Tali Privacy Policy
Last updated: 24 October 2026
This policy explains what information Tali collects, why, where it is kept, who can see it, and the choices you have. It is written to meet the Barbados Data Protection Act 2019. Tali Ventures Caribbean Inc. ("Tali", "we", "us") is the data controller.
If anything here is unclear, write to hello@talicaribbean.com.
1. Who this policy covers
- Vendors: people who open a Tali account to keep records and take bookings.
- Clients: people who book with a vendor through Tali, or who message the Tali WhatsApp number to reach a vendor.
- Programme staff: people at partner institutions who use a Tali dashboard.
- Visitors: people who view talicaribbean.com or a vendor's booking page.
2. What we collect
From vendors
- Your WhatsApp number, business name, your name, and an email address if you add one.
- Business profile details you choose to add: logo, photo, bio, services and prices, opening hours, days off, currency.
- The records you keep: sales, expenses, bookings, deposits, payments, notes, and any receipt photos you attach.
- Messages you send to the Tali WhatsApp number, including voice notes, and the replies Tali sends you.
- Your plan, payment status and PayPal subscription reference. We do not see or store your card number; PayPal handles payment.
- Technical information: device type, browser, approximate location from your network address, and error reports, used to keep the service working.
From clients
- The name, WhatsApp number and booking details you give when you book with a vendor, and any note you add.
- Messages you send to the Tali number, so they can be passed to the vendor you are contacting, and your replies to booking messages (Confirm, Change, Cancel, STOP).
From programme staff
- Name, work email, institution and role, and the actions you take in the dashboard.
From visitors
- Standard web server logs and the cookies described in the Cookie Policy. The early access form collects name, WhatsApp number and email if you choose to submit it.
We do not collect government ID numbers, bank account numbers or card numbers.
3. Why we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Running your account, keeping your records, taking bookings, sending confirmations and reminders | Performance of our contract with you |
| Transcribing and understanding voice notes and messages so they become records | Performance of our contract with you |
| Sending security codes and service notices | Performance of our contract; legitimate interest in keeping accounts secure |
| The evening check in and similar prompts | Our contract with you; you can turn them off |
| Charging for plans | Performance of our contract |
| Passing a client's message to the vendor they asked for | Legitimate interest of the client and vendor |
| Producing anonymised, aggregated statistics about business activity | Legitimate interest; the figures do not identify anyone |
| Sharing your individual summary with a programme partner | Your consent, which you can withdraw |
| Fixing errors, preventing abuse and keeping the service secure | Legitimate interest |
| Meeting legal obligations, for example responding to a lawful request | Legal obligation |
We do not sell personal information and we do not use your records to advertise to you.
4. Where your data is kept
Your records are stored in a database run by Supabase on Amazon Web Services in the US East (North Virginia) region. The web app is served by Netlify. Backups are kept for 7 days.
Because the servers are outside Barbados, your data is transferred abroad. We rely on contracts with each provider that commit them to protect it to a standard at least as high as the Act requires.
5. Who can see your data
- You. Your records are visible only to your account. This is enforced inside the database itself, not only in the app.
- Your clients see only the booking details they gave and the messages about their own booking.
- Programme partners see aggregated figures by default. They see your individual summary only if you consent inside Tali. They never see individual sales or expenses.
- Tali staff can access records only to support you when you ask, to fix a fault, or to investigate abuse. Staff access requires two factor authentication and is limited to named people.
- Service providers who process data for us under contract:
- Meta Platforms (WhatsApp Business Platform): delivers messages between you and Tali.
- Supabase and Amazon Web Services: database, file storage and backups.
- Netlify: hosting of the web app.
- PayPal: subscription payments.
- Google (Gemini API): transcribes voice notes and interprets the text of your messages so Tali can turn them into records. Voice note audio is passed to Google in memory and is never saved by Tali; only the transcript is kept. We use Google's paid API tier, under which Google does not use the content to train its models.
- Resend: sends transactional email (statements, receipts, notices) if you have added an email address.
- Sentry: error reports, which may include your account identifier but not your records.
- Authorities, only where the law requires us to.
6. How long we keep it
- Your records: for as long as your account is open. When you close your account, you can export everything first. We delete your records within 90 days of closure, except where we must keep them longer for tax, accounting or legal reasons, in which case we keep only what is required and restrict access to it.
- After a trial or subscription ends: if your trial ends without a subscription, or your subscription or a programme partner's cover ends and is not renewed, your account becomes read only for one year from that date. During that year you can sign in and view your records, and you can ask for one plain spreadsheet file (CSV) of all your raw records, in the app under Settings or by replying EXPORT to Tali on WhatsApp. Nothing new can be recorded, and Tali does not produce invoices, quotes, receipts, statements or PDFs for the account. We tell you by WhatsApp 30 days and 7 days before the year ends. At the end of the year we delete your account, your records and your files, and our backups are overwritten 7 days later. If you subscribe again at any point in that year, full access returns with your records as you left them.
- Backups: 7 days, then overwritten.
- Message logs (the record that a message was sent, delivered or failed, and the text of messages exchanged with Tali): 12 months, for billing reconciliation with Meta and fault finding.
- Voice note audio: never stored. The transcript is kept with your records for as long as your account is open, and the separate transcription log for 12 months.
- Early access form entries: until launch plus 90 days, or until you ask us to remove them.
- Error reports: 90 days.
7. Your rights
Under the Barbados Data Protection Act 2019 you can:
- Access the personal data we hold about you. Export my records in Settings gives you most of it instantly; write to us for the rest.
- Correct anything inaccurate. You can edit most records yourself; the Fix option on a record card is there for exactly this.
- Delete your account and records (section 6 explains the limits).
- Restrict or object to a particular use, including turning off the evening check in and withdrawing partner sharing.
- Portability: receive your records in a machine readable form (CSV).
- Withdraw consent at any time where we rely on it, without affecting what happened before.
- Complain to the Data Protection Commissioner of Barbados if you believe we have not handled your data properly. We would ask you to contact us first so we can put it right.
To use any of these rights, write to hello@talicaribbean.com from the email on your account, or message us from the WhatsApp number on your account. We respond within 30 days.
8. Security
Data is encrypted in transit and at rest. Access to your records is restricted at the database level so that one business can never read another's. Sign in uses a one time code sent to your WhatsApp number. Staff access requires two factor authentication. We review our security posture regularly and will tell you and the Commissioner without undue delay if a breach is likely to put you at risk.
No system is perfectly secure. Keep your phone locked and your WhatsApp account protected with a PIN.
9. Children
Tali accounts are for people 18 and over. A client booking through a vendor's page may be younger; we collect only what the booking needs and nothing more.
10. Changes
We will post changes here and, if they are significant, tell you on WhatsApp or by email before they take effect.
11. Contact
Tali Ventures Caribbean Inc.
Barbados
hello@talicaribbean.com
WhatsApp: +1 246 240 7316