Privacy Policy

Last updated: October 2026

TalkMie ("we", "our", "us") is committed to protecting your personal data. This policy explains what data we collect, how we use it, and your rights under applicable privacy laws including the GDPR.

1. Who we are

TalkMie is an AI twin platform that lets you create personalized AI profiles trained on your own content. For questions about this policy, contact us at hey@talkmie.com.

2. What data we collect

Account data

When you register, we collect your name, email address, and a hashed password. We never store your password in plain text.

Training data you upload

This includes text you type, voice recordings, photos, and documents. This content is stored in our database and object storage solely to power your AI twin. You retain full ownership and can delete any item at any time.

Conversation data

Conversations between visitors and your public AI twin are stored for up to 60 days, after which they are automatically deleted. You can view these conversations in your Inbox and delete them individually at any time.

Visitor connection data

When a visitor interacts with a public AI twin, we log their IP address and approximate country to detect abuse, enforce rate limits, and protect platform integrity. This data is stored alongside the conversation record and is automatically deleted after 60 days together with the conversation.

Contact details left in a chat

If a visitor shares an email address in a chat so the TalkMie team can answer a support request, it is stored with that conversation, used only to reply, and deleted together with the conversation after 60 days.

Payment data

Plans, videos and purchases from a twin are paid through Stripe. Card details go directly to Stripe and never reach our servers. We receive the payment status, the amount, the billing email and a customer reference, which we keep for as long as tax and accounting law requires.

Consent record

When you create an account, we record the date and time of your consent and your IP address at registration. This is retained for as long as your account is active and is used solely to maintain an auditable record of your agreement to our Terms of Service and Privacy Policy.

Usage and analytics data

We collect aggregate usage statistics (number of conversations, messages per session) to improve the platform. This data is not tied to individual visitor identities.

Cookies and local storage

We use essential cookies and local storage to keep you signed in (access and refresh tokens).

On our pages (not inside chat widgets embedded on other websites) we use Microsoft Clarity to see how the site is used: usage statistics and session recordings of clicks, scrolling and page views. Until you choose "Accept all", Clarity runs without cookies and treats every page view on its own, so it cannot link the pages of one visit or recognise you on a later visit. Only after "Accept all" does Clarity set its cookies (_clck and _clsk) to connect the pages of a visit.

Only if you choose "Accept all" do we also load Google Analytics and the Meta Pixel, and only then do our servers report sign-ups and purchases to Meta's Conversions API to measure our advertising. You can change your choice at any time with the cookie settings link in the footer or at the end of this page. Choosing "Reject all" removes Clarity's cookies and switches it back to working without cookies.

3. How we use your data

  • To provide and operate the TalkMie service
  • To process your training data and generate AI responses
  • To send transactional emails (password reset links, receipts, replies to support requests)
  • To take payments for plans, videos and purchases from a twin
  • To understand how the platform is used and improve it
  • With your consent, to measure the reach of our advertising
  • To comply with legal obligations

We do not sell your personal data to third parties. We do not use your training data to train our own AI models or share it with other users.

4. Legal basis for processing (GDPR)

  • Contract performance: processing your account data and training content to provide the service you signed up for
  • Legitimate interests: aggregate analytics and cookieless Microsoft Clarity measurement to improve the platform
  • Consent: analytics and marketing cookies (Google Analytics, Clarity's cookies), the Meta Pixel and server-side advertising events (can be withdrawn at any time)
  • Legal obligation: retaining records required by law

5. Third-party services

We use the following sub-processors to operate TalkMie:

ProviderPurposeLocation
Hetzner Online GmbHServers: database, cache, object storage and vector databaseGermany (EU)
Google (Gemini API)AI text generation, transcription, image description and embeddingsUSA
Google Cloud (Vertex AI, Text-to-Speech)Narration of videos in a stock voice, and video generation for timeline videosUSA / EU
fal.ai (Features & Labels, Inc.)Image and video generation for timeline videosUSA
StripePayments, invoices and tax calculationEU / USA
Google WorkspaceSending transactional emailsEU / USA
Google Analytics (only with consent)Website usage statisticsEU / USA
Microsoft ClarityUsage statistics and session recordings, without cookies until you consentEU / USA
Meta (only with consent)Advertising measurement: Meta Pixel and Conversions APIEU / USA

Data transferred to the USA is covered by the providers' Standard Contractual Clauses or their certification under the EU-US Data Privacy Framework. We have entered into a Data Processing Agreement (DPA) with Google covering the use of the Gemini API. Our infrastructure provider processes data solely within the EU under a signed DPA.

6. Data retention

  • Account data: retained while your account is active. Deleted on account deletion.
  • Training data: retained until you delete it manually, or when your account is deleted.
  • Visitor conversations: auto-deleted after 60 days.
  • Password reset tokens: expire after 15 minutes and are deleted immediately after use.
  • Auth session tokens: expire after 7 days and are deleted on logout.

7. Your rights

Under GDPR (and equivalent laws), you have the right to:

  • Access: request a copy of the data we hold about you
  • Rectification: correct inaccurate personal data
  • Erasure: delete your account and all associated data
  • Portability: export your training data
  • Objection: object to processing based on legitimate interests
  • Restriction: request that we limit how we use your data

To exercise any of these rights, email hey@talkmie.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. Security

We protect your data using industry-standard measures: bcrypt password hashing (12 rounds), short-lived JWT access tokens (15 minutes), rotating refresh tokens stored as SHA-256 hashes, HTTPS in production, and strict user-isolation on all data queries. No security measure is 100% foolproof, if you believe your account has been compromised, contact us immediately.

9. Children's privacy

TalkMie is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Changes to this policy

We may update this policy from time to time. We will notify registered users of material changes by email or by displaying a notice in the platform. The "last updated" date at the top of this page always reflects the most recent version.

Questions? Email hey@talkmie.com.
Privacy Policy | TalkMie