Privacy Policy

Last updated: 12 October 2026

This is a summary version. A full version will be published before our service becomes generally available.

1. Who we are

Talkativedata ("we", "us") is based in Bulgaria, European Union. We are building an AI service that lets companies ask questions about their own business data in plain language.

For any question about privacy or to exercise your rights under the GDPR, contact us on WhatsApp: +359 897 005 274.

2. This website

We keep this website as simple as possible:

• No cookies. We do not set cookies.
• No tracking. We use no analytics, advertising or tracking tools.
• No forms or accounts. You cannot register or submit personal data through this website.

Our hosting provider, Cloudflare, may process technical data such as your IP address and browser type. This is needed to deliver the website securely and protect it from attacks. Our legal basis is our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

3. When you contact us on WhatsApp

If you message us on WhatsApp, we use your phone number, your name (if shown) and your messages only to reply and discuss our service with you. We keep these conversations only as long as needed for that purpose. Our legal basis is taking steps at your request before a possible contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries.

WhatsApp is operated by Meta, which processes data under its own privacy policy.

4. How our service is designed to protect your data

Our service will be provided to companies only under a written contract. Data protection is built into its design from the start:

• You own your data. Your company stays the owner and controller of its data. We act only as a processor, under a Data Processing Agreement (DPA), and follow your instructions.
• Stored in the EU. Your data is stored and processed in the European Union.
• Isolated per company. Each company's data is kept separate, and access is checked on every request.
• Encrypted. Data is encrypted in transit and at rest. Passwords and keys for your systems are kept in an encrypted vault.
• Read-only access. We connect to your systems with read-only access. Our service cannot change or delete your data.
• Minimum data sent to AI. AI models receive only a description of your data structure and summarised results, not full tables. Personal data is masked.
• No AI training on your data. Your data is never used to train AI models, neither by us nor by our AI providers.
• Full audit trail. All access to data is logged.
• Deletion. When the contract ends, your data is deleted.

5. Your rights

Under the GDPR you have the right to:

• access your personal data
• correct it
• have it deleted
• restrict its processing
• receive it in a portable format
• object to its processing

To use any of these rights, contact us on WhatsApp at +359 897 005 274.

You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (KZLD), www.cpdp.bg, or with the data protection authority in your EU country.

6. Data breaches

If a personal data breach occurs, we will notify the supervisory authority within 72 hours, as the GDPR requires. Where a breach is likely to create a high risk, we will also inform affected customers and individuals without undue delay.

7. Changes to this policy

We may update this policy. The date at the top always shows the latest version.