Privacy Policy

Tally Integrations LLC (“Tally,” “we,” “us,” or “our”) provides Tally Pulse. This Privacy Policy applies to personal information processed through our websites, applications, billing, and support services (collectively, the “Service”). It does not govern Salesforce or other third-party services, which have their own privacy practices.

If your employer or another organization provides your access, that organization may control the information in its Salesforce environment and your use of the Service. Direct requests about that organization’s data to the organization first.

Depending on how you use the Service, we collect the following categories:

• Account and identity information: name, business email address, account identifiers, authentication records, and encrypted or hashed credentials.
• Salesforce connection information: Salesforce username, organization name and identifier, authorization tokens, permissions, object and field metadata, report types, and connection status.
• Customer content: prompts, conversations, report requirements, selected fields and filters, formulas, report and dashboard specifications, support messages, and files or other material you choose to provide.
• Salesforce data needed for a request: records, values, categories, aggregates, and query results the connected user is permitted to access and that are needed to answer a request, verify a result, or create approved reporting work.
• Billing information: subscription status, plan, purchase amount, billing period, usage allowances, payment-processor customer and subscription identifiers, and transaction status. Our payment processor collects and processes full payment-card details; we do not store full card numbers.
• Usage and technical information: pages and features used, message and feature usage, timestamps, device and browser information, IP address, session cookies, diagnostic events, error logs, security signals, and approximate location derived from an IP address.
• Communications: support tickets, feedback, and related correspondence.

Please do not submit passwords, access keys, unnecessary sensitive personal information, or information you are not authorized to use.

We receive information directly from you; from your browser or device; from the Salesforce account you choose to connect; from payment, authentication, hosting, email, security, and support providers; and from your employer or organization when it administers access.

We use information to:

• create and secure accounts, authenticate users, and maintain sessions;
• connect to Salesforce at your direction and read the information necessary to understand, verify, create, update, open, or share requested reports and dashboards;
• process prompts and relevant context using automated and AI-assisted systems and service providers;
• provide trials, subscriptions, metering, billing, and customer support;
• operate, test, troubleshoot, monitor, secure, and improve the Service;
• detect fraud, abuse, unauthorized access, and violations of our Terms;
• communicate about the Service, transactions, security, policy changes, and support requests; and
• comply with law, enforce agreements, establish or defend legal claims, and protect users, Tally, and others.

We do not use Salesforce Customer Content for cross-context behavioral advertising, and we do not sell personal information for money.

Tally Pulse uses automated and AI-assisted systems to interpret your instructions and generate reporting recommendations and configurations. To provide those features, we may send your prompt, conversation context, Salesforce metadata, and the limited Salesforce query results needed for the task to service providers that process information for us.

The underlying technology may change over time. We select and configure providers based on operational, security, quality, and contractual considerations. We do not need to send every record in your Salesforce organization; the Service is designed to request relevant fields, records, summaries, and aggregates needed for the reporting task.

We disclose information to the following categories of recipients for the purposes described above:

• Infrastructure and database providers that host the Service and store account, conversation, support, and product data;
• AI and automated-processing providers that process prompts and relevant context to provide requested features;
• Payment processors that handle checkout, recurring charges, payment methods, invoices, fraud prevention, and the billing portal;
• Authentication, email, security, logging, and support providers that help operate and protect the Service and communicate with you;
• Salesforce when you direct the Service to connect, query data, or create, update, open, or share work in Salesforce;
• Professional advisers and authorities when reasonably necessary for legal, compliance, security, audit, insurance, or dispute purposes; and
• Transaction participants in connection with financing, due diligence, a merger, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality protections.

We may also disclose information at your direction, with your consent, or in an aggregated or deidentified form that is not reasonably linkable to a person.

If you enable a public result link, anyone who has the link may be able to view the chart totals, summaries, titles, and other information included on that shared page. Public result pages are designed not to expose the individual Salesforce records behind a total, but you should review every result before sharing it. Disabling sharing revokes the prior public link; copies already made by recipients may remain outside our control.

We use cookies and similar local technologies that are necessary to authenticate you, keep your session active, remember settings, prevent abuse, and operate the Service. We may also collect first-party usage and diagnostic information to understand performance and improve the product.

Because browser “Do Not Track” signals are not standardized, the Service does not currently respond to them. Where applicable law requires us to recognize an opt-out preference signal, such as Global Privacy Control, we will treat a recognized signal as a request for the browser or device that sends it. Other parties may collect information through their own sites or services when you leave Tally Pulse; their policies govern that activity.

We retain information only for as long as reasonably necessary for the purposes described in this policy, including providing the Service, maintaining security and business records, complying with tax and accounting rules, resolving disputes, and enforcing agreements. The period depends on the type of information and why we hold it.

• Account, conversation, report, dashboard, and support information is generally kept while the account is active and for a reasonable period afterward to support recovery, legal obligations, and dispute resolution.
• Salesforce authorization tokens are kept while the connection is active and are deleted or rendered unusable after disconnection, account deletion, or revocation, subject to limited backup and legal-retention periods.
• Billing and transaction records may be retained for tax, accounting, fraud-prevention, and legal requirements.
• Security and diagnostic logs are retained for periods appropriate to investigation, reliability, and abuse prevention.

When retention is no longer necessary, we delete, deidentify, or securely isolate the information. Data may remain temporarily in encrypted or access-controlled backups until those backups cycle out.

We use administrative, technical, and organizational safeguards designed to protect information. These include encrypted network connections, restricted access, protected sessions, and encrypted storage of Salesforce authorization tokens in production. No system is perfectly secure, so we cannot guarantee absolute security. Notify us promptly if you believe your account or connection has been compromised.

You can update certain account details, manage billing, disconnect Salesforce, disable a public share link, and contact support from the Service. You may also request access to, correction of, or deletion of personal information by emailing support@gettally.io. We may need to verify your identity and authority before acting.

Depending on where you live and subject to legal exceptions, you may have rights to know or access personal information, correct inaccuracies, delete information, obtain a portable copy, opt out of certain sales, sharing, targeted advertising, or profiling, restrict or object to processing, withdraw consent, and appeal a denied request. We will not unlawfully discriminate against you for exercising a privacy right. An authorized agent may submit a request where permitted, but we may require proof of authority and identity.

We do not currently sell personal information or share it for cross-context behavioral advertising. If that practice changes, we will update this policy and provide any required opt-out method.

For purposes of California law, the categories of personal information we may have collected in the preceding 12 months are identifiers; customer records information; commercial information; internet or other electronic network activity; approximate geolocation; professional or employment-related information; inferences from your instructions and usage; account credentials; and the contents of communications you send to the Service. The sources, business purposes, and recipient categories are described in Sections 2 through 6 above.

We do not knowingly sell or share the personal information of consumers under 16. California residents may exercise applicable rights described above. If the California Consumer Privacy Act does not apply to Tally because a statutory threshold or exemption is not met, we may still respond to reasonable privacy requests at our discretion and as other law requires.

Tally is based in the United States, and we and our providers may process information in the United States and other countries whose laws may differ from those where you live. Where required, we use legally recognized transfer mechanisms and safeguards. If you use the Service from outside the United States, you understand that information will be transferred to and processed in the United States.

The Service is intended for business users who are at least 18 years old. We do not knowingly collect personal information from children. If you believe a child provided personal information, contact us so we can investigate and take appropriate action.

We may update this policy as the Service or law changes. We will post the revised policy with a new effective date and provide additional notice when required. Material changes apply prospectively unless law permits otherwise.

For privacy questions or requests, contact Tally Integrations LLC at support@gettally.io. You may also use the Support panel in a signed-in account. Billing and Service use are additionally governed by our Terms of Service.