Legal
Privacy Policy
Effective Date: June 22, 2026 · Version 2.0
RVETH Technologies Limited is registered in Ireland and operates TALA globally. This policy applies to all users of TALA, ASHA, and all RVETH services across every platform — web, desktop, mobile, and WhatsApp.
The Short Version
You own your data.
Your business data belongs to you. We process it to run TALA. We do not sell it.
We improve our AI with it.
We use anonymized patterns from your interactions to make TALA smarter. Your actual business data is never used for this.
We never sell your data.
Not to banks. Not to governments. Not to partners. Not to anyone. Full stop.
1. Who We Are
RVETH Technologies Limited ("RVETH," "we," "our," or "us") is a company incorporated under the laws of Ireland. We build and operate TALA — an AI-native enterprise operating system — and ASHA, an AI customer service platform. Both are deployed globally from AWS infrastructure in the European Union (eu-west-1, Ireland).
For the purposes of the General Data Protection Regulation (GDPR), RVETH Technologies Limited is the data controller for personal data we collect about users of our Services. For business data you input into TALA to run your operations, RVETH acts as your data processor, processing that data on your behalf under your instructions.
This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights available to you.
2. Information We Collect
(a) Account and Identity Data
When you create an account: your name, email address, phone number, business name, industry, country, and billing information. This data is necessary to identify you, provision your account, and deliver the Services.
(b) Business Operational Data ("Your Content")
All data you input to operate your business through TALA — transactions, invoices, products, inventory, employees, customers, payroll, expenses, documents, images, voice notes, and financial records. This is your data. You own it. We store and process it solely to deliver the Services to you.
(c) Usage and Interaction Data
How you interact with TALA: features used, queries submitted, tool invocations, response times, session durations, error events, and platform metadata (device type, OS, browser, IP address). We use this to operate, maintain, and improve our infrastructure.
(d) AI Conversation Data
Messages and queries you send to the TALA AI agent, and the responses generated. These are processed in real time through Amazon Bedrock (Claude). By default, Amazon Bedrock does not use your prompts or responses to train its foundation models. Refer to Section 6 for how RVETH uses conversation data to improve TALA.
(e) Third-Party Integration Data
If you connect TALA to external services (banks, payment processors, accounting software), we receive only the data you authorize. We never receive or store login credentials for third-party systems.
3. How We Use Your Information
(a) To Provide and Operate the Services — Legal basis: Performance of Contract
- ●Operate TALA and ASHA across all platforms for your business.
- ●Generate financial records, reports, invoices, and AI-driven insights from data you provide.
- ●Process transactions, manage inventory, and execute workflows you configure.
- ●Deliver customer support and technical assistance.
- ●Send service-critical communications (billing, security alerts, product updates).
(b) To Improve and Develop TALA — Legal basis: Legitimate Interest
We analyze anonymized, aggregated usage patterns — how businesses interact with the AI, which tools are used most, where errors occur — to improve TALA's accuracy, capabilities, and performance. This is not analysis of your specific business data. It is pattern-level analysis that cannot be attributed to any individual business or person.
We may use anonymized interaction data to fine-tune or validate RVETH's proprietary AI models that power TALA. We do not share this data with any third party for training purposes.
(c) For Security and Fraud Prevention — Legal basis: Legitimate Interest / Legal Obligation
- ●Detect, investigate, and prevent unauthorized access, fraud, and abuse.
- ●Maintain the integrity and security of our multi-tenant infrastructure.
- ●Comply with applicable laws, regulatory requirements, and lawful legal requests.
4. What We Do Not Do With Your Data
✕We do not sell your personal data or your business data to any third party.
✕We do not sell anonymized or aggregated data derived from your business to banks, financial institutions, government agencies, or data brokers.
✕We do not use your financial records, transactions, or business intelligence to build commercial intelligence products sold to third parties without your explicit, separate consent.
✕We do not share your data with advertisers.
✕We do not allow Amazon Bedrock (our AI inference provider) to train its foundation models on your data. AWS Bedrock's default terms prohibit this.
5. How We Share Information
We share your data only in the following limited circumstances:
Sub-processors and Service Providers
Third-party vendors who help us deliver the Services — including Amazon Web Services (cloud infrastructure, eu-west-1), Meta/WhatsApp (messaging delivery), Amazon Bedrock (AI inference), and payment processors. All sub-processors are bound by data processing agreements and are prohibited from using your data for their own purposes. A current list of sub-processors is available at privacy@rveth.in.
Legal Obligations
We may disclose data when required by law, court order, or a valid regulatory request. Where permitted, we will notify you before disclosing.
Business Transfers
In the event of a merger, acquisition, or sale of all or part of our assets, your data may be transferred as part of that transaction. We will notify affected users before the transfer and ensure the same level of protection continues.
With Your Explicit Consent
For any sharing not described above, we will ask for your explicit, informed consent first.
6. Artificial Intelligence and Model Training
TALA is an AI-native platform. Understanding how AI interacts with your data is important.
AI Inference (Running TALA)
Your queries and business context are sent to Amazon Bedrock (Claude models) to generate responses. This processing happens in real time in eu-west-1 and is subject to AWS's data processing terms. Amazon does not use your data to train Bedrock's foundation models.
RVETH Model Improvement
RVETH develops and maintains proprietary AI systems (routing, classification, workflow intelligence) that power TALA. We may use anonymized, de-identified interaction patterns from our platform to train and improve these systems.
What "anonymized" means here: Individual records, business identifiers, financial figures, customer names, and any content attributable to a specific business are stripped before use. Only behavioral patterns (e.g., "users who ask X often follow with Y") inform model improvement.
Opt-Out
Enterprise customers may request to opt out of anonymized AI training at any time by contacting privacy@rveth.in.
7. Data Security
We apply security controls commensurate with the sensitivity of enterprise financial and operational data.
- ●Encryption at rest: AES-256 on all database storage (Amazon RDS, S3, DynamoDB).
- ●Encryption in transit: TLS 1.3 minimum for all client-server communication.
- ●Multi-tenant isolation: Every data access is scoped by cryptographically verified tenant identity. Cross-tenant data access is architecturally impossible — it is not prevented by checks, it is prevented by construction.
- ●Access controls: Role-based access control at every layer. RVETH employee access to production data requires authorization and is fully audited.
- ●Infrastructure: All data processed and stored on Amazon Web Services, eu-west-1 (Ireland). No data stored outside the EU without explicit disclosure.
No system is unconditionally secure. In the event of a data breach affecting your data, we will notify you within 72 hours as required by GDPR Article 33.
8. Data Retention
Active accounts: We retain your data for as long as your account is active and for a period thereafter as required to meet our legal, financial, and regulatory obligations.
Account deletion: Upon request, we will delete or irreversibly anonymize your personally identifiable data within 90 days, except where retention is required by law (e.g., financial records required under applicable tax legislation).
AI conversation logs: Conversation logs used for real-time AI inference are retained for 90 days for quality and debugging purposes, then deleted.
Anonymized usage patterns: Aggregated, de-identified data that cannot be attributed to any individual or business may be retained indefinitely for product development purposes.
9. International Data Transfers
RVETH is incorporated in Ireland. All data is primarily processed and stored on AWS eu-west-1 (Dublin, Ireland), within the European Economic Area (EEA). This means your data is covered by GDPR from the point of collection.
In limited circumstances (e.g., AI inference via Amazon Bedrock), data may be processed by systems that operate across AWS regions. Where transfers outside the EEA occur, we rely on EU Standard Contractual Clauses (SCCs) as the legal transfer mechanism.
10. Your Rights
Depending on where you are located, you have the following rights over your personal data:
Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data. Note: this requires closing your account and may be limited by legal retention obligations.
Right to Restriction: Request that we limit how we process your data in certain circumstances.
Right to Data Portability: Request your data in a structured, machine-readable format.
Right to Object: Object to processing based on legitimate interest, including use of anonymized data for AI training.
Right to Withdraw Consent: Where processing is consent-based, withdraw that consent at any time without affecting prior processing.
These rights apply under GDPR (EU/EEA users), the Nigeria Data Protection Act 2023 (Nigerian users), and CCPA (California residents). To exercise any right, contact privacy@rveth.in. We will respond within 30 days.
You also have the right to lodge a complaint with your local supervisory authority. For EU users, this is the Irish Data Protection Commission (DPC) at dataprotection.ie.
11. Enterprise Data Processing Agreements
Enterprise customers who require a Data Processing Agreement (DPA) — for GDPR compliance, internal procurement requirements, or regulatory obligations — may request one by contacting legal@rveth.in. Our standard DPA incorporates EU Standard Contractual Clauses and reflects RVETH's role as data processor for your operational data.
12. Children's Privacy
TALA and ASHA are enterprise products not directed at individuals under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has submitted data through our Services, contact privacy@rveth.in and we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in our Services, technology, or the law. For material changes, we will provide at least 30 days' notice via email to the address on your account and a notice within the TALA platform. The updated effective date will appear at the top of this page.
Your continued use of the Services after a change takes effect constitutes acceptance of the updated policy.
14. Contact and Data Protection Officer
For all privacy-related questions, requests, or concerns:
RVETH Technologies Limited
Ireland
privacy@rveth.in — Privacy & Data Requestslegal@rveth.in — Legal and DPA Requestswww.rveth.in