Privacy Policy

Talexia, operating at talexia.us, is the data controller for information collected through its website, its subscription service, and its production operations. In this document, "Talexia," "we," and "our" refer to Talexia; "you" and "your" refer to any person whose information Talexia processes.

For questions about this policy or the information Talexia holds about you, contact office@talexia.us.

Talexia collects only what is required to operate the service. In summary:

Talexia does not collect sensitive personal categories — health information, precise location tracking, genetic data, or biometric data — as none are relevant to the service.

Talexia does not collect, store, or have access to:

• Your social media login credentials (only OAuth tokens — never passwords)
• Your website admin credentials (Talexia never requires these)
• Full credit card numbers (handled by Stripe; Talexia sees only the last four digits and card type)
• Your customers' data (Talexia does not manage DMs, comments, or customer relationships)

Talexia uses the information collected only for the following purposes:

• Service delivery — producing visual content, writing captions, publishing to your connected platforms
• Billing — processing subscription payments and issuing invoices
• Communication — responding to inquiries, sending service updates, notifying you of authorization renewals
• Legal compliance — maintaining records required for consumer protection, tax, and platform terms compliance
• Website improvement — understanding traffic patterns and improving user experience
• Case study reference — displaying work produced for your brand as portfolio material, subject to Section 10.3 of the Service Policy

Talexia does not use your information for automated decision-making, profiling, targeted advertising, or any purpose beyond those listed above.

Talexia does not sell personal information to third parties, and does not "share" personal information for cross-context behavioral advertising as those terms are defined under California and comparable state laws.

Talexia stores information across a small number of service infrastructure providers:

• Product catalogs are stored in Google Drive folders under Talexia's Google Workspace account, accessible only to Talexia staff.
• Account, billing, and Brand Brief data are stored in Talexia's operational database and encrypted email storage.
• Payment information is stored by Stripe — Talexia never sees or stores full card details.
• Legal Records — acceptance timestamps, IP addresses, and document versions — are stored in an append-only database table designed for permanence and audit integrity.
• Support communications are stored in email and, where applicable, in Google Drive documents linked to the Client's file.

All Talexia storage is US-based. Where information is transferred internationally (for example, where a Client is EU-based), that transfer is governed by Section XI of this policy.

Talexia relies on the following third-party service providers to operate. Each is bound by its own privacy policy and data processing standards, which we've linked below for reference:

• Stripe — payment processing (stripe.com/privacy)
• Google Workspace — Google Drive for catalog storage, Gmail for support communications (policies.google.com/privacy)
• Meta Platforms — Instagram and Facebook Content Publishing API for scheduled posting (facebook.com/privacy/policy)
• LinkedIn — Marketing API for scheduled posting (linkedin.com/legal/privacy-policy)
• UploadPost or equivalent scheduling API — technical layer between Talexia and social platforms for scheduled publishing

Each provider has access only to the specific information required to perform its function. Talexia does not share information with any third party beyond those listed here, except as required by law.

Talexia will disclose information where required by law — including in response to a valid subpoena, court order, or lawful government request — or where necessary to enforce this policy, the Service Policy, or Talexia's rights. Where legally permitted, Talexia will notify affected Clients before making such a disclosure.

In the event Talexia is acquired, merged, or reorganized, Client information may be transferred to the successor entity. Any successor will be bound by the terms of this Privacy Policy or a policy providing equivalent protection.

Talexia's visual production process combines proprietary internal tools with third-party visual enhancement and animation services. During production, product images from your catalog — including, for plans that offer image preparation, source images you submit that require cleanup or correction before production — are processed by these services to prepare and produce your monthly visual content.

Talexia takes the following commitments regarding this processing:

• Talexia does not authorize training use of Client data on third-party AI systems where an opt-out is available.
• Talexia does not upload Client information beyond what is required for production of the specific visual asset being produced.
• Talexia does not use Client-provided images to produce content for other Talexia Clients.
• Talexia's production tool selection is subject to periodic review; where a tool's data practices change materially, Talexia will either replace the tool or update this policy.

Where required by law or by material change in tool practices, Talexia will notify Clients of specific tools in use. In all cases, the deliverable — editorial-standard visual content faithful to your pieces — is produced under Talexia's proprietary methodology.

Captions and brand voice are produced using Talexia's proprietary training system, which uses your Brand Brief as reference input for your specific brand only. Your Brand Brief is not used to train Talexia's system for other Clients. Your captions and brand voice remain distinct to your subscription and are not reused across accounts.

Talexia retains information only as long as necessary for the purposes it was collected:

• Account and billing information — for the duration of your subscription and for seven (7) years thereafter, as required for tax and accounting compliance.
• Brand Brief and catalog — for the duration of your subscription. Upon cancellation, retained for ninety (90) days to support potential reactivation, then deleted or returned upon Client request.
• Platform authorization tokens — until the token expires, is revoked by the platform, or is revoked by the Client. Talexia does not retain expired tokens.
• Legal Records — permanently, as required for the enforceability of the Service Policy and defense against future disputes.
• Support communications — three (3) years after last contact, then deleted unless retention is required by ongoing legal matters.
• Website usage data — twenty-four (24) months, then aggregated or deleted.

Except for Legal Records, which Talexia retains as noted above, you may request deletion of your information at any time under Section IX. Some information may be retained beyond your request where required by law or by legitimate business necessity — for example, unpaid invoices or unresolved disputes.

Talexia protects information through a combination of technical and operational measures:

• Encrypted storage across all infrastructure providers (Stripe, Google Workspace, database)
• Encrypted transmission via HTTPS across all site communication
• OAuth-based platform authorization — no plain-text credentials stored anywhere
• Access restricted to Talexia staff on a need-to-know basis
• Multi-factor authentication on all infrastructure accounts
• Periodic review of third-party provider security practices

No system is fully immune to breach. In the event of a data breach affecting your information, Talexia will notify you within seventy-two (72) hours of confirmed detection, describing the nature of the breach, the information affected, and the steps taken in response — consistent with applicable US state and international law.

Regardless of jurisdiction, you have the following rights with respect to information Talexia holds about you:

• Right to know — request a summary of what information Talexia holds about you
• Right to access — request a copy of your information in a portable format
• Right to correct — request correction of inaccurate information
• Right to delete — request deletion of your information, subject to legal retention requirements
• Right to withdraw consent — for processing based on your consent, withdraw that consent at any time
• Right to opt out of case study use — under Section 10.3 of the Service Policy

To exercise any of these rights, contact office@talexia.us. Talexia will respond within thirty (30) days. Talexia may require verification of your identity before acting on a request.

Talexia will not discriminate against you for exercising any of these rights. Doing so will not affect your subscription pricing, service quality, or eligibility for future service.

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), in addition to those listed in Section IX:

• Right to know categories — the categories of personal information Talexia collects, the sources, and the purposes of collection (disclosed in Section II)
• Right to correct inaccurate information
• Right to delete personal information, subject to legal exemptions
• Right to opt out of "sale" or "sharing" — Talexia does not sell or share personal information as those terms are defined, but you retain the right regardless
• Right to limit use of sensitive personal information — Talexia does not collect sensitive personal information in the CPRA-defined categories

To exercise these rights, contact office@talexia.us. You may also designate an authorized agent to submit requests on your behalf.

Consistent with Section II of this policy, Talexia has collected the following categories of personal information in the past twelve months from active or prospective Clients: identifiers (name, email), commercial information (subscription and payment), professional information (brand and business details), Internet activity (website usage), and inferences drawn from these categories (aesthetic preferences derived from Brand Brief responses). Talexia has not sold or shared any of these categories.

For Clients located in the European Union, the United Kingdom, or the European Economic Area, Talexia processes personal information under the following lawful bases established by the General Data Protection Regulation (GDPR) and the UK GDPR:

• Contract performance — for account, billing, Brand Brief, catalog, and publishing operations
• Legal obligation — for Legal Records, tax compliance, and regulatory reporting
• Legitimate interests — for website usage analysis, service improvement, and case study reference, balanced against your rights
• Consent — where specifically requested (for example, for marketing communications)

Talexia is based in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States. Where required by GDPR, UK GDPR, or comparable law, such transfers are governed by Standard Contractual Clauses or equivalent safeguards.

By subscribing to Talexia from a jurisdiction outside the United States, you acknowledge and consent to this transfer.

In addition to the rights listed in Section IX, EU and UK residents have the following rights:

• Right to restrict processing
• Right to object to processing based on legitimate interests
• Right to data portability in a machine-readable format
• Right to lodge a complaint with your national data protection authority

To exercise these rights, contact office@talexia.us. Talexia will respond within thirty (30) days.

Talexia's service is intended for business use by adult professionals. Talexia does not knowingly collect information from children under the age of thirteen (13). If Talexia becomes aware that information has been collected from a child under thirteen, Talexia will delete that information without undue delay.

If you believe a child has provided information to Talexia, contact office@talexia.us.

Talexia may update this Privacy Policy from time to time to reflect changes in operations, tools, or legal requirements. Every update results in a new version number and effective date. The version active at the time of your subscription is stored in Talexia's Legal Records system.

Where a change materially affects your rights or the way your information is used, Talexia will notify you via email at least thirty (30) days before the change takes effect. Continued use of the service after the notice period constitutes acceptance of the updated policy.

For any question about this Privacy Policy or the information Talexia holds about you, contact:

Email: office@talexia.us

Talexia will acknowledge receipt within seven (7) days and provide a substantive response within thirty (30) days.