Privacy Policy

• Account details: name, email and password (stored hashed).
• Workspace data: workflows, runs and logs, data tables you create or upload, and approvals.
• Connected accounts: authorisation tokens for apps you connect, used only for the features you set up. Tally stores the tokens for apps you connect to it directly (Gmail, Google Drive, Outlook, OneDrive and SharePoint) itself, encrypted. Tokens for apps that connect through our integration provider, Nango, are held by Nango (section 4). Section 5a explains what Tally can do with a Google or Microsoft account.
• Usage data: workflow runs and AI calls (provider, model, token counts and who started the call), for operating the service, billing and each member's daily AI allowance.
• Company Knowledge: the text of documents and pages your workspace stores, with every earlier version it keeps, including the text of files you choose to import from Google Drive, OneDrive or SharePoint, and a copy of each uploaded or imported file (files can be up to 4 MB).
• Agent conversations: your questions to an agent and its answers, visible only to you and deleted 90 days after the conversation starts.
• Ask Tally conversations: your completed questions and answers, visible only to you and kept for one year (365 days) after the conversation starts. You can delete a chat sooner.
• Outreach prospects (where your workspace uses outreach): details of people at other businesses: their name, job title, business email address and public profile link, research written from their company's website, the email drafted to them, and a generated picture of their premises.
• Sign-in security records: the browser and IP address of each session and of each browser you chose to trust; the email address and IP address of failed sign-in attempts (kept 90 days); and, if you sign in with Microsoft or Google, the account identifier that provider gives us (for Microsoft also your organisation's tenant identifier; for Google also your email address).

• Sign in with Google or Microsoft. We receive your account identifier and email address, so that we can sign you in.
• Gmail (send only). Tally sends an email from your mailbox only after a person in your workspace has reviewed and approved that email in Tally. Tally cannot read, search, change or delete your mail.
• Google Drive: Company knowledge. You choose files in Google's own file picker. Tally reads only the files you choose and changes nothing in your Drive. It keeps their text as notes in your workspace and a copy of the file itself (files can be up to 4 MB; a Google Doc is kept as the Word file Google exports). The copy is stored with the rest of your workspace's data. Only people who can read the space it is in can download it, and only you while it waits in your files to sort. A file that looks like it holds a password or key is refused, and nothing from it is kept.
• Google Drive: Edit in Google Slides or Sheets. Tally creates the file in your own Drive and can open only the files it created.
• Outlook (Microsoft 365). Tally reads recent emails only when a workflow step you set up asks for them, and sends an email only after it has been approved in Tally. It cannot change or delete your mail.
• OneDrive and SharePoint: Company knowledge. Read only. Tally lists the files and sites you can open so that you can choose files, reads only the files you tick, and changes nothing. It keeps the same as for Google Drive: the text as notes and a copy of the file (files can be up to 4 MB).

How we hold and use this data. Tally stores the tokens for these connections itself, encrypted. An app that connects through our integration provider instead (section 4) shows its own permissions when you connect it. The text and file copies imported from Google Drive, OneDrive or SharePoint stay in your Company knowledge until they are removed: when you remove the source, disconnect, or leave the workspace, the notes and file copies you imported are deleted at once, including any edits made to the notes in Tally. When you or an agent ask a question, matching extracts of your Company knowledge, including imported text, may be sent to the AI provider configured for your workspace to produce the answer, as described in section 5. We do not sell this data, we do not use it for advertising, and we do not use it to develop, improve or train generalised AI or machine-learning models. No one at ddx-consulting reads it unless you have asked us to and agreed (for example for support), or where this is needed for security or required by law.

Limited Use. Tally's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements, and to the Google Workspace API User Data and Developer Policy.

How to disconnect. A workspace owner or admin can disconnect Gmail, Google Drive or Outlook under Settings, Connected systems. You can disconnect your own Company knowledge connection, or remove one source, under Company knowledge, Sources. Disconnecting deletes Tally's copy of the token. For Google, it also asks Google to remove Tally's access. You can also remove Tally's access at any time at myaccount.google.com/permissions (Google) or myapps.microsoft.com (Microsoft).

• tally_session: keeps you signed in. It lasts up to 30 days, but you are signed out after 60 minutes without activity. Deleted when you sign out.
• tally_ws: remembers which workspace you were last looking at. It lasts until you close your browser. Deleted when you sign out.
• tally_trust: set only if you tick “trust this browser”, so that browser can skip the second sign-in step (the emailed code, or the code from your authenticator app). It lasts 30 days. It is not deleted when you sign out, because remembering the browser past sign-out is its purpose. It stops working when you change your password, choose “sign out everywhere”, or your account is suspended; clearing your browser's cookies removes it at once.
• tally_sso_state and tally_google_state: set when you choose to sign in with Microsoft or Google, to check that the reply comes back to the same browser. Each lasts at most 10 minutes and is deleted when the reply arrives.
• tally_sso_link: set while you confirm linking a Microsoft or Google account to your Tally account. It lasts at most 10 minutes.
• tally_conn_state: set when a workspace owner or admin connects an app such as Gmail or Outlook to Tally directly, to check that the reply comes back to the same browser and the same sign-in. It lasts at most 10 minutes and is deleted when the reply arrives.
• tally_outlook_booking_state: set only for ddx-consulting staff connecting our booking calendar. It lasts at most 10 minutes and is deleted when Microsoft replies.

In your browser each of these names starts with __Host- (for example __Host-tally_session). That prefix tells your browser to accept the cookie only from app.ddx-consulting.com itself, over a secure connection, so no other website, including another ddx-consulting.com address, can set or replace it.

Tally also keeps a few notes in your browser's own storage, not in cookies, which are never sent to us: which workspace each open tab belongs to (until the tab closes), which inbox items you have already read, and which Company Knowledge folders you left open.