TalosOps provides an AI-assisted customer-operations platform and scoped implementation, integration, training and improvement services. This policy applies to the company website and the platform, including authorized connected channels and business systems.
Who controls the data
For customer-support content processed on behalf of a client, the client is the data controller and TalosOps is a data processor acting on the client's instructions. For this website and for account administration, TalosOps is the controller.
Data we access and process
Connected-mailbox email.
When a client connects a mailbox (via Google/Microsoft OAuth, or via IMAP/SMTP with an app password), we read incoming messages to that mailbox so the AI agent can understand and respond to customer support requests, and we send replies from that same mailbox. We process message headers, subject, body text, and attachments needed to handle the conversation.
Conversation content.
Messages exchanged with a client's customers on connected channels, plus derived data (AI drafts, summaries, categorization, ticket state).
Account & contact data.
Names, email addresses and roles for platform team members; the contact details and message you choose to submit through the website or email to our team. A partner, referral or career enquiry is handled for that enquiry’s purpose, not published as website content.
Integration credentials.
OAuth refresh tokens and app passwords for connected mailboxes and third-party services, always stored encrypted (see Security).
How we use the data
To read incoming support emails and generate and send replies on the connected mailbox's behalf.
To display conversations to the client's authorized staff in the operator dashboard, and to let staff take over, edit, or send replies.
To produce AI drafts, summaries, and categorization that help the client's team respond faster.
To operate, secure, debug, and improve the service for that client.
We do not sell personal data, use it for advertising, or use email content to train generalized AI/ML models. AI replies are generated per request using configured third-party API model providers (Anthropic, OpenAI, or Google), subject to each provider’s applicable business/API data terms and controls.
Google user data — Limited Use
TalosOps's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, data accessed through Gmail APIs is used only to provide and improve the user-facing customer-support features described above; it is not transferred or used for advertising, and it is not used to train generalized AI/ML models. Human access to Gmail data occurs only (a) with the mailbox owner's consent (their own staff acting in the dashboard), (b) as needed for security or to comply with applicable law, or (c) in aggregated/anonymized form for operations.
Meta platform data — connected business channels
When a business authorizes a supported Meta connection, we process the identifiers of its connected business assets, the scoped access token, relevant profile or channel identifiers, and messages and attachments needed for that business’s customer operations. WhatsApp connections may include the WhatsApp Business Account, phone-number identifiers, message templates and their approval states. Authorized Messenger or Instagram connections may include the connected Page or professional account and the conversation identifiers permitted by Meta. We use this information to deliver the connected inbox, replies and authorized operational features for that business, subject to Meta’s policies and the approved permissions. We do not sell Meta platform data, use it for advertising, share it with another client, or use it to train generalized AI models. Infrastructure and configured AI providers receive only data needed for the relevant service. Stored credentials are encrypted. The business can disconnect the channel and can revoke TalosOps in its Meta settings. Stored conversation data follows the retention and deletion process below. Channel availability is subject to the required approval and account setup.
Connecting an AI assistant (ChatGPT, Claude)
An authorized workspace owner or administrator may connect an approved AI assistant. This creates an additional, explicitly authorized transfer of the permitted workspace context to that assistant; it is separate from the AI processing used to provide the platform itself.
Only the workspace owner, or an administrator who holds the manage permission, can create the connection. The connection is personal: it acts as the person who created it and sees only what their role allows, and no colleague and no TalosOps operator may create or use it on their behalf.
Within the authorized scope, the assistant can read workspace and inbox data, conversation and ticket records including the text of messages, stored knowledge content, and aggregated analytics.
Before any information is returned, structured customer identity fields are removed, and email addresses, phone numbers, payment cards and clearly marked secrets are redacted from free text. Names, addresses or other personal details that a customer typed into their own message may remain.
Attachments, file downloads, data exports, integration credentials, API keys and the assistant’s own access tokens are not sent. Knowledge search also reads the stored copy; it does not start a sync with the original source.
The assistant cannot make a change on its own. Every action it proposes is held until that same person approves that specific action while signed in to TalosOps.
The connection can be disconnected at any time from the external administration section, and its access is revoked immediately. We do not store the credentials themselves, only their cryptographic fingerprints.
Once information reaches ChatGPT or Claude, the copy held by that third party is governed by OpenAI’s or Anthropic’s own privacy terms, independently of this policy. Do not connect an assistant unless those terms are acceptable to you.
Retention & deletion
Conversation and email data is retained for as long as the client's account is active or as needed to provide the service, and is deleted on the client's instruction. A client (or a connected mailbox owner) can disconnect a mailbox at any time from the dashboard, which stops all further access and removes the stored credentials. To request deletion of specific data or revoke access, contact us at the address below, or revoke TalosOps's access directly from your Google Account permissions.
What we keep in your browser
The interactive product demonstrations on this website use fictional data and run in the page’s memory; they do not connect to your business accounts. Essential sign-in and language features may use cookies. This website does not use the demonstrations to collect your customer records. If you contact us through a form, the submitted details are sent to TalosOps to handle the enquiry.
Website enquiries and applications
We use the details you send to answer your request, arrange a discussion, assess a partnership or consider a relevant career enquiry. Access is limited to the people who need to handle that purpose. Do not include sensitive customer records, passwords or payment details. We retain enquiry records only as needed for the relationship, follow-up, security and applicable legal requirements. You can ask us about access, correction or deletion using the contact below.
Account deletion & data retention
An account owner can request deletion of their entire TalosOps account from the dashboard, under Manage → Account. This covers the whole account, not just a single mailbox or channel.
The account owner can initiate the protected self-deletion flow without waiting for an operator review. Once the archive step succeeds, the workspace is deactivated and scheduled for permanent deletion after 30 days. The owner can request restoration during that window through the available account controls or our administration team.
After the retention window, the deletion process removes the workspace’s operational records and stored files and attempts the required provider disconnections. Failed required steps are retried rather than silently treated as complete. Separate legally required records may be retained. Provider backups and independently held copies follow the applicable provider retention process; we do not promise instant removal from every backup. Content created in your own external accounts remains there unless separately removed.
To ask about a pending deletion, confirm that an account has been removed, or request restoration within the 30-day window, contact us at admin@talosops-ai.com.
Full step-by-step instructions — including how a customer of one of our clients requests deletion of their own data — are on the Data Deletion page.
Security
Integration credentials (OAuth refresh tokens and app passwords) are encrypted at rest. Data is isolated per client (tenant) with row-level security in the database and access controls in the application. Access to production data is restricted to authorized personnel and logged.
Your choices
Depending on your location you may have rights to access, correct, or delete your personal data, or to object to or restrict its processing. For support-conversation data, direct these requests to the client whose service you contacted; we will assist that client in fulfilling them. For data we control, contact us directly.
Changes
We may update this policy; material changes will be reflected by the "Last updated" date above.
Contact
Questions or requests: admin@talosops-ai.com.
The data controller for this website and for account administration is:
Ahmed Abdelazim Abdellah Sedik, sole proprietor, trading as TalosOps
Egyptian Tax Registration Number 769488885 — Egyptian Tax Authority, Nasr City Third district office. Registered activity: 6209, information-technology and computer services.
44 Ahmed Mohamed Ibrahim St., Office D-33-01, Eighth District, Nasr City, Cairo, Egypt.
Questions about this policy?
Contact our administration team using the address below. Please do not send passwords, payment-card information or unnecessary customer records.
admin@talosops-ai.com