Privacy Policy

TalosOps ("TalosOps", "we", "us") provides an AI-assisted customer-operations platform used by businesses ("clients") to handle their own customers' support conversations across channels such as web chat, Telegram, and email. This policy explains what data we access, how we use it, how long we keep it, and the choices available to you. It applies to the TalosOps platform and this website.

Who controls the data

For customer-support content processed on behalf of a client, the client is the data controller and TalosOps is a data processor acting on the client's instructions. For this website and for account administration, TalosOps is the controller.

Data we access and process

Connected-mailbox email.: When a client connects a mailbox (via Google/Microsoft OAuth, or via IMAP/SMTP with an app password), we read incoming messages to that mailbox so the AI agent can understand and respond to customer support requests, and we send replies from that same mailbox. We process message headers, subject, body text, and attachments needed to handle the conversation.
Conversation content.: Messages exchanged with a client's customers on connected channels, plus derived data (AI drafts, summaries, categorization, ticket state).
Account & contact data.: Names, email addresses, and role for the client team members who use the platform; messages submitted through the contact form on this site.
Integration credentials.: OAuth refresh tokens and app passwords for connected mailboxes and third-party services, always stored encrypted (see Security).

How we use the data

To read incoming support emails and generate and send replies on the connected mailbox's behalf.
To display conversations to the client's authorized staff in the operator dashboard, and to let staff take over, edit, or send replies.
To produce AI drafts, summaries, and categorization that help the client's team respond faster.
To operate, secure, debug, and improve the service for that client.

We do not sell personal data, use it for advertising, or use email content to train generalized AI/ML models. AI replies are generated per request using configured third-party API model providers (Anthropic, OpenAI, or Google), subject to each provider’s applicable business/API data terms and controls.

Google user data — Limited Use

TalosOps's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, data accessed through Gmail APIs is used only to provide and improve the user-facing customer-support features described above; it is not transferred or used for advertising, and it is not used to train generalized AI/ML models. Human access to Gmail data occurs only (a) with the mailbox owner's consent (their own staff acting in the dashboard), (b) as needed for security or to comply with applicable law, or (c) in aggregated/anonymized form for operations.

Retention & deletion

Conversation and email data is retained for as long as the client's account is active or as needed to provide the service, and is deleted on the client's instruction. A client (or a connected mailbox owner) can disconnect a mailbox at any time from the dashboard, which stops all further access and removes the stored credentials. To request deletion of specific data or revoke access, contact us at the address below, or revoke TalosOps's access directly from your Google Account permissions.

Account deletion & data retention

An account owner can request deletion of their entire TalosOps account from the dashboard, under Manage → Account. This covers the whole account, not just a single mailbox or channel.

Deletion is self-serve and takes effect immediately — no review or approval by us. The account is archived on the spot and retained for {days} days. During this window the workspace is frozen (it sends and receives nothing) but fully recoverable: the owner can sign in and restore it with one click, and we email a reminder 7 days and 24 hours before the final deletion.

After the {days}-day window ends, everything is permanently deleted: all data — conversations, knowledge, channels, mailboxes, team members, and login emails — plus every stored file, and the access grants we hold are revoked at the provider (including Google). Content we created inside your own external accounts (such as Notion pages or Google Sheets) belongs to you and remains in your accounts. This step cannot be undone. A full data export is available from the dashboard at any time, including during the deletion window.

To ask about a pending deletion, confirm that an account has been removed, or request restoration within the 30-day window, contact us at admin@talosops-ai.com.

Full step-by-step instructions — including how a customer of one of our clients requests deletion of their own data — are on the Data Deletion page.

Security

Integration credentials (OAuth refresh tokens and app passwords) are encrypted at rest. Data is isolated per client (tenant) with row-level security in the database and access controls in the application. Access to production data is restricted to authorized personnel and logged.

Your choices

Depending on your location you may have rights to access, correct, or delete your personal data, or to object to or restrict its processing. For support-conversation data, direct these requests to the client whose service you contacted; we will assist that client in fulfilling them. For data we control, contact us directly.

Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

Contact

Questions or requests: admin@talosops-ai.com.

The data controller for this website and for account administration is:

TalosOps
Cairo, Egypt