Privacy
Privacy policy
Who we are
Tallyn Inc. is a Delaware C corporation with its office at 1201 Second Avenue, Suite 900, Seattle, WA 98101, United States. We are the controller of the personal information described here. Questions go to privacy@tallynaccess.com.
What we collect
| What | Why | Kept for |
|---|---|---|
| Name, email, company | To run your account and reply to you | Life of the account, then 30 days |
| Password hash | To sign you in. We never see the password itself | Life of the account |
| Page URL or HTML content you submit | To produce your audit and let you view it again | Until you delete it |
| Audit reports we produce | So you can come back to them | Until you delete them |
| Usage counts | To enforce the free tier and bill correctly | 24 months |
| Form submissions | To answer your message or application | 24 months |
| Server logs | Reliability and abuse prevention. No contract text | 30 days |
What we do not collect
- We do not run advertising trackers, and there are no third-party advertising cookies on this site.
- We do not buy personal information from data brokers.
- We do not ask for payment card numbers. If you subscribe, Stripe handles the card and we never see it.
- We do not collect special category information, and you should not put any into a page you audit.
Who your information goes to
Our model providers receive the page content needed to produce your accessibility audit, under business API terms that prohibit training on that traffic and prohibit using it for any purpose other than producing your result. The routing table on the How the AI works page names which models are live.
Our hosting and database providers store the data on our behalf inside the United States. Stripe processes payments if you subscribe. That is the complete list of processors, and we will keep it complete: if it changes, this page changes.
Legal bases
Where the GDPR or UK GDPR applies to you, we rely on: performance of a contract, to give you the service you asked for; legitimate interests, to keep the service secure, prevent abuse and understand aggregate usage; and consent, for anything optional, which you can withdraw at any time.
Your rights
You can ask for a copy of what we hold, correct it, delete it, or object to a particular use. Most of it you can do yourself: reviews delete from the dashboard and the whole account deletes from Settings.
For anything else, email privacy@tallynaccess.com and we will answer within 30 days. We will not make you jump through hoops and we will not charge you for it. If you are in California, the CCPA rights to know, delete and opt out of sale apply, and we do not sell personal information.
Children
Tallyn is a business tool and is not directed at anyone under 18. We do not knowingly collect information from children, and if we learn we have, we will delete it.
Changes
If we change this policy in a way that matters, we will email account holders before it takes effect rather than quietly updating a date. This version is effective 1 July 2026.
The practical version of this, with the actual retention windows and what happens to scanned page content, is on the security page. Cookies are covered on the cookies page.