Telloom ("Telloom", "we", "us", or "our") provides a private, invite-only platform where individuals can record, organize, and share life stories and related materials with people they choose.
This Privacy Policy describes how we collect, use, disclose, and protect personal information when you use Telloom's services (the "Services"), including our website, web application, and any related tools.
By creating an account, uploading content, or otherwise using the Services, you agree to the practices described here.
If you have any questions, contact us at hello@telloom.co.
1. Who We Are
Controller:
Telloom
Email: hello@telloom.co
We act as the "controller" of personal information we process in connection with the Services (or equivalent under applicable law).
2. Key Roles in the Product
Understanding these roles is important for how information is shared and controlled:
Sharer
A person who records or uploads stories, videos, audio, photos, documents, or other content ("Content") to Telloom and decides who can view that content. Sharers must be at least 18.
Executor
A person a Sharer designates to have the same control over that Sharer's Content and account settings as the Sharer, including managing listeners, sharing settings, and exports.
- Executors must be at least 18.
- Executors are tied to individual Sharers, not to "family spaces" or households.
- A Sharer can have multiple Executors.
- An Executor may also be a Sharer for their own content.
- A Sharer can revoke an Executor while the Sharer is alive. If the Sharer is deceased or incapacitated, the Executor retains rights as described in our Terms of Service.
Listener
A person invited by a Sharer or that Sharer's Executor to view specific Content.
- Listeners must be at least 16.
- Listeners can be relatives, chosen family, caregivers, professionals, or any other person the Sharer or Executor chooses to invite.
- Listeners do not get default access to all content on the platform—only to content a Sharer (or their Executor) explicitly shares with them.
Access and visibility are always tied to individual Sharers and their choices, not to a single "family hub" that automatically exposes all Content to everyone.
3. Information We Collect
We collect information in several ways: directly from you, automatically when you use the Services, and from third-party providers we integrate with.
3.1 Information You Provide Directly
Account and Profile Information
- Name
- Email address
- Password (stored in hashed form)
- Role(s) (Sharer, Executor, Listener)
- Relationship information (for example, which Sharers you are an Executor or Listener for)
- Communication preferences
Content You Upload or Record
- Video and audio recordings (including ones created by Telloom-arranged interviewers and ones you or your own providers upload)
- Photos, scanned documents, and other files
- "Objects" and other contextual descriptions you enter
- Titles, tags, topics, chapters, and any written descriptions
- People and relationships you tag in Content
- Comments or notes you attach to Content
Derived Content Created by the Service
Using AI and other tools, we may generate:
- Transcripts of your audio and video
- Summaries of interviews, topics, or stories
- Highlight reels, compilations, or reformatted versions for the Sharer and their invited viewers
- Other written or structured outputs that help organize, navigate, or retell your stories
Communication Data
- Emails and messages you send to us (support requests, feedback, etc.)
- In-app messages or notifications (where applicable)
- Responses to surveys or optional questionnaires
Payment and Billing Data
Payments are processed via third-party payment processors such as Stripe. We receive:
- Confirmation of payment status
- Limited billing information (e.g., last 4 digits of card, type, expiration month/year)
We do not store full credit card numbers or security codes on our own servers.
3.2 Information We Collect Automatically
When you use the Services, we automatically collect certain technical and usage data, such as:
Device and Log Information
- IP address
- Browser type, version, and settings
- Operating system
- Device type and identifiers
- Dates and times of access
- Log data (pages viewed, features used, system events, performance metrics)
Usage and Interaction Data
- Which pieces of Content you view and when
- How long you watch or listen
- Which search or navigation features you use
- Sharing and permission changes made by Sharers and Executors
- Clicks on in-app buttons and controls
Cookies and Similar Technologies
We use cookies and similar technologies to:
- Keep you logged in
- Remember preferences and settings
- Understand how the Services are used
- Improve performance and security
You can control cookies via your browser settings, but disabling cookies may affect how the Services function.
4. How We Use Information
We use information for the following purposes:
4.1 To Provide and Operate the Services
- Create and manage user accounts
- Record, upload, store, and stream video and audio
- Generate and display transcripts, summaries, and other AI-powered outputs
- Allow Sharers and Executors to invite Listeners and manage access
- Enable search, filters, and navigation by topics, tags, people, and other metadata
- Maintain and secure our infrastructure and integrations (e.g., Mux for video, Supabase for databases)
4.2 To Develop and Improve the Services
We use information—including Content, transcripts, summaries, and usage data—to:
- Debug and troubleshoot issues
- Improve the quality of transcripts, summaries, and other AI-generated outputs
- Test new features, interfaces, and flows
- Improve recommendation, search, and organization tools
- Train or fine-tune internal models and pipelines that power the product
We may use third-party AI services (see Section 5) for these purposes.
4.3 To Communicate With You
- Respond to your questions and support requests
- Send service-related messages (e.g., account changes, technical notices, billing updates)
- Notify you about feature updates, product changes, and new offerings
- Ask for feedback or invite you to participate in research (optional)
You can opt out of certain non-essential communications (such as marketing emails) by using unsubscribe links or contacting us.
4.4 For Safety, Security, and Legal Compliance
- Detect, prevent, and address fraud, abuse, or violations of our Terms of Service
- Protect the safety and integrity of the Services and our users
- Comply with applicable laws, regulations, and legal processes
- Enforce or defend legal claims
4.5 For Marketing and Storytelling About Telloom
We may use anonymized or de-identified clips, screenshots, transcripts, written excerpts, and usage patterns to:
- Create case studies, examples, and marketing materials
- Build demo content and sales decks
- Illustrate how Telloom is used (without identifying your family or specific individuals)
We do not publicly attribute your private family stories to you without your explicit permission. We aim to use content in a way that protects your identity, except where you have clearly agreed to be identified (for example, as a public testimonial).
5. AI Services and Content Processing
To provide transcripts, summaries, organization, and other AI-powered features, we use third-party AI providers, currently including:
- OpenAI (e.g., GPT-based models)
- Anthropic (e.g., Claude)
- Google (e.g., Gemini)
We send text and media (or derived text from your media) to these providers to:
- Transcribe audio and video
- Summarize interviews and topics
- Extract entities, topics, or themes
- Generate or support other narrative and organizational tools in the product
By using Telloom, you agree that:
- Your Content and derived data (such as transcripts and summaries) may be processed by these providers to deliver the Services.
- These providers may use what we send them in accordance with their own terms and policies, which may include using data to train and improve their models.
- Opt-outs from AI training at the provider level are not currently supported through Telloom.
We may also use your content and data to create future features, such as tools that help generate written narratives, letters, or other formats for retelling family stories. Any such features will be designed to respect the sharing controls of Sharers and Executors.
6. Synthetic Narration and Avatars
In the future, Telloom may offer features such as:
- Synthetic narration in your own voice
- Synthetic avatars or other AI-generated representations of you
These features are not active today, but we prepare now for how consent will work:
- Sharers will be explicitly asked whether they opt in to synthetic narration and/or synthetic avatars.
- If a Sharer does not opt in, Telloom will not use their voice, likeness, or derived data for synthetic narration or avatars.
- If a Sharer explicitly marks "no," an Executor cannot override this preference, even after the Sharer's death or incapacity.
- If a Sharer never records a choice, we will treat that as a "no" and will not enable synthetic narration or avatars for them.
These rules apply specifically to synthetic voice/avatars and are separate from more general AI processing described in Section 5.
7. How We Share Information
We do not sell or rent your personal information.
We share information in the following ways:
7.1 Service Providers
We share information with trusted third parties who help us operate the Services, such as:
- Infrastructure & Databases: Hosting and data services (e.g., Supabase or similar providers)
- Video Processing & Delivery: Video storage, encoding, and streaming (e.g., Mux or similar)
- Payment Processing: Stripe and other payment providers
- Email & Notifications: Email delivery platforms and notification services
- Analytics and Monitoring: Tools that help us understand performance, reliability, and usage
- AI Providers: OpenAI, Anthropic, Google, and others as needed (see Section 5)
7.2 Other Users at Your Direction
Information is shared with other users when you or your Executor choose to share it:
- When a Sharer or their Executor invites a Listener, that Listener can view the specific Content granted to them (and related metadata and derived information like transcripts).
- Executors have the same level of access to that Sharer's Content and settings as the Sharer, except for synthetic narration/avatar consent (which only the Sharer can grant or deny).
8. International Data Transfers
Our Services and primary data infrastructure are currently located in the United States. If you access the Services from outside the U.S., your information may be transferred to, stored, and processed in the U.S. and other countries with different data protection laws than those in your country.
9. Data Retention
We retain information for as long as reasonably necessary to provide the Services, to meet legal and accounting requirements, to resolve disputes, and to enforce our agreements.
In general:
- Account & Profile Data: Retained while your account is active and for a reasonable period thereafter, unless deletion is requested or required.
- Content: Retained while your account is active and in good standing. If a Sharer or Executor deletes specific content or the entire account, we delete it from active systems.
- Subscription & Payment Status: If you stop paying, we may retain your Content for up to six (6) months as a grace period. After this, Telloom may permanently delete all Content and related metadata.
10. Your Rights and Choices
Depending on where you live, you may have certain rights regarding your personal information. Subject to applicable law, these may include:
- Access: Request information about the personal data we hold about you.
- Correction: Ask us to correct inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to legal and operational limits.
- Export/Portability: Request a copy of certain personal information in a portable format.
- Restriction/Objection: Ask us to restrict or object to certain processing (for example, some marketing uses).
- Withdraw Consent: Where we rely on consent, you may withdraw it at any time (this will not affect past processing).
You can exercise some of these rights directly in your account settings. For other requests, contact us at hello@telloom.co.
11. Children and Minors
- Sharers and Executors must be at least 18 years old.
- Listeners must be at least 16 years old.
- Sharers may include children or grandchildren in their recordings, but the Sharer is responsible for obtaining any necessary consent from the minors or their guardians.
12. Security
We use commercially reasonable technical, administrative, and organizational safeguards to protect personal information, including:
- Encryption in transit (e.g., HTTPS/TLS)
- Access controls and authentication
- Role-based permissions for internal staff
- Logging and monitoring of system access
- Regular updates and security patches for systems and dependencies
No system is completely secure. We cannot guarantee absolute security, but we work to minimize risks and respond promptly to suspected issues.
13. Third-Party Sites and Services
The Services may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties. Their practices are governed by their own policies.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last updated" date at the top of this document
- Provide notice within the app and/or via email
- Where required by law, ask you to explicitly re-accept the updated policy within the app
15. Contact Us
If you have questions, requests, or concerns about this Privacy Policy or our data practices, you can contact us at:
Telloom
Email: hello@telloom.co