Privacy Policy

1. Data We Collect

Tellback.io provides user feedback and session recording widget integrations for developers. When you or your visitors interact with sites using the Tellback widget, we collect:

• Interactive Timelines: Button click timings, console error logs, network failure routes, scroll depths, rage clicks, and form metadata changes.
• User Submissions: Explicit text inputs, element selectors, page URLs, optional identities (names/emails), and voice audio feedback recordings.
• Metadata Redaction: We proactively mask input fields, strip API query secrets/passwords, and run client-side masks to ensure no raw customer credentials or tokens are uploaded.

2. AI Processing Boundaries

Submissions (feedback texts, audio transcriptions, and interactive event logs) are analyzed using **Google Cloud Vertex AI Gemini models**.

Your data is processed in private Google Cloud platform instances. In accordance with Google Cloud enterprise terms, customer data processed via Vertex AI endpoints is **never retained** for foundational model training or shared outside of your workspace boundaries.

3. Retention & Deletion

We operate on deterministic UTC retention periods:

• Free Plan: Interactive sessions logs are automatically pruned after **7 days**. User feedback and screenshots are pruned after **30 days**.
• Pro Plan (Coming Soon): Sessions logs are retained for **30 days**. Feedback records are retained for **365 days**.

Workspace administrators may trigger immediate deletion of any feedback item, session, or the entire workspace directly from their control panel.

4. Cookies and Local Storage

Our widget uses only essential, non-persistent session storage properties (e.g. to maintain the visitor ID and tracking session context during tab navigation). We do **not** inject any marketing, advertising, or third-party tracking cookies.

5. Contact Us

For privacy requests or questions regarding security boundaries, contact us at: hello@tellback.io.