Privacy Policy
Talpita OS
This policy covers Talpita OS, an internal operations tool run by Talpita Holdings LLC or Talpita Investments LLC (“Talpita”, “we”). Talpita OS is used only by Talpita and the staff of its portfolio companies. It is not offered to the public.
What Talpita OS Reads
- GitHub: Repositories, pull requests, branches, checks and issues.
- Vercel: Projects and deployment status.
- Sentry: Error reports and their counts.
- QuickBooks Online: Accounting data, such as customers, vendors, accounts, invoices, payments, bills and purchases.
- Stripe (planned): Payments and payouts.
- Business operating systems: Summary metrics and reports that our own business apps send to Talpita OS.
- Sign-in: Your name and work email from Google sign-in.
- Staff Slack user IDs: Stored so Talpita OS can send you notifications.
What It Changes
Talpita OS never changes data in the tools it reads from (GitHub, Vercel, Sentry, QuickBooks). It stores what it reads in its own database.
It does send Slack notifications (direct messages) to staff, for example when a build needs attention or an approval is waiting.
AI Model Providers
When the Daily Brief is turned on, Talpita OS sends business facts to an AI model provider to write a short summary. These facts are metrics, build status and approval counts. They do not include customer personal data.
The providers are Anthropic and OpenAI, used under its API terms, which do not allow it to train models on data sent through the API.
Who Can See It
Only signed-in staff who have been given a role can see data, and only the data their role allows.
For example, an accounting role sees accounting data, and a role limited to one business sees only that business. Access is checked on the server and again in the database.
How We Store It
- Data is stored in Supabase, hosted in the United States.
- Access tokens for connected tools (such as QuickBooks) are encrypted before they are stored.
- Other keys are kept in server settings, never in the database or in code.
What We Never Do
- We do not sell or rent your data, or share it with anyone outside Talpita and its portfolio companies, except service providers that host and run Talpita OS for us.
- We do not show ads.
- We do not use your data, or data from connected tools, to train AI models, and the AI provider we use does not either (see above).
How Long We Keep It
We keep data while it is needed to run our businesses. When a tool is disconnected, Talpita operations will stop reading from it. When a business leaves the portfolio, Talpita operations will revoke our access to its tools.
Your Requests
You can ask about or request removal of your data by emailing info@talpitaholdings.com.
On request, we deactivate your account and remove or anonymise your personal details where the system allows. Records of approvals and decisions are kept as an audit history.
Changes
If this policy changes, we will update the effective date above.