Privacy Policy

PB Consulting ("we", "us", "our") operates the Talimi platform at talimi.app. This Privacy Policy explains how we collect, use, and protect information when you use our platform or visit our website. By using Talimi, you agree to the terms of this policy.

We collect three types of information:

Account information — when a customer subscribes to Talimi, we collect the company name, contact person's name, email, and payment details. When an employee is invited to the platform, we collect their name, email, and role.

Usage information — we log platform activity such as courses viewed, exams taken, scores achieved, and timestamps. This information is necessary for the platform to function and for our customers to meet their compliance obligations.

Technical information — IP addresses, browser type, and device information are collected automatically when you use the platform, for security and diagnostics purposes.

We use collected information to:

• Provide the Talimi service to our customers
• Send transactional emails such as invites, password resets, and certificate delivery
• Generate compliance reports and certificates for our customers
• Improve the platform and diagnose technical issues
• Comply with legal obligations

We do not sell your data. We do not use your data for advertising.

Talimi is a multi-tenant platform. Each customer's data is cryptographically isolated from other customers. No customer, employee, or administrator of one tenant can access data belonging to another tenant. Isolation is enforced at the database layer using row-level security.

All customer data is stored on servers located in the European Union. We use industry-standard providers with SOC 2 and ISO 27001 certifications. Data is encrypted at rest and in transit.

Customer data is retained for as long as a customer's subscription is active, plus a 90-day period after cancellation to allow data export. After that period, data is permanently deleted from all systems, including backups (within a maximum of 12 months).

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Request a copy of your data in a portable format
• Withdraw consent for optional processing

To exercise any of these rights, use the contact form on our website at talimi.app/contact. We will respond within 30 days.

Talimi uses only strictly necessary cookies for authentication and session management. We do not use tracking cookies or analytics cookies without explicit consent.

Talimi uses the following third-party services in delivering the platform:

• Supabase (database and authentication)
• Vercel (hosting and content delivery)
• Resend (transactional email delivery)

Each provider has its own privacy policy and processes data on our behalf under a Data Processing Agreement.

We may update this policy from time to time. Material changes will be communicated to active customers via email at least 30 days in advance of taking effect.

For privacy-related questions, use the contact form on our website at talimi.app/contact.