Legal
Privacy Policy
Last updated July 10, 2026
We keep this short because we collect little. Thallo runs on email, a payment processor, and cookieless analytics — no newsletters, no ad tracking, no selling your data. This policy explains what we process, why, and your choices.
1. What we collect
- Your email address, when you create an account to subscribe to Pro. We use passwordless email sign-in, so we never store a password.
- Payment details are handled by Stripe. Card data goes directly to Stripe and is never stored on our servers; we keep only what we need to manage your subscription (e.g. plan status and a billing reference).
- Aggregate usage, such as page views and how often specs are copied, through privacy-friendly analytics. This is cookieless and not tied to your identity.
- Correspondence and technical logs. If you email us, we keep the exchange. Our infrastructure providers process technical data (such as IP addresses and request logs) transiently for security, abuse prevention, and delivery.
2. Why we process it
We process this data to provide Thallo and your subscription (performance of our contract with you); to secure the service, prevent fraud and abuse, enforce our Terms, and understand aggregate usage (our legitimate interests); and to meet legal obligations such as tax and accounting. We do not use your personal data for profiling or automated decisions that have legal effects on you.
3. What we don’t do
We don’t run a newsletter, we don’t use advertising or cross-site tracking cookies, and we don’t sell or rent your personal information to anyone.
6. International transfers
Our providers process data in the United States and other countries, which may be outside the one you live in. Where a transfer needs a legal safeguard, we rely on the mechanisms our providers offer, such as recognized standard contractual clauses and certification frameworks.
7. Retention and deletion
We keep account and billing data for as long as your account exists and as required for tax and accounting. You can ask us to delete your account and associated personal data at any time by contacting us; we will honor it except where the law requires retention (such as billing records) or where we need a minimal record to enforce our Terms — for example, to prevent a terminated account from being re-created, or to handle an ongoing dispute.
8. Your rights
Depending on where you live, the law may grant you rights over your personal data — such as access, correction, deletion, portability, restriction, or objection. You can exercise any of these by emailing us; we will respond within the time the applicable law requires and may verify your identity first. If you are unsatisfied, you may complain to your local data-protection authority. We will never disadvantage you for exercising a privacy right.
9. Security
We take reasonable technical and organizational measures appropriate to the small amount of data we hold — passwordless authentication, no card data on our servers, and reputable providers. No system is perfectly secure, and we cannot guarantee absolute security; if a breach affecting your personal data occurs, we will notify you and the authorities where the law requires.
10. Children
Thallo is not directed to children and requires users to be adults under our Terms. We do not knowingly collect personal data from children; if you believe a child has provided us data, contact us and we will delete it.
11. Changes to this policy
We may update this policy as Thallo evolves. Changes take effect when posted on this page with a new date; for material changes we will give reasonable notice. Your continued use of Thallo after the effective date means the updated policy applies.
12. Contact
Questions about privacy? Email hello@thallo.studio. Thallo is operated by Spacemata.