Scope and roles
This policy covers information processed through the Talkform website, browser demo, importer, support channel, and related services. A customer that configures an interview may determine the purpose and questions; in that setting, the customer may be the controller or business and Talkform may process information on its behalf. Contact the form owner first when an interview was provided by another organization.
Questions about this notice can be sent to support@talkform.ai.
Information we process
- Form configuration and public form content you ask us to import.
- For the public browser demo, Talkform receives the form configuration needed to issue a short-lived realtime token plus request-security information such as IP address, request timing, and error events.
- OpenAI processes microphone audio and produces the live voice response, transcript, summary, and structured answer updates for voice mode.
- Messages and contact details you choose to send to support.
How we use information
We use information to provide and secure the requested interview, validate and export answers, import a public form, troubleshoot failures, prevent abuse, communicate about support, comply with law, and improve the service using appropriately limited data. We do not use voice to infer protected traits, emotion, honesty, or suitability.
Microphone, audio, and typed choice
Microphone access requires your browser permission and is requested only after you choose voice. When voice is enabled, Talkform issues a short-lived realtime token; your browser then streams audio directly to OpenAI. Talkform does not proxy that audio stream.
In the current public demo, transcript, summary, and structured answers remain in your browser until export and are not retained by the Talkform server. Typing stays in your browser until export and never requests microphone permission. A deployment may disable public voice entirely, in which case the demo remains text-only.
Do not share passwords, payment card numbers, government identifiers, health information, or other sensitive data unless the form owner has clearly requested it through an appropriate reviewed process.
Sharing and subprocessors
We may disclose information to service providers that host the application, provide realtime AI processing, monitor security, or support operations, subject to appropriate terms. We may also disclose information when legally required, to protect rights and safety, or as part of a business transaction with applicable safeguards. See the subprocessor list for the current public summary.
Retention and deletion
The public browser demo does not create a Talkform server session. Its transcript, summary, and structured answers remain browser-local until you export them, and leaving or refreshing the page clears that in-memory interview state.
Developer integrations that explicitly enable Talkform's process-local reference API have a different boundary: active records become inaccessible after 30 minutes, while completed or abandoned records become inaccessible within 10 minutes. Expired entries are purged on the next session API access or when the runtime is recycled, so this lazy, process-local cleanup is not a durable retention or deletion system. The store keeps minimized structured values but not transcript or summary copies.
Service-provider retention for data sent directly to OpenAI is governed by the applicable OpenAI service terms and account configuration. The service is still maturing; customers should not collect regulated or highly sensitive data until a written retention and deletion configuration has been confirmed.
Choices and rights
Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or information about processing, and to object or withdraw consent. Email support@talkform.ai with the interview link, form owner, approximate date, and a safe way to verify your request. We may need to direct requests to the customer that controlled the interview.
Security and international processing
We use technical and organizational measures intended to protect information, but no Internet service is completely secure. Providers may process information in countries other than yours, subject to their terms and available transfer safeguards. Review our security page for current practices and limitations.
Children and changes
Talkform is not directed to children and should not be used to collect children's personal information without an appropriately reviewed consent and privacy process. We may update this notice as the product changes. We will revise the date above and provide additional notice when required.