Taldo — Privacy

Taldo builds and runs software for businesses: each client gets a Taldo of its own. Taldo is run by Ori Shmila. This page says what happens to your data, plainly. Last changed 2 November 2026.

The rule over everything

Your data stays in your own Taldo. When a piece of work needs it somewhere else — an AI call, a processing step — it goes there for that work only, and is removed the moment the work is done.

Where your Taldo runs

Each client's Taldo runs in a box of its own on a server we rent at OVHcloud, kept apart from every other client's. The server's disk is encrypted at rest by OVHcloud. While your Taldo runs, the server running it can read what it holds: we do not access it, every look into your Taldo through Taldo is written in your own record, and a technical guard against access to the running server itself is our next security step.

Who sees what

• Your people see what their role allows.
• We, while we set your Taldo up, see what setup needs. At handoff our setup access ends, and what was left from setup is removed.
• We, after handoff, see nothing of your data — unless you let our support look, for a time you choose, and you can take that back at any time. Every look is written in your record.
• To fix a problem we may take a safe copy: a slice of your data with every personal detail replaced by a made-up one of the same shape. It holds nothing about a real person, it is written in your record when taken, and it is removed when the fix is done.

AI

Some features (drafts, reading documents, taking personal details out of a document) send the text they need to Anthropic's Claude models through Anthropic's API. Under Anthropic's commercial terms, API data is not used to train its models, and Anthropic deletes API inputs and outputs within 30 days — kept longer only where its safety systems flag content (up to 2 years), where the law requires, or where agreed otherwise. Running the AI on another provider, or fully inside your office, is available on request.

Backups

Your Taldo is backed up every hour to Cloudflare R2, sealed before it leaves the server. After handoff it is sealed for your own recovery code: we cannot open it. So that a client who loses everything can still get their data back, a backup can also be opened by one restore key kept alone at Microsoft Azure Key Vault, used only by Ori with two-factor sign-in — and only after you are told at once and a 24-hour wait you can cancel. No single company we use can open a backup alone.

Accounts you connect

Google and Microsoft are used to sign in and, where your plan includes them, for your mail, calendar and files: mail sent from your own account, and mail and dates about your cases brought into the right case. Their tokens are kept in Taldo's key store, never written into any record, and never sent anywhere but to the service they belong to. Google user data is used only to provide these features to you, as Google's API Services User Data Policy requires, including its Limited Use requirements. You can disconnect any account in Taldo, or at the provider (for Google: myaccount.google.com/permissions).

Your data is yours

• Export: everything — every entry of your record as kept, and every file — in one file, at any time, from your settings.
• Leaving: you take your export; then your box and your backups are deleted, and you are told when it is done.
• A person's details: on request, what has no reason to stay (contact details, notes, drafts) is removed. Facts — an invoice, a signed document, a case's history — keep the details they were made with, for as long as the law requires them kept, and then they go too.

Sharing and selling

We sell nothing, and share your data with no one beyond the services named on this page, each only for the work described.

Contact

support@usetaldo.com