SECURITY & PRIVACY

Your ideas stay yours.

TalkGraph exists to build your brain, an extension of your own thinking that grows with you. That only works if you trust it with the things you say out loud. So here is exactly how your data is handled, in plain language.

Extension, not extraction

Most tools treat your words as raw material, something to be harvested, analysed and monetised. TalkGraph is built on the opposite principle: your conversations are yours, and the only thing we make from them is something we hand straight back to you. A map. A brain. Your thinking, compounded.

We don't track how long you spend, we don't score your behaviour, and we don't build profiles. The only metrics we care about are outputs: decisions mapped, ideas strengthened, knowledge that grows.

How we handle your data

Private by default

Every graph is private by default. Nothing is public, listed or searchable to anyone but you unless you explicitly share it, and you can kill a shared link at any time.

Processed to build your map

Your conversations are processed to build your map and your Brain. The third-party AI providers we use do not train on API traffic.

A short, named list of processors

Only the infrastructure providers listed below process your data, and only the data required to run TalkGraph, under data processing agreements.

No behavioural profiling

We don't score your behaviour, build advertising profiles, or run analytics on what you talk about. Your brain is an extension of you, not an input to us.

How your data is protected

Encrypted in transit and at rest

All traffic runs over TLS, and the database is encrypted at rest with AES-256. Your words are protected on the way in and on disk.

Row-level security, owners only

Every table enforces per-user isolation at the database level. No other account can read your graphs. Even a bug in our own code can't bypass the database's own rules.

Private by default, revocable sharing

Sharing is a deliberate act: a read-only link with a rotating token. Make a graph private again and the old link dies instantly.

Minimal access, server-side only

The credentials that can read user data exist only on the server, never in your browser, and are never exposed to other users or third parties.

You stay in control

Export anything, anytime

Every graph exports to PNG, PDF or Markdown in one click. Your knowledge is portable. No lock-in, ever.

Delete means delete

Remove a graph and it's gone from the database. Not archived, not softened, not kept "just in case".

Kill shared links instantly

Re-sharing mints a fresh link and retires the old one. You decide exactly who holds access, and for how long.

Your rights under UK GDPR

TalkGraph operates under the UK General Data Protection Regulation and the Data Protection Act 2018. We process your data to provide the service you signed up for, and only that. You have the following rights, and most of them are built directly into the product rather than hidden behind a request form:

Access

Ask us what personal data we hold about you and we'll provide a copy. Most of it is already visible in your account.

Portability

Your graphs export to PNG, PDF and Markdown at any time, so your data is never trapped with us.

Rectification

Anything inaccurate in your account or graphs can be corrected by you directly, or by us on request.

Erasure

Delete any graph instantly, or ask us to erase your account and personal data entirely.

Objection & restriction

You can object to or restrict how your data is processed at any time. Just ask.

Complaints

If you're ever unhappy, you have the right to complain to the UK Information Commissioner's Office (ICO).

To exercise any of these rights, contact us at privacy@talkgraph.ai. We respond within 30 days, as the law requires, and usually much faster.

Who processes your data

Building a map from speech takes a small number of specialist services. Each one processes only what it needs, only for the job it does:

SupabaseDatabase & authentication (encrypted at rest, row-level security)
VercelHosting & delivery
DeepgramLive speech transcription - audio is processed to text, not stored by us as audio
OpenAIAI structuring of transcripts into maps - content is processed per request, not used for training
ResendTransactional email (sign-in links, digests)
StripePayments - card details never touch our servers

No advertising networks. No analytics trackers watching your behaviour. No data brokers.

Build a brain that's yours alone.

Start mapping, free