Privacy Policy

1. Information we collect

We collect information in the following categories:

• Account information — name, work email, password credentials, organization, and role, provided when you or your administrator creates an account.
• Customer data — the forecasts, models, targets, financial and operational figures, and other content you or your organization submit to or generate within the Services.
• Integration data — information we receive when you connect third-party systems (e.g. CRM, data warehouse, billing), limited to the scope you authorize.
• Usage and device data — log data, IP address, browser and device characteristics, pages viewed, feature interactions, and timestamps, collected automatically through cookies and similar technologies.

2. How we use information

We use information to operate, maintain, and improve the Services, including to:

• provide, secure, personalize, and support the Services;
• process transactions and administer accounts and subscriptions;
• monitor performance, diagnose problems, and prevent fraud or abuse;
• develop new features and analyze usage trends; and
• communicate with you about updates, security notices, and offerings, consistent with your communication preferences and applicable law.

We may create and use aggregated, de-identified, or anonymized data — which does not identify you or any individual — for any business purpose, including benchmarking and improving our models and Services. This right survives termination of your account.

3. How we share information

We do not sell your personal information. We share information only as follows:

• Within your organization — with other authorized users and administrators of your account, who control access and permissions.
• Service providers — vendors that host, process, or support the Services under contractual confidentiality and security obligations.
• Legal and safety — where required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Telos, our users, or others.
• Business transfers — in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case information may be transferred as a business asset.

4. Data retention

We retain information for as long as your account is active and as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. We may retain and use aggregated or de-identified data indefinitely. Upon termination, we may delete or de-identify Customer Data in accordance with our standard practices and applicable law.

5. Security

We implement administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your account credentials and for activity occurring under your account.

6. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of certain personal information, or to data portability. Because much of the information in the Services is controlled by your organization, we will direct or honor verified requests consistent with our role as a processor and with applicable law. You may manage cookies through your browser settings and opt out of non-essential communications at any time.

7. International data transfers

We operate globally and may process and store information in countries other than your own, including the United States. Where required, we use appropriate safeguards for cross-border transfers. By using the Services, you consent to such transfers.

8. Children's privacy

The Services are intended for business use and are not directed to individuals under 18. We do not knowingly collect personal information from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the most recent revision. Material changes will be communicated through the Services or by other reasonable means. Your continued use of the Services after an update constitutes acceptance of the revised policy.

10. Contact us

Questions about this Privacy Policy or our data practices can be directed to privacy@telos.app.