Privacy Policy

Who this applies to

This policy covers our marketing site, the Big Talk web app, and the briefings the product generates. By using Big Talk you agree to the practices described here.

What we collect

We collect three kinds of information:

• Account data — your email address, and (if you sign in with Google) your name and profile photo.
• Inputs you provide — the people and companies you want briefed, optional LinkedIn URLs, your meeting context, and your own profile details.
• Enrichment data — public, professional information about meeting participants, retrieved through licensed data providers and public web search at the time you request a briefing.
• Usage data — basic logs and product analytics needed to run and secure the service.

What we do not collect

Big Talk is built around a strict source allowlist. We do not collect or surface personal email addresses, phone numbers, home addresses, dates of birth, or private social feeds. Where a provider returns such fields, we drop them before they reach a briefing.

How we use information

We use the information above to: generate and deliver briefings; operate calendar auto-briefs and channel delivery you've enabled; process subscriptions and manage workspaces; secure the service and prevent abuse; and improve the product. We do not sell your data, and we do not use the contents of your briefings to build profiles for advertising.

Sources and subprocessors

We rely on a small set of vetted providers to run Big Talk. Each processes data only to provide its function:

• Supabase — authentication and database hosting.
• Vercel — application hosting.
• Anthropic — language models that generate briefing text.
• People Data Labs and Serper — licensed B2B enrichment and public web search.
• Resend — transactional and product email.
• Stripe — subscription billing.
• Google Calendar API — read-only calendar access, only if you connect it.
• Telegram — message delivery, only if you connect it.

Legal bases (EEA/UK)

Where the GDPR applies, we process data on the basis of: performance of our contract with you (to provide the service); our legitimate interests (to secure and improve the product, and to surface public B2B context); and your consent (for optional integrations like calendar and Telegram, which you can withdraw at any time).

Retention

We keep account and workspace data for as long as your account is active. Enrichment results are cached for a limited period to control cost and speed up repeat briefings — professional profile data for up to 30 days, company data for up to 7 days — after which they are refreshed or expire. Briefings are retained until you delete them or close your account.

Your rights

You can access, correct, export, or delete your data, and object to or restrict certain processing. The fastest way to request deletion is our self-serve form. We honor verified requests within 30 days.

• Submit a deletion request at /delete-data.
• Email privacy@big-talk.io for access, correction, or portability.

International transfers

Our providers may process data in countries outside your own, including the United States. Where required, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.

Security

We use encryption in transit, scoped access controls, and row-level security so users and workspaces can only reach their own data. No system is perfectly secure, but we treat your data as we'd want ours treated.

Children

Big Talk is a tool for working professionals and is not directed to anyone under 16. We do not knowingly collect data from children.

Changes

We may update this policy as the product evolves. Material changes will be reflected here with a new date, and where appropriate we'll notify you in the app or by email.

Contact

Questions, or want to exercise a right? Email privacy@big-talk.io and we'll get back to you.