What we collect
Two categories. First, account data — your name, work email, organization, and the credentials you store to connect TalkERP to your Epicor instance and other systems (Plaid, Microsoft 365). Second, operational data — the questions you ask, the answers we generate, the source records we cite, and the memory facts we accumulate inside your tenant.
What we do with it
We use your operational data only to answer your questions and build memory inside your tenant. We do not train any model on it, do not aggregate it with another tenant's data, do not sell or share it with third parties for marketing, and do not surface it outside the users your tenant admin has authorized.
Who sees it
A short list of sub-processors that need to see specific slices to operate: Anthropic (the inference provider — sees the live request payload, no provider-side training), WorkOS (identity — sees identity claims only), AWS (compute and storage — sees encrypted data at rest), Stripe (billing — sees payment metadata, not ERP data), and the connectors you explicitly enable. The full list with scope is on the Trust & security page.
How long we keep it
As long as your tenant is active. Cancellation triggers a 30-day deletion window; after that window, your rows, credentials, memory facts, and conversation history are removed from production and from backups in the next backup rotation. Tenant admins control the retention window on conversation transcripts inside that.
How you can correct or delete it
Tenant admins can correct or delete memory facts directly from the product surface. Personal-data access, correction, and deletion requests can be made to waseem@talkerp.ai — we will respond inside the regulatory window applicable to your jurisdiction.
Cookies and tracking
We use session cookies to keep you signed in and a small set of essential cookies for security (CSRF, rate-limiting). We do not use third-party advertising trackers on the product surface. The marketing site uses basic analytics that respect your browser's Do Not Track preference where applicable.
Where data lives
A single AWS region in the United States today. EU region deployment is on the roadmap; we will update this page when it is live. We do not route operational data outside the United States today.
Changes
When this policy changes materially, we update the "last reviewed" date at the top of the page and email tenant admins the diff. We do not silently expand the scope of data use.
Contact
Questions about this policy or about how your data is being handled go directly to the founder at waseem@talkerp.ai. We will reply within two business days.