Privacy Policy

1. Who we are

Talvio is owned and operated by Talvio LLC ("we," "us," "our"). Our service helps organizations understand AI training exposure across their workforce by analyzing anonymized job title data. You can reach us at .

2. What data we collect

Data you upload: Your uploaded roster file should contain only job titles and department names — no employee names, IDs, dates of birth, salaries, or any personally identifiable information. The file is processed in server memory and is never written to disk or stored in our database. Unique job titles and department names from your file are matched against standard occupational categories internally; only those generic, standardized job title labels are sent to the Anthropic Claude API for AI scoring — not your original file data.

Account data: When you purchase an analysis, Stripe collects your payment information directly. We receive only your email address from Stripe to create your account. We store your email address, a hashed password (if you set one), and a record of your analyses (results data, expiration timestamps, and usage metadata).

Usage data: We collect standard web server logs (IP address, browser type, pages visited, timestamps). These are used for security, abuse prevention, and debugging only.

3. What we do NOT collect

• Employee names, IDs, Social Security numbers, or any personally identifiable employee information
• Salary, compensation, or HR classification data
• Payment card numbers (handled entirely by Stripe)
• Tracking cookies, advertising pixels, or behavioral analytics

4. How we use your data

We use the data we collect to:

• Run your workforce AI readiness analysis and return results to you
• Manage your account and process renewals
• Send transactional emails (purchase confirmation, results ready, expiration notices)
• Detect and prevent fraud, abuse, and unauthorized access
• Comply with legal obligations

We do not use your data for advertising, do not sell it to third parties, and do not use it to train AI models.

5. Intended use and HR decisions

Talvio outputs — including AI exposure scores, training opportunity assessments, and all related reports — are intended for informational and workforce planning purposes only. They must not be used as the basis for employment, compensation, promotion, termination, restructuring, or any other individual HR decision. The scores reflect probabilistic assessments based on occupational classification data and are not evaluations of any individual employee's capabilities, performance, or future role.

6. Data retention and deletion

Analysis results (scores, matched occupations, aggregated statistics) are automatically and permanently deleted 7 days after your analysis completes. Your uploaded roster file is never stored — it is discarded from memory as soon as processing ends.

Account records (email address, hashed password) are retained as long as your account exists. Analysis history metadata (purchase date, completion status, expiration timestamps) has no scheduled deletion and is retained indefinitely unless you request otherwise or we are required to delete it by law.

You may request deletion of your account and associated personal data at any time by emailing . We will complete deletion within 30 days.

7. Third-party services

We use a small number of trusted third-party services:

• Stripe — payment processing. Your card data is handled by Stripe and subject to their privacy policy.
• Anthropic Claude API — AI scoring. After your file is matched against standard occupational classifications internally, only those generic, standardized occupation labels are sent to the Anthropic API for AI exposure scoring. Your original job title text and department names are not transmitted externally. Anthropic's data use policy governs their processing of these standardized labels.
• Render — cloud hosting. Our servers and database run on Render's infrastructure in the United States.
• Resend — transactional email delivery.

8. Security

We use HTTPS for all data transmission, store passwords using bcrypt hashing, enforce rate limiting on authentication endpoints, and restrict administrative access. Despite these measures, no system is completely secure. We encourage you to use a strong, unique password for your account.

9. Cookies and session data

We use a single session cookie to keep you logged in. This cookie is set with HttpOnly and Secure flags and expires after 7 days of inactivity. We do not use third-party tracking cookies or advertising cookies of any kind.

10. Your rights

You may request to access, correct, or delete your personal data at any time. To do so, email from the address associated with your account. We will respond within 30 days.

11. Children

Talvio is a business tool intended for use by adults and organizations. We do not knowingly collect data from anyone under the age of 18. If you believe a minor has submitted data to us, contact us immediately and we will delete it.

12. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or by a notice on our website at least 14 days before they take effect. The effective date at the top of this page reflects the most recent revision.