Privacy Policy

Last updated 2026-10-07

This explains what the operator of Tessallate collects when you use Tessallate, why, and the choices you have. The short version: we use your data to run the product for you, we don’t sell it, we don’t use it to train AI models, and we don’t use advertising trackers.

What we collect

• Account details: your name, email and a hashed password.
• Workspace content: tables, records, pages, files, comments, settings and history that you and your team create, including changes made by AI apps you connect.
• Billing details: plan and subscription status. Card details go straight to Stripe; we never see or store them.
• Product usage: a small set of first-party events (for example, that you created a workspace or connected an AI app, and which days you were active) to understand whether people get value from the product. No third-party analytics or advertising tools.
• Technical data: IP address and request logs, used for security, rate limiting and debugging.

How we use it

• To provide the Service: store your workspaces, run automations and agents you set up, send the emails you trigger (invites, password resets, outreach you approve).
• To keep it secure and reliable, prevent abuse and fix problems.
• To bill you if you’re on a paid plan.
• To improve the product, using aggregate usage numbers.

AI and connected apps

When you connect an AI app (ChatGPT, Claude, Cursor or another MCP app), it can read and change the workspaces you approve, under your account. What it sees is then handled by that app’s provider under their policies. When server-run AI features are used (agents, capture parsing, Ask), the relevant workspace content is sent to the model provider listed below to produce the answer. A workspace owner can block all such outbound calls with the data boundary in Trust & security.

Health, financial and other sensitive data

You decide what to store. If you keep sensitive information (for example, health or financial records), use field encryption and access rules in Trust & security, and only connect AI apps you trust with it. Tessallate is not a HIPAA covered service unless a separate written agreement says otherwise.

Who we share it with

We share data only with service providers that help us run Tessallate, under contracts that limit their use of it:

• Railway: Application hosting and database

Plus any integrations you or your workspace connect (GitHub, Cursor, email accounts, MCP servers, webhooks). We may disclose data if required by law, and will tell you when we can.

Cookies

We use one essential cookie to keep you signed in. No advertising or cross-site tracking cookies.

Retention and deletion

• Your content is kept while your account and workspaces exist. Deleted items go to the trash; deleted workspaces can be recovered for a limited time, then are permanently removed.
• Workspace owners can set shorter retention for history, activity and records in Trust & security.
• Usage events and logs are kept for up to 13 months.

Your rights

You can access, correct, export (each workspace has an export) and delete your data. Depending on where you live you may have further rights, such as objecting to processing or complaining to a data protection authority. To exercise them, contact whoever runs this server.

Aviso de privacidad para personas en México

Este apartado resume, en español, cómo tratamos tus datos personales conforme a la Ley Federal de Protección de Datos Personales en Posesión de los Particulares vigente desde marzo de 2025.

• Responsable: the operator of Tessallate.
• Datos que tratamos: los de tu cuenta (nombre, correo), el contenido que guardas en tus espacios de trabajo y datos técnicos de uso. Si guardas datos de salud, financieros u otros sensibles, los tratamos solo para darte el servicio y puedes cifrarlos por campo.
• Finalidades necesarias: darte el servicio, mantener tu cuenta segura, cobrar tu plan y atender soporte. Finalidades no necesarias: ninguna; no vendemos tus datos, no los usamos para publicidad ni para entrenar modelos de IA.
• Transferencias: usamos los proveedores listados arriba (alojamiento, IA bajo tu control, pagos y correo), algunos fuera de México, solo para prestar el servicio y bajo obligaciones de confidencialidad.
• Derechos ARCO y revocación del consentimiento: puedes pedir acceso, rectificación, cancelación u oposición, o revocar tu consentimiento, escribiendo a quien administra este servidor con tu nombre, el correo de tu cuenta y el derecho que quieres ejercer. Te responderemos dentro de los plazos que marca la ley. También puedes exportar y borrar tus datos tú mismo desde la aplicación.
• Grabaciones de conversaciones: si conectas un dispositivo de grabación, la aplicación aplica por defecto el consentimiento de todas las partes para Baja California y México: las conversaciones se retienen hasta que confirmes que todos aceptaron ser grabados.
• Autoridad: la autoridad en materia de protección de datos personales es la Secretaría Anticorrupción y Buen Gobierno.
• Cambios: publicaremos cualquier cambio a este aviso en esta página.

Security

See our security overview for how data is protected.

Changes

We’ll post updates here and notify you of material changes.