Legal

Privacy Policy

Effective: May 1, 2026

Last Updated: May 1, 2026
Contact: support@talarity.com

IMPORTANT: This Privacy Policy applies solely to the talarity.com website and related sales and marketing activities. It does NOT apply to the Talarity GRC application or customer data processed within the platform, which are governed by separate agreements.

1. Controller

Talarity, Inc. ("Talarity," "we," "us," or "our") is the data controller for personal data collected under this Policy.

2. Scope

This Policy applies only to:

  • The talarity.com website (the "Site");
  • Pre-sales, marketing, and informational interactions (e.g., demo requests, quotes, downloads).

This Policy does not apply to:

  • The Talarity GRC platform or customer environments;
  • Data processed on behalf of customers under contract.

3. Categories of Personal Information Collected

We collect the following categories of personal information:

A. Identifiers

  • Name, email address, phone number
  • IP address

B. Professional Information

  • Company name
  • Job title / role

C. Internet / Network Activity

  • Pages visited, session activity, referring URLs
  • Browser, device, and usage data

D. Commercial / Marketing Information

  • Interest in products/services
  • Demo/quote requests
  • Communication preferences

4. Sources of Information

We collect information:

  • Directly from you (forms, demo requests, emails);
  • Automatically via cookies and analytics tools;
  • From third-party tools (e.g., CRM, marketing platforms).

5. How We Use Personal Information

We use personal information for the following purposes:

  • Operate, maintain, and improve the Site (Legal basis: Legitimate Interest)
  • Provide demos, quotes, and requested materials (Legal basis: Contractual Necessity)
  • Respond to inquiries and provide support (Legal basis: Legitimate Interest)
  • Analyze usage and optimize performance (Legal basis: Legitimate Interest or Consent where required)
  • Conduct marketing and sales outreach (Legal basis: Consent or Legitimate Interest, depending on jurisdiction)
  • Personalize content and user experience (Legal basis: Consent where required)
  • Ensure security and prevent fraud (Legal basis: Legitimate Interest)
  • Comply with legal obligations (Legal basis: Legal Obligation)

6. Cookies and Tracking Technologies

We use cookies and similar technologies for:

  • Essential site functionality;
  • Analytics and performance monitoring;
  • Marketing and campaign effectiveness.

For more details, see our Cookie and Tracking Technologies Policy.

We do not currently respond to browser "Do Not Track" signals.

7. Sharing of Personal Information

We may share personal information with:

Service Providers (Processors)

Including providers of:

  • Hosting and infrastructure;
  • Analytics (e.g., Google Analytics);
  • CRM and marketing automation (e.g., HubSpot or similar);
  • Customer support tools.

Business Transfers

In connection with mergers, acquisitions, or asset sales.

Legal Requirements

Where required by law or to protect rights and safety.

We do not sell personal information.

We do not knowingly share personal information for cross-context behavioral advertising as defined under California law. However, certain analytics or marketing tools may be interpreted as "sharing" under applicable regulations. Where required, we provide mechanisms to opt out of such processing.

To exercise opt-out rights, contact: support@talarity.com

8. U.S. State Privacy Rights

Residents of certain U.S. states (including California, Virginia, Colorado, Connecticut, Texas, and others) may have the following rights. The rights available to you may vary depending on your jurisdiction.

You may have the right to:

  • Know what personal information we collect and how it is used;
  • Access specific pieces of personal information;
  • Request deletion of personal information;
  • Correct inaccurate information;
  • Opt out of the sale or sharing of personal information;
  • Limit use of sensitive personal information (we do not collect sensitive PI for this Site).

We will process requests in accordance with applicable law, which may vary based on your place of residence and the nature of the request. We will respond within the timeframe required by applicable law (generally within 45 days).

We may need to verify your identity before fulfilling your request.

We will not discriminate against you for exercising your rights.

9. EEA/UK Privacy Rights

If you are in the EEA/UK, you have the following rights. The rights available to you may vary depending on your jurisdiction:

  • Access, correct, or delete your data;
  • Restrict or object to processing;
  • Data portability;
  • Withdraw consent at any time.

To exercise these rights, contact: support@talarity.com

Where multiple laws apply, we may apply the standard that provides the greatest level of protection where practicable.

10. Additional Rights Under Applicable Law

Depending on your location, you may have additional rights under applicable data protection laws. We will honor such rights in accordance with applicable law. To exercise any rights not specifically described above, please contact us at support@talarity.com.

11. International Data Transfers

Personal data may be transferred to and processed in the United States.

Where required, we rely on appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs);
  • Transfers to organizations in countries with adequacy decisions (where applicable);
  • Contractual and technical safeguards with service providers.

12. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy, including:

  • Marketing and lead data: up to 24 months from last interaction
  • Inquiry/support data: up to 24 months
  • Analytics data: typically 12–26 months (depending on tool configuration)

We may retain data longer where required for legal, regulatory, or contractual obligations.

13. Security

We implement administrative, technical, and physical safeguards designed to protect personal data, including:

  • Access controls and authentication;
  • Encryption in transit;
  • Vendor risk management practices.

Our practices are aligned with industry-standard security frameworks (such as SOC 2 principles), though no system can be guaranteed 100% secure.

14. AI Processing

We may use third-party AI providers (e.g., OpenAI, Anthropic) to support internal operations or product-related features.

  • Processing is limited to business contact and interaction data where applicable;
  • Data is used only for intended purposes (e.g., support, summarization, internal productivity);
  • Data is not used for model training where contractually restricted;
  • Processing is governed by data processing agreements.

15. Children

This Site is intended for business users and not for individuals under 16 years of age (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children.

16. Changes

We may update this Policy periodically. Material changes will be communicated at least 30 days in advance where required.

17. Contact

Talarity, Inc.
Email: support@talarity.com