Legal

Privacy Policy

Effective date: 29 April 2026 · Last updated: 29 April 2026

1. Who we are

AI Agent for Intercom (a TalentlyX product) is an AI customer support agent operated by TalentlyX (“TalentlyX”, “we”, “us”, or “our”) that integrates with Intercom to help businesses respond to customer support conversations. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use the AI Agent for Intercom dashboard, the TalentlyX website (talentlyx.com), or any related services (collectively, the “Service”).

For any privacy question, please contact us at zaid@talentlyx.com.

2. Information we collect

We collect the following categories of personal information:

  • Account information. Name, email address, password (hashed), and authentication identifiers when you register or sign in via Firebase Authentication.
  • Customer support conversation data. Messages, timestamps, contact identifiers, and metadata exchanged through Intercom that the Service processes in order to generate AI replies and decide when to escalate to a human agent.
  • Knowledge base content. Articles, macros, FAQs, and PDFs that you upload or sync from Intercom for use as reference material by the AI agent.
  • Operational and diagnostic data. Logs, error reports, IP address, browser type, and usage events used to operate, secure, and improve the Service.
  • Cookies and similar technologies. Strictly necessary cookies for authentication and session management. We do not use advertising cookies.

We do not knowingly collect data from children under the age of 13 (or 16 in the EEA). The Service is intended for business use only.

3. How we use information

We use personal information to:

  • Provide, operate, and maintain the Service, including generating AI replies in Intercom.
  • Authenticate users and protect accounts.
  • Detect, investigate, and prevent fraud, abuse, and security incidents.
  • Improve product quality, including aggregated and anonymized analytics.
  • Comply with legal obligations and enforce our Terms.

4. Legal bases for processing (EEA / UK users)

Where the GDPR or UK GDPR applies, we process personal information on the following legal bases: performance of a contract, our legitimate interests in operating and securing the Service, your consent (where required, e.g. for non-essential communications), and compliance with legal obligations.

5. How we share information

TalentlyX does not sell personal information. We share data only with the following categories of recipients, and only as needed to provide the Service:

  • Intercom Inc. — to read and reply to customer support conversations on your behalf.
  • OpenAI, L.L.C. — to generate AI replies and embeddings. OpenAI does not use our API data to train its models.
  • Pinecone Systems, Inc. — to store vector embeddings used for retrieval.
  • Google / Firebase — for authentication, database (Firestore), and file storage.
  • Vercel Inc. — for application hosting.
  • Legal and safety. When required by law, court order, or to protect the rights, property, or safety of TalentlyX, our users, or the public.
  • Business transfers. In connection with a merger, acquisition, or asset sale, with prior notice where required.

All sub-processors are bound by data processing agreements with confidentiality and security obligations consistent with this Policy.

6. International data transfers

We may transfer personal information to, and process it in, countries other than your own, including the United States. Where required, transfers are protected by Standard Contractual Clauses or other lawful transfer mechanisms.

7. Data retention

We retain personal information for as long as necessary to provide the Service and for the periods described below, after which data is deleted or anonymized:

  • Account data: for the lifetime of the account, plus up to 30 days after deletion.
  • Conversation logs: up to 24 months, unless a shorter period is requested.
  • Diagnostic logs: up to 90 days.

8. Your privacy rights

Depending on your jurisdiction (including the EEA, UK, California, and other regions), you may have the right to: access your personal data; correct inaccurate data; delete your data; restrict or object to processing; data portability; and withdraw consent. California residents have additional rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of the “sale” or “sharing” of personal information — we do not sell or share personal information for cross-context behavioral advertising.

To exercise any of these rights, contact zaid@talentlyx.com. You also have the right to lodge a complaint with your local data protection authority.

9. Security

We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (HTTPS/TLS), access controls, authenticated API access, secret management, and logging. No system can be guaranteed 100% secure; if we become aware of a personal data breach, we will notify affected users and regulators as required by law.

10. Children's privacy

The Service is not directed to, and we do not knowingly collect personal information from, children under 13 (or 16 in the EEA). If you believe a child has provided us with personal information, please contact us so we can delete it.

11. Third-party links and services

The Service may include links to third-party websites or services (including Intercom, OpenAI, Pinecone, Firebase, and Vercel). Their privacy practices are governed by their own policies, and we encourage you to review them.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be communicated via the Service or email. The “Last updated” date at the top of this page indicates when the Policy was last revised.

13. Contact us

TalentlyX · AI Agent for Intercom
Email: zaid@talentlyx.com
Website: talentlyx.com