Privacy Policy

1. Scope and Our Privacy Roles

This Privacy Policy describes how Constellation X, LLC (“Constellation X,” “tealsi,” “we,” “us,” or “our”) collects, uses, discloses, retains and protects Personal Information when individuals visit tealsi websites, create or administer a tealsi account, purchase or use tealsi services, communicate with us, or otherwise interact directly with tealsi.

tealsi is a business software platform. For Personal Information that we collect for our own business purposes—such as account, billing, website, security, support and direct relationship information—Constellation X generally determines the purposes and means of processing and may act as a controller, business or equivalent regulated entity under applicable privacy law.

This Privacy Policy generally does not govern Personal Information that our business customers upload, collect, receive or process about their own contacts, leads, customers, employees, users or other individuals through the Platform (“Customer Data”). For Customer Data, the applicable Customer generally determines the purposes and means of processing and tealsi generally acts as a service provider, processor or subprocessor as described in our Data Processing Addendum (“DPA”). The Customer’s own privacy notice normally applies to that Customer Data.

2. Categories of Personal Information We Collect

Depending on how you interact with tealsi, we may collect the following categories of Personal Information:

• Identity and business contact information: name, company name, job title, email address, telephone number and similar business contact details.
• Account and authentication information: account identifiers, login information, authentication events, user roles, permissions and security-related account data.
• Billing and transaction information: subscription details, invoices, wallet transactions, usage records, payment status, tax-related information and limited payment metadata. Payment card information may be processed directly by our payment providers rather than stored by tealsi.
• Support and communications: support tickets, onboarding communications, feedback, requests, call or meeting information, and other communications with us.
• Device, network and technical information: IP address, browser type, device type, operating system, approximate location derived from IP, session information and similar technical identifiers.
• Usage and diagnostic information: feature usage, timestamps, page or screen activity, diagnostics, errors, performance information and product interaction data.
• Security and audit information: authentication events, security logs, audit logs, fraud or abuse signals, suspicious activity indicators and records used to protect the Platform.
• Cookie and similar technology information: information collected through cookies, pixels, local storage, analytics tools and similar technologies, subject to applicable law and available consent choices.

3. Customer Data Processed Through the Platform

The content and categories of Customer Data depend on how each Customer configures and uses tealsi. Customer Data may include names, email addresses, telephone numbers, CRM records, lead information, notes, messages, campaign data, appointment information, form submissions, website interactions, call metadata, call recordings or transcripts when enabled, AI prompts and responses, knowledge-base content, automation data, files and other information a Customer chooses to process through the Platform.

The Customer is responsible for determining whether it has the legal right, notice, consent and other authority necessary to collect and process Customer Data through tealsi. Customers should not upload or process sensitive, regulated or restricted information unless they have determined that their selected tealsi configuration, contractual arrangements and applicable safeguards are appropriate for that information.

4. Sources of Personal Information

We may obtain Personal Information from:

• you or your organization directly;
• your use of tealsi websites, applications and Platform features;
• Customer-authorized integrations and third-party services;
• payment processors, telecommunications providers and other infrastructure providers;
• security, fraud-prevention and abuse-detection systems;
• business partners, referral or affiliate sources where applicable; and
• publicly available or lawfully obtained business information where permitted by law.

5. How We Use Personal Information

We may use Personal Information to:

• provide, operate, maintain, secure and support the Platform;
• create and administer accounts, workspaces, subscriptions and usage-based services;
• authenticate users and prevent unauthorized access;
• process billing, wallet usage, subscription charges and financial records;
• provide customer support, onboarding, documentation and service communications;
• operate Customer-requested integrations, automations and workflows;
• detect, investigate and prevent fraud, spam, abuse, security incidents and prohibited activity;
• measure, diagnose, troubleshoot and improve Platform performance and reliability;
• develop and improve products using aggregated, de-identified or otherwise lawfully usable information;
• communicate about product updates, scheduled maintenance, technical incidents, security matters, legal notices and changes to our services or policies;
• enforce agreements and Platform policies;
• comply with applicable law, lawful legal process, carrier or provider requirements; and
• protect the rights, safety, security and integrity of tealsi, our Customers, providers and the public.

6. Customer Data, Processor Services and Instructions

When tealsi processes Customer Data on behalf of a Customer, we generally process that data to provide the Platform and according to the Customer’s documented instructions, the applicable agreement, our DPA and applicable law.

If a Customer uses tealsi on behalf of its own client, the Customer may itself act as a processor or service provider and tealsi may act as that Customer’s subprocessor. The Customer remains responsible for its relationship with its Customer Clients and End Users, including required notices and instructions.

Additional details about processor obligations, security, subprocessors, international transfers, deletion and data-subject assistance are contained in the Data Processing Addendum.

7. Artificial Intelligence and Voice Features

Certain tealsi features may use artificial intelligence, speech, transcription, voice synthesis, calling or related technologies. These features may require Customer Data or other content to be transmitted to third-party infrastructure providers that help tealsi provide the requested functionality.

tealsi does not itself use Customer Data to train generalized public AI models unless we expressly disclose that practice and obtain any authorization required by applicable law or contract. The processing, retention and model-improvement practices of third-party AI or voice infrastructure providers depend on the applicable provider, service configuration and contractual terms.

Customers should not submit sensitive, confidential, regulated or legally restricted data to AI or voice features unless they have confirmed that the intended use, provider configuration and contractual safeguards are appropriate. Additional rules are described in the AI & Voice Policy.

8. How We Disclose Personal Information

We may disclose Personal Information to the following categories of recipients when reasonably necessary for the purposes described in this Policy:

• Service providers and subprocessors that provide hosting, infrastructure, security, telecommunications, communications, AI, voice, analytics, support, payment processing and related Platform functionality;
• Customer-authorized third-party integrations when a Customer chooses to connect or use an external service;
• Professional advisors such as attorneys, accountants, auditors, insurers and consultants where reasonably necessary;
• Government authorities, regulators, courts, law enforcement, telecommunications carriers or providers when required or permitted by law, valid legal process, security needs, fraud or abuse investigations, or to protect rights and safety;
• Corporate transaction participants in connection with an actual or proposed financing, merger, acquisition, restructuring, sale, assignment or transfer of all or part of the business or assets; and
• Other parties when you direct us to disclose information, provide consent, or where disclosure is otherwise permitted by applicable law.

We do not sell Customer Data as a data broker. Certain website analytics, advertising, affiliate or similar online activities may be treated as a “sale,” “sharing” or “targeted advertising” under some privacy laws even when no money is exchanged for Personal Information. Where those laws apply to our practices, we will provide the notices and choices required by applicable law.

9. Third-Party Integrations and Connected Services

Customers may connect services such as Meta, Google, TikTok, WhatsApp, Stripe or PayPal. When a Customer authorizes an integration, tealsi may exchange information with that provider as necessary to provide the requested functionality.

Third-party services may independently collect and process information under their own terms, privacy policies and settings. tealsi does not control the privacy practices of independent third parties. Customers should review the privacy terms applicable to each service they connect.

Our Subprocessors & Connected Services Notice provides additional information about providers that support tealsi functionality.

10. Cookies, Analytics and Online Technologies

We may use essential cookies and similar technologies that are necessary for security, authentication, preferences and core functionality. We may also use analytics, measurement, advertising or similar technologies to understand use of our websites and improve our services.

Where consent is required by applicable law, we will request consent before using non-essential technologies. Available choices may be provided through a cookie or consent interface, account settings, browser controls or other legally recognized opt-out mechanisms where applicable.

Browser-based signals and universal opt-out mechanisms are handled where and to the extent required by applicable law and technically supported by the relevant service.

11. Administrative Access to Customer Tenants

For ordinary support purposes, tealsi personnel do not use administrative access to enter a Customer tenant without Customer authorization. Authorization may be provided through a support request, the Platform or another verifiable communication.

Limited access without prior Customer authorization may occur when reasonably necessary for security, fraud or abuse investigation, essential infrastructure operations, service restoration, protection of other users or providers, preservation of evidence, compliance with valid legal process, or other circumstances permitted by the Terms and applicable law.

Administrative access is intended to be limited to what is reasonably necessary for the applicable purpose and subject to appropriate access controls.

12. Security

We use technical and organizational safeguards designed to protect Personal Information and Customer Data. Depending on the system and context, safeguards may include access controls, authentication protections, progressive lockouts, rate limiting, monitoring, logging, backups, network and application security controls, and least-privilege administrative practices.

We intentionally do not publish detailed attack thresholds, detection rules, credentials, infrastructure secrets or other security-sensitive configuration information. No online service or security control can be guaranteed to prevent every incident, and we cannot guarantee absolute security.

13. Data Retention and Account Cancellation

We retain Personal Information for as long as reasonably necessary for the purposes described in this Policy, including providing services, maintaining business and financial records, resolving disputes, preventing fraud, enforcing agreements and complying with legal obligations.

Customer Data in an account that has been canceled or terminated will generally remain eligible for recovery or export for up to thirty (30) days after the effective termination date, subject to security, legal and technical limitations. After that period, Customer Data may be deleted or anonymized from active production systems and may no longer be recoverable.

Limited information may remain for longer periods in backups, disaster-recovery systems, security logs, audit records, fraud-prevention records, billing and tax records, legal holds, or other records that we are required or permitted by applicable law to retain.

14. International Processing and Transfers

tealsi and its service providers may process Personal Information in the United States and in other countries where we or our providers operate. Those jurisdictions may have privacy laws that differ from the laws where an individual resides.

Where applicable law requires a recognized transfer mechanism for Personal Data transferred internationally, we will use an appropriate lawful mechanism, which may include contractual safeguards, standard contractual clauses or another permitted mechanism through our DPA or provider agreements.

15. Your Privacy Rights

Depending on your jurisdiction and our role with respect to your information, you may have the right to request that we:

• confirm whether we process your Personal Information and provide access to it;
• correct inaccurate Personal Information;
• delete Personal Information, subject to legal exceptions;
• provide a copy of certain Personal Information in a portable format;
• restrict or object to certain processing;
• withdraw consent where processing is based on consent;
• opt out of certain targeted advertising, sale or sharing of Personal Information, or certain profiling where applicable; and
• appeal certain decisions concerning a privacy-rights request where applicable law provides an appeal right.

If your request concerns information stored by one of our Customers in that Customer’s CRM, account, campaign, website or other workspace, you should normally contact that Customer first because the Customer controls that Customer Data. We will assist Customers with valid requests as required by our DPA and applicable law.

We may need to verify your identity or authority before completing a request. We will not unlawfully discriminate against you for exercising applicable privacy rights.

16. Texas Privacy Rights

If the Texas Data Privacy and Security Act (“TDPSA”) applies to our processing of your Personal Information, Texas residents may have rights to confirm processing and access Personal Information, correct inaccuracies, request deletion, obtain certain data in a portable format, and opt out of targeted advertising, the sale of Personal Information, or certain profiling as provided by law.

To exercise an applicable Texas privacy right, email support@tealsi.com with the subject line “Privacy Request” and describe the right you wish to exercise. If we decline a request and Texas law gives you a right to appeal, you may appeal by replying to our decision or emailing the same address with the subject line “Privacy Appeal.” If an appeal is denied, Texas residents may have the right to submit a complaint to the Texas Attorney General.

We do not sell Customer Data as a data broker. If a practice involving Personal Information is treated as a sale, targeted advertising or another opt-out activity under applicable Texas law, we will provide any notice and opt-out method required for that practice.

17. Children

tealsi is a business software platform intended for business users and account holders who are at least 18 years old. We do not knowingly offer tealsi accounts directly to children under 13.

Customers are responsible for determining whether their own use of tealsi involves children’s data and for complying with applicable laws governing that data. If we learn that we collected a child’s Personal Information in circumstances requiring deletion or other action, we will take appropriate steps consistent with applicable law.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, providers, business practices or legal requirements. We will post the updated version and revise the “Last updated” date. When a change is material, we will use reasonable methods to provide additional notice where required or appropriate, such as email or an in-product notice.

19. Contact and Privacy Requests

For questions about this Privacy Policy or to submit an applicable privacy-rights request, contact:

• Company: Constellation X, LLC / tealsi
• Email: support@tealsi.com
• Subject for privacy requests: Privacy Request
• Subject for appeals: Privacy Appeal

For Customer Data controlled by a tealsi Customer, please contact that Customer directly first.