Privacy Policy

1. About this policy

TalkRight FZ-LLC (Dubai Internet City licence 107798), HD12A, First Floor, In5 Tech, Dubai Internet City, Dubai, United Arab Emirates, provides TalkRight Inbox. Contact us about privacy at admin@talkright.net.

We have two roles. We are responsible, as controller, for the personal data we use for our own purposes: accounts, billing, security, sales and support. For the messages and customer details a business handles in TalkRight Inbox, the business decides the purposes and is the controller, and we process that data on its behalf and on its instructions, under our Data Processing Addendum.

If you are a customer of a business that uses TalkRight Inbox, that business’s own privacy notice applies to you; we will help it answer your requests. This policy covers the TalkRight Inbox app; our website has its own privacy and cookie notice.

2. Data we collect about our users

• Account: your name, work email address and sign-in details (your password is stored only in a protected form that cannot be read back), time zone and notification choices.
• Workspace and business: business name, country, type, website, address, tax registration number and billing contact.
• Billing: your plan, payments, invoices and credit use. Card details are handled by our payment provider; we never receive your full card number.
• Security and use: sign-in and security records, records of administrative actions, and information used to prevent abuse.
• Your messages to us when you ask for help.

3. Data businesses process in TalkRight Inbox

When a business connects a channel, TalkRight Inbox receives and stores the messages its customers send and the replies its team and Eva send, with attachments (such as photos, voice notes and files), contact details (such as names, phone numbers, email addresses and social media handles), bookings, notes and AI outputs, and, if the business uses phone features, call details and transcripts. The business decides which channels to connect and how long to keep its data.

4. How we use data, and why

• To provide the Service: receive and send messages, show conversations to the right team, run the features a business switches on, and send service emails such as sign-in codes, invitations and alerts.
• To keep the Service secure, prevent abuse and fraud, and keep audit records.
• To bill for the Service and keep accounting and tax records.
• To support you and tell you about changes to the Service.
• To understand how the Service is used, from usage measurements that do not read conversation content.

We use each item on the legal basis the applicable law provides for it, such as performing our contract with the business, meeting our legal obligations, or consent where the law requires it. Where we rely on consent, you can withdraw it at any time without affecting earlier lawful use.

We do not sell personal data, use it for advertising, or use conversations to train AI models.

5. AI features

When a business switches on Eva or other AI features, the message content needed for the task is sent to our AI provider (listed below) to produce replies, drafts, summaries, transcriptions or image descriptions, and is processed outside the UAE. Our AI provider processes it under terms that restrict its use for training, and may keep it for a limited period for security or legal purposes.

6. Who we share data with

We share personal data only with the providers that process data for us (our subprocessors), with the services a business chooses to connect, with the providers we use for our own accounts, billing and service emails, and where the law requires it. Only the providers needed for the features in use receive the relevant information.

Providers that process data for us:

Services a business chooses to connect, which process data under their own terms with that business:

Providers we use for our own accounts, billing and service emails:

7. Where data is stored and international transfers

Our core application data and backups are hosted in the United Arab Emirates. Many features involve processing in other countries: AI features, the channels a business connects, our service emails and payments. Data is therefore transferred and processed outside the UAE; UAE hosting does not mean all processing takes place in the UAE.

We use these providers under contracts that protect the data, share only what each needs, and use the transfer arrangements the law permits. You can ask us for information about them.

Because of these international transfers, the standard TalkRight Inbox may not meet the requirements that apply to regulated or sensitive data, such as health information, under the UAE Personal Data Protection Law or sector rules. Regulated use is available only under TalkRight Enterprise, on terms agreed in writing.

8. How long we keep data

We keep personal data only as long as its purpose, the business’s instructions, and legal, security or dispute needs require:

• Conversations and contacts: while the workspace is open, until the business deletes them.
• Messages, transcripts and files: the business can also have them deleted automatically after a period it sets in its workspace settings.
• When a workspace closes: after a closing period, we delete its conversations, contacts and files and disconnect its channels.
• Account data: while your account is open, and deleted when you ask us, except what we must keep by law.
• Billing, tax and audit records: for as long as the law requires.
• Backups: deleted content can remain in protected backups for a limited period, until it is overwritten.

9. Your rights

Depending on the law that applies to you, including the UAE Personal Data Protection Law, you may ask to access, correct or delete your personal data, to restrict or object to its use, to receive it in a portable form, or to withdraw consent you gave. Email admin@talkright.net; we respond within the time the law requires. If your request is about data a business holds about you as its customer, we will pass it to that business and help it respond.

You can also complain to the data protection authority that applies to you.

10. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit and at rest, access controls, checks on incoming files, monitoring and audit records. We notify affected businesses of personal data breaches as the Data Processing Addendum and the law require; notifications to authorities and to individuals follow the legal requirements.

11. Cookies

The TalkRight Inbox app uses only essential cookies, such as the one that keeps you signed in securely. It does not use advertising or analytics cookies.

12. Google user data

When a business connects a Google service, such as Gmail or Google Calendar, we access the information it authorises, including the relevant messages or calendar entries, only to provide the functions the business chooses, such as showing and replying to email or booking appointments.

TalkRight’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it and do not use it to train AI models, and people at TalkRight read it only with the business’s permission, for security, or where the law requires.

Disconnecting a Google account stops further access. Information already imported stays in the workspace under the business’s retention settings until it is deleted.

13. Children

TalkRight Inbox is a business service and is not meant for anyone under 18.

14. Changes

We will post any update here with its date, and tell workspace Owners about material changes before they take effect.