Privacy Policy

This Privacy Policy describes how Talkspresso (“we,” “us,” or “our”) collects, uses, and shares your personal information when you use our website at talkspresso.com and our related services (collectively, the “Service”).

By using Talkspresso, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Information You Provide

• Account Information. When you create an account, we collect your name, email address, profile photo, bio, and areas of expertise.
• Profile Content. Creators and experts may add service descriptions, pricing, availability, and other content to their public profiles.
• Communications. Messages you send through the platform, support requests, and any other content you submit to us.

Information Collected Through Third-Party Services

• Payment Information. We use PayPal to process payments. PayPal collects your payment card details directly. We do not store your full card number, expiration date, or CVV on our servers. We receive limited transaction details (amount, last four digits, billing address) from PayPal to maintain records and provide receipts.
• Google Calendar Data. If you connect your Google Calendar, we access your calendar events to display your availability and create bookings. We read and write calendar events solely for scheduling purposes. See Section 9 for details on how we handle Google user data.
• Video Sessions. We use Vonage (OpenTok) to power video calls. Session metadata (duration, participant count, connection quality) is collected automatically. A host may start a full recording, or may start AI Notes, which captures conversation audio only. In both cases an on-screen indicator is shown to every participant for as long as the capture is running. See Section 3.
• AI-Generated Content. We use OpenAI to generate session summaries and transcripts from recorded sessions and from AI Notes captures. The content of your sessions is sent to OpenAI for processing. See Section 3 for what happens to the audio afterward, and Section 5 for details on how third parties handle this data.

Information Collected Automatically

• Analytics. We use Google Analytics (GA4) to understand how visitors use our website. GA4 collects anonymized usage data including pages visited, session duration, referral source, and general location (country/region level). Google may set cookies for this purpose.
• Server Logs. Our web servers automatically record standard log data including your IP address, browser type, operating system, referring URL, pages visited, and timestamps.
• Cookies and Authentication Tokens. We use cookies to store JSON Web Tokens (JWTs) that keep you logged in. These are functional cookies required for the Service to work. See Section 7 for more details.

2. How We Use Your Information

We use the information we collect to:

• Provide the Service. Create and manage your account, process bookings, facilitate video sessions, handle payments, and deliver session recordings and summaries.
• Communicate with You. Send booking confirmations, reminders, receipts, and other transactional emails via SendGrid. We may also send product updates and announcements (you can opt out of non-transactional emails at any time).
• Manage Scheduling. Sync with your Google Calendar to show accurate availability and prevent double-bookings.
• Improve the Service. Analyze usage patterns through Google Analytics to understand how people use Talkspresso and make improvements.
• Maintain Security. Detect and prevent fraud, abuse, and unauthorized access.
• Comply with Legal Obligations. Respond to legal requests and enforce our terms.

We do not sell your personal information. We do not use your information for purposes unrelated to providing and improving the Service.

3. Session Recordings, AI Notes, and AI Processing

• Full recordings. Video sessions are recorded only when the host starts a recording. All participants are shown an active recording indicator for as long as recording is running.
• AI Notes. A host may start AI Notes, which captures the conversation audio only and does not capture video. When AI Notes is running, every participant is shown an “AI Notes on” indicator for the entire time, and guests are shown a notice before joining that the host may use the feature. AI Notes is started by the host. Talkspresso provides this on-screen disclosure; it does not obtain consent on the host’s behalf. Hosts are responsible for obtaining any consent required by the laws that apply to them and to their participants, including states that require the consent of all parties before a conversation is recorded, and for any additional obligations imposed by their profession or licensing body.
• Storage. Full session recordings are stored on our content delivery network (CDN) and are accessible to the session participants (the creator/expert and the client). AI Notes audio is not added to your Recordings library and is not accessible through the platform.
• AI processing. Audio from a recording or from AI Notes is sent to OpenAI to produce a transcript (Whisper) and a written summary (GPT). OpenAI does not use data submitted through its API to train its models.
• Retention and deletion. AI Notes audio is deleted once the transcript has been generated and saved: the archived audio is removed from the video provider and the stored audio file is deleted from our storage. If transcription fails, the audio is retained so that the notes can be retried. It is deleted once a retry succeeds, and where no retry succeeds it is retained until it is deleted on request. Full session recordings are retained until you request deletion or delete them through the platform. Transcripts and summaries are retained with the session and can be deleted on request at support@talkspresso.com. See Section 6.

4. How We Share Your Information

We share your personal information only in the following circumstances:

• With Other Users. Your profile information (name, photo, bio, expertise, services, pricing) is visible to other users of the platform. Session participants can see each other’s names and profile photos.
• With Service Providers. We share data with third-party companies that help us operate the Service (listed in Section 5). These providers are contractually required to use your data only for the purposes we specify.
• For Legal Reasons. We may disclose your information if required by law, regulation, legal process, or governmental request. We may also disclose information to protect the rights, safety, or property of Talkspresso, our users, or the public.
• Business Transfers. If Talkspresso is acquired, merged, or sells substantially all of its assets, user information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

We do not share your information with advertisers or data brokers.

5. Third-Party Service Providers

We use the following third-party services to operate Talkspresso:

Each provider has its own privacy policy governing how it handles your data. We encourage you to review them. We select providers that maintain appropriate security measures and limit their use of your data to the services they provide to us.

6. Your Rights and Choices

Regardless of where you live, you have the following rights regarding your data:

• Access. You can request a copy of the personal information we hold about you.
• Correction. You can update your account information at any time through your profile settings.
• Deletion. You can request that we delete your account and associated personal data. Some information may be retained as required by law (for example, transaction records for tax purposes).
• Data Export. You can request a portable copy of your data.
• Opt Out of Analytics. You can disable Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on or by adjusting your cookie settings.
• Email Preferences. You can unsubscribe from non-transactional emails using the unsubscribe link in any email. Transactional emails (booking confirmations, receipts) cannot be opted out of while you maintain an active account.
• Revoke Calendar Access. You can disconnect your Google Calendar at any time through your account settings or through your Google Account permissions page. When you disconnect, we stop accessing your calendar data and delete cached calendar information.

To exercise any of these rights, contact us at support@talkspresso.com. We will respond within 30 days.

7. Cookies

Talkspresso uses a limited number of cookies:

• Authentication Cookies. We store a JSON Web Token (JWT) in a cookie to keep you logged in. This is a strictly necessary cookie and the Service cannot function without it.
• Analytics Cookies. Google Analytics (GA4) may set cookies to distinguish users and track sessions. These cookies collect anonymized usage data.

We do not use advertising cookies, tracking pixels for ad retargeting, or social media cookies.

Managing Cookies. You can control cookies through your browser settings. Blocking authentication cookies will prevent you from logging in. Blocking analytics cookies will not affect your ability to use the Service.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know. You can request that we disclose what personal information we collect, use, and share about you.
• Right to Delete. You can request deletion of your personal information, subject to certain legal exceptions.
• Right to Opt Out of Sale. We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• Right to Non-Discrimination. We will not discriminate against you for exercising your CCPA rights.

Categories of Personal Information Collected (past 12 months):

• Identifiers (name, email address, IP address)
• Commercial information (transaction history, services purchased or provided)
• Internet activity (browsing history on our site, interactions with the Service)
• Professional information (expertise, bio, professional profile content)
• Audio and visual information (session recordings, AI Notes audio, session transcripts and summaries, profile photos)

How to Submit a Request. Email support@talkspresso.com with the subject line “CCPA Request.” We will verify your identity before processing any request and respond within 45 days.

9. Google API Services User Data Policy

Talkspresso’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only access Google Calendar data that is necessary to provide scheduling functionality within Talkspresso.
• We do not use Google Calendar data for advertising, market research, or to build user profiles unrelated to the Service.
• We do not transfer Google Calendar data to third parties except as necessary to provide and improve the Service, as required by law, or as part of a merger/acquisition (with prior notice to users).
• We do not use Google Calendar data to serve ads, including retargeting or personalized advertising.
• Human access to Google Calendar data is limited to what is necessary for security purposes, to comply with applicable law, or when the data has been aggregated and anonymized for internal operations. All other access requires your affirmative consent.
• Our use of Google Calendar data is limited to the practices described in this Privacy Policy.

You can revoke Talkspresso’s access to your Google account at any time by visiting your Google Account Permissions page or by disconnecting your calendar in your Talkspresso account settings.

10. Data Security

We take reasonable measures to protect your personal information, including:

• Encrypted data transmission (HTTPS/TLS) for all connections
• Secure storage of authentication credentials
• Payment processing handled entirely by PayPal (PCI-DSS compliant)
• Access controls limiting employee access to personal data
• Regular security reviews

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

11. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account Data. Retained until you delete your account.
• Transaction Records. Retained for 7 years after the transaction date to comply with tax and financial reporting requirements.
• Session Recordings. Retained until you request deletion or delete them through the platform.
• AI Notes Audio. Deleted once the transcript has been generated and saved. If transcription fails, retained so the notes can be retried, and deleted once a retry succeeds. Where no retry succeeds, retained until deleted on request. Our video provider keeps a record that an archive existed and was deleted, including its date, its length, and the fact that it was audio only; that record contains no audio and no transcript, and the audio cannot be recovered from it.
• Transcripts and Summaries. Retained with the session. Deleted on request at support@talkspresso.com.
• Server Logs. Retained for up to 90 days.
• Analytics Data. Google Analytics retains data according to our GA4 retention settings (14 months).

After account deletion, we will delete or anonymize your personal information within 30 days, except for data we are legally required to retain.

12. International Users

Talkspresso is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We handle all user data consistently regardless of location.

13. Children’s Privacy

Talkspresso is not directed at children under 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at support@talkspresso.com.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on our website and updating the “Last updated” date at the top. For significant changes, we may also notify you by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:

Talkspresso
Email: support@talkspresso.com
Website: talkspresso.com

For CCPA requests, use the subject line “CCPA Request” when emailing.