Privacy Policy

Introduction

This privacy policy (“policy”) explains how we process your personal data, including what we use it for and how we store and protect it. It also explains the rights that you have when we process your personal data.

Who we are

We are the company responsible for the processing of your personal data in accordance with this policy:

Tally Technologies ApS
Denmark
Company registration no.: DK-43678043
Email: hello@tally.inc

To make the policy more user-friendly we use “we”, “us”, “our” etc. to describe our company. When we talk about our “website” we mean tally.inc and any other sites and apps we own and operate. When we refer to “you” we mean you as a visitor to our website, a user of our apps, or a customer (or user at a customer) of our online products or services.

Links to other websites

Our website, emails, or social media may contain links to other companies, apps, or websites (“other websites”) that aren’t ours. This policy doesn’t cover how those other websites process your data. Please read the privacy notices on the other websites you visit.

Why, what and for how long we process your data

Deliver our services & products

We process your data to deliver our products and services, contact you about our platform, carry out demos and workshops, enable login and account features, register and identify you as a customer/user, process payments, provide support and respond to questions, and send service-related messages and product updates.

Data we may process:

  • Contact details (name, email, title, phone/mobile).
  • Company details (company name, domain, address, country).
  • Purchase/subscription history.
  • Your requests and interactions (sign-up dates, acceptance of terms, demo/support requests, timestamps).
  • Content of emails you send us.
  • Payment information (e.g., card details, billing address) processed via our payment providers.
  • Login/verification data; account setup choices; user role; activity logs.
  • Product usage (features enabled, plan) and related telemetry.

We don’t process special categories of data unless strictly necessary and lawful.

Legal bases:

  • Performance of a contract (GDPR Art. 6(1)(b)).
  • Compliance with legal obligations (GDPR Art. 6(1)(c)).
  • Legitimate interests (GDPR Art. 6(1)(f)).
  • Establishment, exercise or defence of legal claims (GDPR Art. 9(2)(f)).

Retention: Generally, for as long as you use our products or have an account with us plus 5 years after your account/relationship ends. Special circumstances or legal requirements may lead to shorter or longer periods. If you’re employed by one of our customers, we keep your data as long as we have a business relationship with that customer.

Sources: Directly from you; publicly available online sources (e.g., LinkedIn); public authorities; and our payment providers (e.g., Stripe).

Marketing

We process your data for marketing purposes, including sending newsletters, running webinars/demos, tailoring communications to your interests, and sending relevant product promotions and offers.

Data we may process:

  • Contact and company details.
  • Purchase history, interest areas, and use of our digital services.
  • Newsletter subscriptions, demo requests, and marketing consents.
  • Event registrations and participation.

Legal bases:

  • Your consent where required (GDPR Art. 6(1)(a)).
  • Compliance with legal obligations (GDPR Art. 6(1)(c)).
  • Legitimate interests (GDPR Art. 6(1)(f)).
  • Legal claims where necessary (GDPR Art. 9(2)(f)).

Retention: While you subscribe to newsletters/marketing. If you unsubscribe, we keep minimal records for 2 years to document your opt-out and prevent further sends. We keep general marketing interaction data for up to 2 years from our most recent contact. For events/webinars, we keep data as long as needed for the event and evaluation.

Sources: Directly from you; publicly available online sources (e.g., LinkedIn).

Improve, optimise, or modify our website, online services and apps

We process your data to operate our services, enhance and protect security and reliability, improve content and UX, and understand what is most helpful to users.

Data we may process:

  • Standard web logs (IP address, browser type/version, user agent, pages visited, timestamps, time on page).
  • Cookie/SDK information and similar technologies (subject to your choices).
  • Interaction data when you visit our websites, sign in, or interact with emails.

Legal bases: Consent where required (Art. 6(1)(a)); legal obligations (Art. 6(1)(c)); legitimate interests (Art. 6(1)(f)); legal claims (Art. 9(2)(f)).

Retention: Up to 2 years; cookie data per our cookie policy and your choices.

Sources: Directly from you; cookies and similar technologies; your device/browser; publicly available sources.

Business and product development

We process data to conduct analytics and audits, develop new features, identify usage trends, measure campaign effectiveness, and operate and expand our business.

Data we may process:

  • Contact and company details.
  • How you use our products and services.
  • Purchase history, interest areas, and use of our digital services.

Legal bases: Contract (Art. 6(1)(b)); legitimate interests (Art. 6(1)(f)).

Retention: While you have an account plus up to 3 years after you stop using our services.

Statistics

We compile statistics about website/app usage to understand performance and improve our services.

Data we may process:

  • Standard web logs.
  • Cookie/SDK information.
  • Interaction data from visits and emails.

Legal bases: Consent where required (Art. 6(1)(a)); legal obligations (Art. 6(1)(c)); legitimate interests (Art. 6(1)(f)).

Retention: Up to 3 years from your website visits or product use.

Comply with obligations

We process data to comply with legal obligations and requests from public authorities, adhere to relevant standards and internal policies, and protect our operations and rights.

Legal bases: Legal obligations (Art. 6(1)(c)).

Retention: Based on statutory requirements.

Additional information

  • We do not sell or rent your data to marketers or third parties.
  • Multiple legal bases may apply to the same processing activity.
  • We may also use your data in other ways; where we do, we’ll inform you at the time of collection.

Keeping your data safe

We use reasonable organisational, technical and administrative measures to protect your data. The internet is not 100% secure; emails may not be encrypted, so please avoid including confidential information in emails.

For details on our security practices, contact hello@tally.inc.

Third parties and processors

We use service providers (“processors”) to deliver our services (e.g., hosting, email delivery, analytics, payments, support). We ensure contracts and safeguards are in place, especially for transfers outside the EU/EEA.

Examples: Stripe (payments), Hetzner/AWS (hosting), Postmark/Resend (emails), CRM and support providers.

If we are involved in a bankruptcy, merger, acquisition, or reorganisation, your information may be transferred as part of that transaction. This policy will continue to apply afterwards.

Transfers outside the EU/EEA

Transfers outside the EU/EEA may rely on: the EU-U.S. Data Privacy Framework; EU Standard Contractual Clauses; or other safeguards recognised under GDPR.

You may request a copy or summary of the transfer mechanism by contacting hello@tally.inc.

Your rights

  • Access and rectification of your personal data.
  • Erasure of your data in certain cases.
  • Withdraw consent at any time (email us).
  • Restriction and objection to processing in certain cases.
  • Data portability in a structured, machine-readable format.
  • Object to direct marketing at any time.

We will respond within one month of your request (extendable by two months for complex requests).

Complaints

You can lodge a complaint with your local data protection authority. In Denmark:

Datatilsynet (Danish Data Protection Agency)
Website: https://www.datatilsynet.dk
Email: dt@datatilsynet.dk
Address: Borgergade 28, 5., 1300 København K
Telephone: +45 33 19 32 00

Assistance

To exercise your rights or ask questions about this policy, contact us at hello@tally.inc.

How to unsubscribe

If you’ve subscribed to newsletters or marketing, you can unsubscribe at any time using the unsubscribe link in our emails or by emailing hello@tally.inc.

Children and our services

Our services and website aren’t directed to children. You must be 18 or older to use our services.

Changes to this policy

We may update this policy from time to time. We will take reasonable steps to inform you via our website. If you are a registered user, we will notify you via email if we make significant changes. Continued use of our website or services after notice means acceptance of our privacy practices.

Last updated: 29 September 2025