Privacy policy
Effective 9 August 2026.
Tala is a booking and stock record for small businesses, operated by Core4 Systems. The short version: we store what you type into your workspace, we do not store the conversations or screenshots you paste, we do not run analytics or ad tracking, and you can have everything deleted by sending one email.
Who this covers
Two kinds of people show up in Tala: you, the business owner with an account, and your customers, whose names and contact details you enter when you record a booking or an order. Your customers do not have accounts with us. Their details belong to your business; we hold them only to run the service for you.
Your account
We store:
- Your email address, your name if you gave one, your workspace name, and the mode you picked.
- Your password as a one-way hash. We cannot read it and never store it in plain text.
- If you signed in with Google or Facebook: the provider name and the provider's stable account id, nothing else. We do not store provider access tokens, and we cannot post, read your contacts, or act on your behalf there. The email address the provider confirms is used to match or create your account.
Pasted conversations and screenshots
When you paste a chat thread or upload screenshots to pre-fill a booking or an order, that content is sent to a third-party AI model provider to extract the details, shown back to you for checking, and discarded. Tala does not store the pasted text or the images. Nothing is saved until you review the filled-in form and press save yourself.
The only record we keep of a parse is that one happened: which workspace, whether it was for a booking or an order claim, whether it succeeded, and when. No content, no field values, no customer names.
Google Calendar
Connecting a calendar is optional. If you connect one, we store the calendar id and send booking summaries to it: customer name, party size, the item booked, dates, and any notes you wrote. The connection works by you sharing the calendar with our service account; we never receive your Google password or an access token for your Google account. Disconnect any time in Settings.
Cookies
Tala sets exactly three cookies, all required for the service to work, which is why there is no cookie consent banner: there is nothing optional to consent to.
- tala_session keeps you signed in.
- tala_oauth_tx and tala_social_pending exist only for the few minutes it takes to sign in with Google or Facebook, then expire.
There are no analytics cookies, no advertising cookies, and no third-party trackers.
The only routine email Tala sends is a password reset link, delivered through Resend to the address on your account. We may also write to you about your account or changes to these terms. We do not send marketing email.
Security records
Sign-in, sign-up, and password reset attempts are recorded with the email address and IP address involved, so repeated attempts can be slowed down. These records are capped and old entries are pruned automatically.
Where your data lives
The database is hosted on Neon in Singapore, and the application runs on Vercel. Connections are encrypted in transit.
Deleting your data
Email contact@core4sys.com from the address on your account and ask for deletion. We will delete your workspace and everything in it: your account, your customer records, bookings, orders, and any sign-in link to Google or Facebook. This is also how you delete data connected to signing in with Facebook or Google.
Changes and contact
If this policy changes, the effective date above changes with it. Questions go to contact@core4sys.com.