Privacy Policy
At Talos, we respect your privacy and are committed to protecting your personal data and the business-critical operational data you process through our Platform. This Privacy Policy describes how Talos RPA Suite Inc. ("Talos," "we," "us," or "our") collects, uses, stores, processes, and protects information when you access or use the Talos Cloud dashboard, the Process Designer, and the downloadable local Talos Agent (collectively, the "Platform").
1. DATA COLLECTION SCOPE
To operate the Platform and facilitate automation synchronization, we collect data across two distinct environments: Talos Cloud (Web Application) and Talos Agent (Native Desktop Application).
1.1 Cloud-Level Data (Web Application)
- Account Information: Name, email address, corporate association, job title, and login credentials when you register on Talos Cloud.
- Billing & Transaction Data: Billing address, credit card tokens, and invoice history. Payment processing is securely handled by our PCI-compliant third-party processor (Stripe); we do not directly store plaintext financial credentials on our servers.
- Workflow Metadata: Structural data regarding Customer-Generated Workflows, including flow definitions, activity logs, trigger schedules, step names, connection identifiers, and operational telemetry.
1.2 Agent/Endpoint-Level Data (Native Desktop Software)
The native Talos Agent runs on your local infrastructure. By design, we minimize the amount of local data transferred back to Talos Cloud, limiting such collection to:
- Telemetry & Diagnostics: Execution start/end timestamps, elapsed execution time, CPU/RAM usage statistics, software crash logs, and process error codes.
- Host System Metrics: Host OS version, processor architecture, hostname, and local IPv4/IPv6 addresses to identify unique active nodes.
- Execution Logs: Debugging and console logs generated during Workflow execution. Licensee has the ability to customize log level settings (e.g., Info, Warn, Debug, Error) to prevent or limit the transmission of verbose outputs containing sensitive variables.
2. HANDLING OF PROCESS DATA & CREDENTIALS
RPA processes frequently require access to sensitive systems, APIs, database credentials, and website login flows. We have implemented strict technical boundaries to secure this data.
2.1 Encryption Standards
- In-Transit: All data transmitted between the native Talos Agent and the Talos Cloud is encrypted using Transport Layer Security (TLS 1.3 or higher).
- At-Rest: Any data stored in the Talos Cloud databases, including workflow definitions, is encrypted at rest using industry-standard Advanced Encryption Standard with 256-bit keys (AES-256).
2.2 Secrets and Credential Vaulting
- Local Vaulting (Recommended): We strongly encourage Customers to store credentials, private keys, and passwords locally on the host machine running the Agent (e.g., using OS keychain integrations, local environmental variables, or active directory secrets). Local secrets remain fully on the Customer's endpoint and are never transmitted to Talos Cloud.
- Cloud Vaulting (Optional): If a Customer chooses to store automation credentials, third-party API keys, or database passwords within the Talos Cloud portal, these secrets are:
- Encrypted on the client-side using cryptographic salts before upload.
- Stored as ciphertext in our secure vaults using KMS envelope encryption.
- Decrypted on-the-fly inside the secure memory of the authorized local Talos Agent only at the exact moment of execution.
3. THIRD-PARTY SUBPROCESSORS
To provide, support, and secure the Platform, we engage standard third-party infrastructure and service providers. These subprocessors process data under our instructions and are bound by strict contractual data protection agreements:
| Subprocessor | Purpose | Processing Location |
|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, database management, and backup infrastructure. | United States / European Union |
| Google Cloud Platform (GCP) | Central dashboard analytics, workflow validation APIs, and telemetry processing. | United States / European Union |
| Stripe, Inc. | PCI-DSS compliant credit card payment processing and recurring subscription management. | Global |
| PostHog, Inc. | Non-essential user-behavior analytics and feature-flag telemetry (Web Dashboard only). | United States |
4. SECURITY CONTROLS & SECURITY WARRANTY
Talos maintains a comprehensive security program designed to prevent unauthorized data access, modification, or exposure. Our controls include:
- Network Firewalls & IDPS: Continuous monitoring of cloud ingress and egress points.
- Vulnerability Management: Weekly automated vulnerability scans of Cloud endpoints and regular static code analysis (SAST) of native Agent binaries.
- No Payload Inspection: Talos does not inspect or record the actual payloads, database records, document content, or images being processed locally by your native Agent, unless you explicitly configure the Agent to upload a specific file as an execution output artifact to Talos Cloud.
5. USER RIGHTS (GDPR, CCPA/CPRA, HIPAA COMPLIANCE)
Depending on your geographic location, you may possess specific legal rights under frameworks such as the General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA). These rights include:
5.1 Right to Access & Portability
You have the right to request a copy of the personal information we hold about you. You can export your user data and Customer-Generated Workflows directly from the Talos Cloud dashboard at any time.
5.2 Right to Erasure ("Right to be Forgotten")
You may request the deletion of your account and associated personal data from Talos Cloud. Upon receiving a valid deletion request, Talos will permanently purge your user profile, billing records, and cloud-stored workflow files within thirty (30) days, except where retention is required for legal, tax, or regulatory compliance.
5.3 Opting-Out of Non-Essential Telemetry
While critical operational telemetry is required to coordinate job schedules between Talos Cloud and the local Agent, Customers can opt-out of non-essential analytics tracking (e.g., PostHog dashboard tracking) via the Account Settings panel in the Talos Cloud dashboard.
6. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our legal obligations, product architecture, or data handling practices. If we make material changes, we will notify you by email or via a prominent notification banner in the Talos Cloud dashboard at least fifteen (15) days prior to the changes taking effect.
7. CONTACT US
For questions, concerns, or requests regarding this Privacy Policy or your data rights, please contact our Data Protection Officer at:
Talos RPA Suite Inc. - Privacy Department
Email: privacy@talosrpa.com
Address: 1209 North Orange Street, Wilmington, DE 19801, USA