Privacy notice
Oct 28, 2026 · @Rorey
At Talvo, we pride ourselves on making high-quality, honest software. We are committed to protecting your privacy and ensuring the security of your personal information.
Who we are
We're Talvo ('we', 'our', 'us'), the trading name of Talvo Elections Limited, a company registered in England and Wales, number 17339608. Our registered office is 20a Cross Street, Atherton, M46 0HS.
We're the 'controller' of the personal data covered by this policy, which means we decide how and why it's used. For any question about privacy or your data, email support@talvo.uk or write to us at the address above.
What data we collect
We collect this information from you, or from your organisation if it adds you to its account:
- your name, email address, organisation and role;
- your sign-in details;
- organisation billing contact and payment details;
- what you send us in emails and in-app forms, and why you contact us;
- how you use the service; and
- your IP address, browser type and the dates and times of your activity.
Why we use your data
| Purpose | Information used | Lawful basis |
|---|---|---|
| Providing your account | Name, email address, organisation, role, authentication details, how you use the service | Contract |
| Billing and taking payment | Billing contact, payment details | Contract |
| Customer support | Contact details, messages, enquiry details | Legitimate interests |
| Security and preventing fraud | IP address, browser type, activity logs | Legitimate interests |
| Understanding how the service is used so we can improve it | Usage data, device and browser information | Legitimate interests |
| Meeting our legal duties | Payment records | Legal obligation |
Where we are the processor
If your organisation uses our platform, it's the controller of its data, and we're its processor. We only process that data on the organisation's instructions, under a data processing agreement between us and the organisation. This policy doesn't cover that data.
Please read the organisation's own privacy notice and contact the organisation about your data.
Who we share your data with
We share personal data only as far as we need to run the platform. These providers process data on our behalf under contracts that require them to protect it.
| Provider | Function | Region |
|---|---|---|
| Cloudflare | Hosts our website and web application, and filters traffic to keep it fast and secure | Global network |
| Supabase | Database, sign-in and server functions | United Kingdom |
| PostHog | Product analytics | EU |
| Resend | Sends emails | Ireland (EU) |
| Stripe | Billing and payments | United Kingdom, United States |
| Claude (Anthropic) | AI tool that helps us process tasks and background automation | United States |
| Twenty | Customer relationship management (CRM) | EU |
| Featurebase | Customer support | EU |
Where we store your data
We store account data on servers in the United Kingdom. Some of the providers above process data elsewhere, including the EU and the United States. Where data leaves the UK, we make sure the transfer is lawful. We rely on a UK adequacy decision where one applies, such as the UK-US data bridge for certified US companies. Otherwise we use the ICO's International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.
How long we keep your data
- Account data is kept while your account is active, and for 12 months after it closes.
- Support enquiries are kept for 2 years after we last contact you.
- Security and server logs are kept for 90 days.
- Invoices and company records are kept for 6 years.
Cookies
We use cookies and similar storage that the service needs to work, such as keeping you signed in. We also use PostHog for analytics to help improve our products. You can block or delete cookies in your browser settings, but the service may not work properly without the essential ones.
How we keep your data secure
We protect personal data with technical and organisational measures, including encryption in transit, access controls, audit logs, and contracts with our service providers that require them to protect it.
Your rights
Under UK GDPR, you have the right to:
- be informed about how we use your data, which this policy does;
- access the personal data we hold about you, and get a copy of it;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data in certain circumstances;
- ask us to restrict how we use your data in certain circumstances;
- ask for your data in a portable format;
- object to us using your data; and
- withdraw your consent at any time.
To exercise any of these rights, email support@talvo.uk.
Complaints
If you have a complaint about how we use your data, email support@talvo.uk and we'll do our best to put it right. You can also complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. If we make significant changes, we'll tell you on our website or by email.
Last updated: 29th October 2026