Privacy Policy
Last updated 14 September 2026
Taalu is operated by Eloquent Technologies FZCO, Dubai, United Arab Emirates. This policy explains what Taalu does with personal data, both the shop owner's and their customers'.
The shop owns its customers' data
A shop using Taalu decides what it collects about its own customers and why. Taalu processes that data on the shop's instructions and for no purpose of its own. We do not sell personal data, and we never use a shop's customer data to advertise anything.
What we hold about a shop
The account holder's name and email address, the business name and trade, working hours, the service menu, team members' names and email addresses, and the subscription record. Sign-in is through Google; we receive the address Google verifies and no password.
What we hold about a shop's customers
A name, a phone number, an email address where one was given, appointments and their outcome, what was bought and what it cost, any balance the shop is holding for them, and notes the shop's own team wrote. A customer record is created when somebody books; an enquiry that never became a booking stays a message thread.
WhatsApp and email
A shop connects its own WhatsApp Business number through Meta's Embedded Signup, and its own mailbox through Google or Microsoft. Messages sent to those addresses are received into the shop's inbox in Taalu so the shop can read and reply to them, and replies go out from the shop's own number and address. The number keeps working on the shop's phone exactly as it did before.
Money never passes through Taalu
Deposits and payments are taken on the shop's own Stripe or Ziina account. Taalu stores the shop's payment key encrypted so it can create a payment link, and nothing more. We never see, hold or store card numbers, and we never hold a shop's money.
How it is kept
Data is stored in Microsoft Azure. Every third-party credential — a calendar grant, a mailbox grant, a WhatsApp token, a payment key — is encrypted at rest with AES-256. Every table carries the shop it belongs to and the database itself refuses a query that does not name one, so one shop cannot read another's rows.
Who else sees it
Only the services needed to make the product work: Meta for WhatsApp delivery, Google and Microsoft for a connected calendar or mailbox, Stripe and Ziina for a payment link the shop raised, Microsoft Azure for hosting, and an email provider for sign-in links and notifications. Each receives only what that job needs. We do not share data with anybody else, and we do not sell it.
How long it is kept
For as long as the shop's account is open, because a client record is the history the shop runs on. When an account is closed we delete its data within thirty days, apart from records we are required to keep for tax or legal reasons.
Your rights
You may ask for a copy of your data, ask us to correct it, or ask us to delete it. If you are a customer of a shop that uses Taalu, ask the shop first — it decides what it holds about you — and we will help them act on it. Write to hello@taalu.ae and we will answer within thirty days.
Children
Taalu is a tool for businesses and is not intended for anybody under 18.
Changes
If this policy changes in a way that matters, we will say so in the product before the change takes effect.
Contact
Eloquent Technologies FZCO, Dubai, United Arab Emirates. hello@taalu.ae