Privacy Policy

Last Updated: March 2026

1. Data Controller

Thaleia.ai is operated by [Full Legal Entity Name], registered in [Country]. Registered address: [Full Address]. Contact: legal@thaleia.ai.

2. Categories of Data We Collect

A. Account & Identity Data

  • Name and email address
  • Billing information
  • Subscription tier

B. Geospatial & Agronomic Data

  • Field boundaries (GeoJSON, shapefiles, GPS coordinates)
  • Satellite-derived agronomic indicators
  • Historical field notes

C. Voice & Media Data

  • Voice recordings submitted via messaging platforms
  • Automatically generated transcriptions
  • Images or videos (Expert tier)

D. Technical Data

  • IP address
  • Device and browser metadata
  • Security and system logs

3. Legal Basis for Processing (GDPR)

A. Contractual Necessity

To provide fertilization maps, satellite analysis, historical databases, and subscription management.

B. Consent

For processing voice recordings and optional location sharing.

C. Legitimate Interests

To improve performance, secure infrastructure, and prevent fraud.

4. Data Retention

  • Account data: retained during subscription and up to 12 months after termination.
  • Billing data: retained for up to 7 years for tax compliance.
  • Voice recordings: deleted within 24 hours after transcription.
  • System logs: typically retained for 30–90 days.

5. Third-Party Processors

We do not sell personal data.

We may share data with:

  • Cloud infrastructure providers (EU regions preferred)
  • Secure transcription and LLM providers
  • Geospatial data providers (e.g., Copernicus program)
  • Payment processors

All processors operate under Data Processing Agreements.

6. International Transfers

Where data is transferred outside the European Economic Area (EEA), we rely on Standard Contractual Clauses (SCCs) or other lawful safeguards.

7. Security Measures

  • AES-256 encryption at rest
  • TLS encryption in transit
  • Role-based access controls
  • Isolated storage buckets for media files

8. Your Rights Under GDPR

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction
  • Right to portability
  • Right to object
  • Right to lodge a complaint with your supervisory authority

9. Messaging Platforms

When using WhatsApp or Telegram to access our services, your communications are also subject to their respective privacy policies.