Privacy Policy

This Privacy Policy describes how Talku.AI ("we," "us," or "our") collects, uses, and shares information about you when you use our website at https://talku.ai and our Voice AI telephony services (collectively, the "Service"). Talku.AI is operated from Poland, and we are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable European Union laws.

By using our Service, you agree to the collection and use of information in accordance with this policy.

We collect several types of information in connection with the Service:

Information you provide directly: Account details such as email address, name, billing information, and usage preferences.

Service-Specific Data (Telephony & AI): Because we provide real-time AI voice agents without requiring a traditional IPPBX, we process audio content, call logs (CDR), SIP signaling data, and metadata (such as caller ID, duration, and timestamps) solely to fulfill the requested Voice AI service. We do not record or store audio content longer than is technically necessary for processing the conversation, unless explicitly configured and consented to by you within your account settings.

Information collected automatically: When you use our Service, we automatically collect certain information, including IP address, browser type, operating system, referring URLs, and device information.

Information from third-party services: We may receive information about you from third-party services you connect to our Service.

We use the information we collect to:

• Provide, operate, and maintain our real-time Voice AI and SIP routing Service.
• Process transactions, manage billing, and securely maintain call history on our own managed internal servers.
• Improve and personalize your experience.
• Understand how you use our Service to optimize our infrastructure.
• Communicate with you, including for customer support, technical notices, updates, and security alerts.
• Comply with legal and regulatory obligations.

We may share your information in the following circumstances:

Infrastructure & Payment Processors: We share information with third-party vendors who provide essential infrastructure services on our behalf (e.g., Cloudflare for web security and edge routing, Stripe for secure payments). All core database storage and call logs are maintained securely on our own managed infrastructure and are not shared with these vendors.

AI & Real-Time Media Sub-processors: We utilize specialized processing partners (such as LiveKit for WebRTC/SIP media routing, Deepgram for speech-to-text, and Groq for AI reasoning) to provide our real-time voice services. These partners act strictly as data processors under our instructions. They do not retain your voice data, transcripts, or prompts for their own machine learning training purposes.

Legal requirements: We may disclose information if required by law, court order, or in response to valid legal processes within the European Union.

Business transfers: We may share information in connection with a merger, acquisition, or sale of assets.

We do not sell or share your personal information with third parties for their marketing purposes.

We use cookies and similar tracking technologies to track activity on our Service and to hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. We use essential cookies required for the platform to function (such as user authentication), as well as analytics and performance cookies.

We will retain your personal and service data (including CDR and billing history) only for as long as your account is active, or as long as necessary for the specified purposes outlined in this policy. Retention periods are strictly enforced based on EU legal and operational requirements.

When we no longer need to retain your information, or upon your request to delete your account, we will securely delete or anonymize it, unless a longer retention period is required by law (e.g., for tax or financial compliance in Poland).

As an individual located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate or incomplete information.
• Right to erasure ("right to be forgotten"): You can ask us to delete your personal data in certain circumstances.
• Right to restriction of processing: You can ask us to limit how we use your data.
• Right to data portability: You can request your data in a machine-readable format.
• Right to object: You can object to our processing of your data based on legitimate interests.

To exercise any of these rights, please contact us at hello@talku.ai. We will respond to your request within 30 days.

Lawful basis for processing: We process your personal data on the basis of contract performance (to provide the Service), legitimate interests (to secure and improve the Service), legal obligations, and your explicit consent where applicable.

Our primary servers and databases are located within the EU/EEA. If we must transfer data outside the EEA (e.g., routing to a specific AI sub-processor region based on low-latency requirements), we ensure it is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCCs) and strict Data Processing Agreements (DPAs).

We implement robust technical and organizational security measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Our B2B Service is not directed to children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected such information, we will take steps to delete it promptly.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top. You are advised to review this Privacy Policy periodically.

Talku.AI is operated in Poland.

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

• Email: hello@talku.ai
• Registered Office: Warsaw, Poland (Full business address provided upon enterprise onboarding or DPA request)
• Website: https://talku.ai