Built to be trusted with your customers.

Data protection

• Customer emails are hashed; personally identifiable information is encrypted at rest.
• Credentials for your connected platforms are stored encrypted, never in plain text.
• Data is processed securely and is never sold or shared.
• Every autonomous send decision and every guardrail block is written to an append-only audit log that even we cannot edit.

Compliance

• Built for GDPR: we honor store and customer deletion requests and redact data on request.
• Shopify app lifecycle webhooks keep deletions in sync automatically.
• Texts go out only inside the recipient’s own 8am–8pm window, and SMS consent is tracked per phone number.

Infrastructure

• Hosted on established cloud infrastructure with managed, access-controlled databases.
• Least-privilege access and auditable data pipelines.
• A deliverability governor pauses Telltale’s own sending if your complaint or bounce rates rise — your sender reputation is protected from us.

Have a security questionnaire or DPA? Get in touch and we’ll help.