines you import, transactions, customers, suppliers, invoices, bills, stock, employees, assets and bank or cash balances.
- Payment details: if you subscribe, payment is handled by our payment processor. We do not see or store your full card number.
- Basic technical data: such as browser type and error logs, kept by our hosting providers to keep the service running and secure. When something breaks in the app, we keep the error message, the page and your browser type (never your records) for up to 30 days to fix it.
How we use it
- To run the service for you: save your records, produce your reports and documents, and keep you signed in.
- To send emails you need: sign-up confirmation, password reset, billing receipts and important service notices.
- To fix problems and protect the service from misuse.
We do not sell your data, and we do not use your business records for advertising.
Who can see your data
Only you, and anyone you invite yourself (for example your accountant, who can look but not change anything; you can remove them any time). Every record is tied to your account and the database refuses to show it to anyone else.
Support access is your choice. Our support team can open your books only after you press "Allow support access" in Help & feedback, for the time you choose (24 hours to 7 days), and only to look unless you also allow them to fix mistakes. You can stop it at any time. Every visit and every change support makes is listed for you in your support history. Outside support access, we may look at an account only when needed to keep the service safe or to follow the law.
We use trusted providers to run the service: Supabase (database and sign-in), Cloudflare (website hosting), our email provider and our payment processor. They process data only on our instructions.
Where it is stored and for how long
Your data is stored on servers run by our providers, which may be outside your country. We keep it while your account is open. When you delete your data or close your account, it is removed from the live database, and from backups within 30 days.
Your choices
- See and change your records at any time inside the app.
- Download your reports as CSV or PDF (Pro plan) or print them.
- Delete records yourself inside the app, or email us to close your account and delete all of its data.
- Depending on where you live (for example the EU, UK or California), you may have extra rights such as access, correction, deletion or objection. Email us and we will help.
Security
Connections are encrypted (HTTPS), passwords are never stored in readable form, and important deletions ask for your password again. No system is perfect, so please use a strong password that you don't use elsewhere.
Children
The service is for businesses and is not meant for anyone under 18.
Changes
If we change this policy we will update the date above, and tell you by email or in the app if the change is important.