Privacy

Privacy posture

Tallin is designed to process company account, identity, provider, usage, spend, and evidence data for the purpose of operating an AI spend ledger and accountability layer. Customer data should be used to provide, secure, support, and improve the service, subject to the customer agreement.

Tallin does not sell customer workspace data. Customer data is not used to train general-purpose AI models. Administrators should avoid uploading information that is not needed for AI spend, coverage, evidence, or support workflows.

Customer agreements may include additional privacy, retention, deletion, and data processing commitments for a specific deployment.

Managed browser extension

When a customer administrator deploys Tallin AI Visibility, the extension checks page hostnames locally against Tallin's list of recognized AI services. For a recognized AI service, Tallin receives the provider and hostname, the time it was observed, a randomly generated installation identifier, extension and detection-list version information, and—if the administrator supplies it—a work email address used to attribute the managed browser installation.

The extension does not read or transmit prompts, messages, files, page content, full URLs, URL paths, query strings, or fragments. Hostnames that do not match a recognized AI service are evaluated locally and are not reported to Tallin. Tallin uses extension data only to provide the customer's AI visibility, security, compliance, coverage, support, and related service operations—not for advertising, sale, creditworthiness decisions, or training general-purpose AI models.

Browser-extension data is retained and deleted according to the applicable customer agreement, Tallin's operational retention and backup practices, and legal obligations. A customer administrator can stop future collection by revoking the installation credential or removing the extension and may request deletion subject to those obligations.