Privacy Policy
Creator media is production material, not advertising inventory. This policy explains where it goes and how to ask for it back or delete it.
1. Scope and controller
Telloa, the operator of telloa.app, is the controller of the personal data described in this policy. You can request the operator's registered address using the privacy contact below.
This Policy applies to the Telloa website and application. It does not replace the privacy notices of payment providers, publishing platforms, or other services you choose to use.
2. Information we collect
| Category | Examples | Why we use it |
|---|---|---|
| Account data | Email address, user ID, session and account status | Authenticate you, secure the account, and provide the Service |
| Creator profile | Display name, handle, bio, preferences, visual style | Personalize scripts, storyboards, and outputs |
| Creator Content | Narration, transcripts, prompts, scripts, URLs, documents, screenshots, video, and project files | Create, edit, render, store, and deliver requested outputs |
| Presenter permission and identity media | Reference footage, inline rights attestation, face characteristics, consent version and result; legacy enrollments may also include a live consent recording and challenge phrase | Record permission and create an optional synthetic visual presenter |
| Generated and usage data | Storyboards, images, video clips, renders, model/provider identifiers, durations, credit reservations, and error records | Operate generation, retry safely, meter usage, and support your projects |
| Billing data | Dodo customer, transaction and subscription IDs, plan, credit grants, refunds, and tax-relevant records | Manage purchases, access, accounting, fraud, and legal obligations |
| Technical data | IP address, browser/request information, timestamps, security logs, and diagnostics | Deliver, secure, debug, and prevent abuse of the Service |
| Communications | Support, legal, privacy, and feedback messages | Respond to requests and maintain necessary records |
3. Where information comes from
- Directly from you when you register, record, upload, type, purchase, or contact us.
- Automatically from your browser and our hosting, security, and application systems.
- From service providers, such as subscription or payment status from Dodo Payments and generation status from AI providers.
- From URLs or sources you explicitly ask Telloa to process for a project.
4. Purposes and legal bases
Depending on your location, Telloa processes data to perform the service contract; with consent or another lawful basis for optional visual-presenter processing; with separate explicit consent for voice cloning and similar sensitive processing; for legitimate interests in security, support, fraud prevention, and service reliability; and to meet legal obligations such as tax, accounting, sanctions, and lawful requests.
Where we rely on consent, you may withdraw it. Withdrawal does not make earlier lawful processing unlawful and does not erase copies of outputs you already exported or published.
5. AI and media processing
Telloa sends only the inputs needed for the feature you request to the relevant provider. Examples include narration for transcription, prompts for storyboard or image generation, and selected reference/narration media for a presenter take. For a scene-level presenter, a timed excerpt of the narration is stored privately and sent with the consented reference; the final video retains the original narration.
Requested web-image searches send the search terms to Wikimedia Commons. Image previews and externally hosted marketing photographs may be loaded from Wikimedia, NASA, or Unsplash, which receive the image request and ordinary network information such as your IP address. We do not send them your account credentials, voice-clone samples, or presenter enrollment media. Source, author, and license information is stored with an imported image.
Reference media and any legacy live-consent evidence can reveal facial or vocal characteristics and may be treated as biometric or sensitive data in some jurisdictions. Telloa records the uploader’s rights attestation and uses the media to provide account-controlled synthetic presenters—not for advertising or unrelated identity profiling.
6. Who receives information
We disclose data to service providers only for hosting, authentication, storage, generation, rendering, support, security, and billing; to professional advisers under confidentiality; during a business transaction with appropriate safeguards; or when required to protect rights, safety, and comply with law.
Dodo Payments acts as an independent controller and merchant of record for information it collects at checkout. Telloa does not receive or store full payment-card numbers.
7. No sale or behavioural advertising
Telloa does not sell personal information and does not share it for cross-context behavioural advertising. The Service does not currently use advertising pixels or non-essential analytics cookies. If those practices change, this Policy and the Cookie Policy will be updated and consent or opt-out controls will be provided where required.
8. Retention
- Account, project, and output data remain while your account or project is active, then are deleted or de-identified when no longer needed, subject to backups and legal obligations.
- Deleting an avatar enrollment immediately blocks new use and schedules private enrollment media and linked voice samples for deletion. The default operational target is 30 days, but provider copies and backups follow their own documented retention cycles.
- Failed or abandoned uploads, temporary provider URLs, render sandboxes, and short-lived signed links expire or are cleaned up according to operational schedules.
- Billing, fraud, consent, security, and dispute records may be retained longer where necessary to establish permissions, comply with law, or defend claims.
9. Security
Telloa uses private storage, row-level access controls, short-lived signed URLs, server-only provider credentials, scoped permission records, and auditable billing and generation records. No security system is perfect, so we cannot guarantee absolute security.
10. International transfers
Telloa and its providers may process information outside your country. Where required, we use contractual safeguards, adequacy mechanisms, or another lawful transfer basis. Provider locations and terms may change; the service-provider page is the current operational list.
11. Your privacy rights
Depending on your location, you may have rights to access, know, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, appeal a decision, and complain to a regulator. California residents may also request information about categories, sources, purposes, and disclosures, and may not be discriminated against for exercising privacy rights. Telloa does not currently sell or share personal information for behavioural advertising.
Residents of India may request access, correction, completion, updating, erasure, consent withdrawal, and grievance handling to the extent provided by applicable data-protection law.
12. Children
Telloa is designed for adult creators and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us so we can investigate and delete it where appropriate.
13. Changes to this Policy
We may revise this Policy when the Service, providers, or law changes. The effective date shows the latest version. We will provide additional notice or seek renewed consent when required.
14. Privacy contact
Send privacy questions and rights requests to hello@telloa.app. We may need to verify that a request concerns your account before disclosing or deleting data. You may also complain to the data-protection authority where you live.