EU privacy & GDPR overview

What we keep, and for how long

Guide requests and internal lead alerts

Form details, source page, contact preference and notification delivery state are stored in the EU database. An internal alert is sent through Resend to the founder mailbox. This does not subscribe the visitor to marketing emails. Email copies are outside the EU database and must be included when handling access or deletion requests.

Website visit records

When a browser opens a page on eu.usetalktool.com, our EU web server records the page address, the time, the IP address, the country derived from it with a database held on the server itself, the page it came from and any campaign (UTM) parameters, the browser's user agent string, and a first-party cookie (eu_vid) that links one browser's page views into a sequence. We use these records to understand where visitors come from and which pages they read (marketing analytics). They stay in the EU database for 90 days and are then deleted automatically; the cookie also lasts 90 days. On signed-in dashboard pages a record is linked to the user and organization. No visitor data is sent to an analytics or geolocation service. You can object to this processing or ask for your records through the privacy contact below.

Demo audio and conversation text

No TalkTool recording or persistent transcript storage. Displayed text remains on your device until cleared, replaced by another test or the page is closed.

Demo security controls

Daily counters use a protected hash of your IP address and expire within 48 hours of the last update. Short-lived session tokens and used-token markers expire within two minutes.

Organization and identity records

Stored to operate your account. Contact us about access, correction or deletion. Automatic account closure and provider backup expiry are still being finalized.

Planned call and usage records

Configured retention is 30 days for minimal call records and 90 days for usage receipts. These settings apply to the planned call service and require live validation.

Backups and provider records

Managed MongoDB backups are not enabled. Recovery procedures and provider log/backup locations and retention are being finalized; no blanket backup-expiry promise is made.

Translation context

The glossary and description your administrators enter are stored with your organization settings, sent to the EU speech service on each of your calls to improve recognition and translation, included in the administrator export and deleted with the workspace. Do not enter health or other sensitive personal information.

Call transcripts and recordings

Stored only when your administrators switch them on, for the retention period you choose (up to 365 days), with a recording notice played on each call. Recordings stay with the carrier in Ireland. TalkTool support staff may open a call's transcript or recording for support during that period; each access is logged and listed in the administrator audit trail.