Privacy policy

Who we are

Tallo (also offered as ClientDesk) is a team inbox for small businesses that talk to their clients on WhatsApp. The business connects its WhatsApp Business number through Meta's WhatsApp Business Platform, and its employees reply from Tallo instead of a shared phone.

For messages between a business and its clients, the business is the data fiduciary (controller) and Tallo processes the data on its behalf.

What we collect

Account data for the business's team: name, email address, role and a hashed password.

WhatsApp data the business receives or sends through its connected number: the client's phone number and WhatsApp profile name, message text, timestamps, delivery status, and files such as photos, PDFs and voice notes.

Client records the business adds, such as name, PAN, GSTIN and business type, plus tasks and notes created by its team.

Security logs: who signed in and who viewed, replied to or downloaded what, and when.

How we use it

To show each conversation to the employees the business has assigned, send the replies they write, and keep files and tasks organised per client.

To sort and prioritise incoming messages, including with AI models that read the message to suggest a category, urgency and task. Sensitive identifiers can be masked before this step.

To keep the service secure and to give the business owner an audit trail.

We do not sell personal data and do not use clients' messages for advertising.

Who we share it with

Meta Platforms, to send and receive WhatsApp messages through the WhatsApp Business Platform.

Infrastructure providers that host our servers, database and file storage (for example Cloudflare R2), and an AI provider for message sorting. They process data only on our instructions.

Authorities, when the law requires it.

Storage and security

Files are stored in private storage and opened only through short-lived, access-checked links. WhatsApp access tokens are encrypted at rest. Employees only see the clients assigned to them; the owner sees everything.

We keep data for as long as the business uses Tallo, then delete it within 30 days of the account being closed, unless the law requires us to keep it longer.

Deleting your data

If you are a client of a business that uses Tallo, ask that business to delete your conversation; they can remove it from Tallo.

If you run a business on Tallo, the owner can disconnect WhatsApp at any time and ask us to delete the whole account. We confirm once it is done.

You can also request access, correction or deletion of your data by writing to us through the contact details on this website.

Changes

If we change this policy we will update the date at the top of this page.