Privacy

Talvo is developed and operated by Koda Labs AB, Sweden. This notice covers our website, web dialer and Mac app. Questions about your personal data go to info@koda.se.

We are responsible for personal data we use to handle enquiries, manage our customer relationships and protect our service. When a company uses Talvo to manage its telephone calls and staff accounts, we process that data on the company's behalf. That company's privacy notice also applies.

The access request form collects your name, work email, company and the message you write. We also receive your IP address and browser information. We use this information to respond to your request and prevent misuse of the form. Submitting the form does not subscribe you to marketing emails.

We use Vercel Analytics and Speed Insights to understand website traffic and performance. Vercel Web Analytics does not use tracking cookies. Signing in uses essential session cookies; the dialer also stores preferences on your device, such as your selected audio device.

Your organisation supplies your account details, including your name, email address, role and any telephone number assigned to you. Talvo uses these details to give you access to the right organisation and features. Organisation administrators can manage staff accounts and see relevant call activity.

If you sign in by email, we send a single-use code to your existing account's email address through Resend. Codes expire after ten minutes, and attempts are limited. Passwords, where used, are stored as hashes.

Google sign-in is optional. We request your email address and the identity information needed to verify your Google account. We store your email address and Google's unique account identifier to link Google sign-in to your existing Talvo account.

We do not request access to your Gmail messages, Google Drive files, calendar or contacts. We do not retain Google's access or refresh tokens. Google identity data is used for authentication and account security, not advertising or training AI models, and we do not sell it.

The stored account link is held in our service database and handled by our hosting providers to operate Talvo. You can ask us to remove the Google link or delete your account data at info@koda.se. You can also manage Talvo's connection in your Google Account settings. Removing that connection does not itself delete your Talvo account or your organisation's call records.

Talvo processes telephone numbers, live call audio and call information so calls can reach the right people. Call information includes when a call took place, its duration and outcome, routing information, and the queue or operator involved. The dialer needs microphone access to make and answer calls.

The current service does not include call recording or transcription. Call history is available to authorised users for handling calls and reporting.

The company you call, or the organisation you work for, is normally responsible for this information. Requests about its call records should go to that organisation. If you are unsure who to contact, write to us and we will help direct your request.

Talvo uses Railway for its application servers, database and audio storage; Vercel for the website; Telnyx for telephony; and Resend for service emails. Google handles Google sign-in. Where enabled, Sentry helps us investigate application errors.

Optional announcement tools use OpenAI to help edit announcement text and ElevenLabs to generate speech from that text. These features process the text supplied for the announcement, rather than live telephone conversations. Google sign-in data is not sent to these tools for model training.

Some providers may process information outside the EU/EEA. Contact info@koda.se for information about the providers handling your data, their processing locations and the applicable transfer safeguards.

We use encrypted connections, access controls and organisation-based permissions to protect personal data. Access is limited to the people and service providers who need it to operate and support Talvo.

Account details and the Google account link are retained to provide access to your organisation. Call records currently remain in the service until removed; they are not automatically deleted after a fixed period. Expiry of a sign-in code makes it unusable, but does not mean every associated record or backup is immediately erased.

Contact your organisation or info@koda.se about deletion. We will explain what can be removed and whether any information needs to be kept for a specific legal obligation or unresolved claim.

For enquiries, customer administration and service security, our basis is our legitimate interest in responding to people, operating Talvo and preventing misuse. Where processing is necessary for a contract directly with you, or a specific legal obligation applies, we rely on that basis. Customer organisations determine the purposes and legal bases for the staff and call data we process on their behalf.

Under the GDPR, you can ask for access to your personal data and request correction, deletion or restriction of its use. You may also have the right to object and to receive a portable copy. These rights depend on the circumstances and legal basis for the processing.

For information we control, contact info@koda.se. For information we handle on a customer's behalf, contact that customer. You can also complain to the Swedish Authority for Privacy Protection (IMY).