Privacy Policy
Effective November 3, 2026. This policy explains what Telloo collects, why, and what you can do about it.
Telloo is a feedback board service. Organizations run a board on their own subdomain; their visitors post ideas, vote and comment. This means there are two kinds of people in this policy: customers (organizations and their team members who sign in) and visitors (people who use a customer's board, usually without an account).
For content posted on a customer's board, that customer is the data controller and Telloo acts as their processor. For accounts and billing, Telloo is the controller. Telloo is operated by DoubleHash, a sole proprietorship registered in the Republic of Korea.
1. What we collect
If you sign in
- Account: name, email address, and profile image, as provided by Google when you sign in with Google, or as you enter them when you create an account with email and password.
- Password, if you set one: stored only as a one-way hash (bcrypt). We cannot read it, and we never email it.
- Profile photo, if you upload one: re-encoded to a small square image. Location and device data embedded in the file (EXIF) are removed. You can delete it at any time from your account.
- Sign-in tokens: the OAuth tokens Google issues for your session. We use them only to authenticate you.
- Membership: which organizations you belong to and your role in each.
If you use a board (with or without an account)
- Content you write: post titles, bodies and comments. If you post without an account you may supply a display name; leaving it blank shows "Anonymous".
- Votes: linked to your account if signed in, otherwise to a random identifier stored in your browser (see Cookies).
- Email, only if you ask for updates: if you choose to follow a post, we store the address you enter so we can email you when its status changes or someone replies. If you are signed in, posting or commenting follows that post with your account email automatically. Every such email has a one-click unsubscribe link.
- Written language: we detect the language of each post on our own servers so visitors can filter by language. The text is not sent anywhere for this.
If an organization uses the report inbox or store reviews
- Content reports: when you report content in an app that uses Telloo, we store the reason and any note you write, the item you reported as the app describes it (type, id, link, title, author id), and an identifier the app chooses for you or, for report links, a keyed hash of your IP address. Reports are visible only to that organization's team.
- App store reviews: if an organization connects its App Store or Google Play app, we copy that app's public reviews — star rating, title and text, the reviewer's store nickname, country or language, app version and the developer's reply — so its team can read them in one place. Reviews are read through the official App Store Connect and Google Play APIs, using an API key the organization provides (stored encrypted) or a Google service account the organization grants access to.
Abuse prevention
To stop spam from unauthenticated writes, we apply a rate limit per source. We do not store your IP address. We store a one-way, keyed hash of it, which cannot be reversed back to the address, together with a counter. These records are deleted automatically once their time window has passed.
Billing (organizations only)
- Plan, subscription status, billing name, billing email, country and tax identification number where you provide one.
- For payment methods we store only what is needed to display them — for example the brand and the last four digits. We never receive or store full card numbers; those go directly to the payment provider.
Product usage (telloo.io only)
On telloo.io itself — the home page, pricing, sign-up and the account and dashboard screens — we record which pages are viewed and a few milestones (signing up, signing in, a board receiving its first post, a purchase), with a random browser identifier and, once you sign in, your account ID. When something breaks on these screens or on our server, an error report (the error type, message and code location) is also sent to PostHog. We do not record your name or email address with these events or reports, and we do not record keystrokes, clicks or screen recordings. Customer boards ({name}.telloo.io, custom domains and embedded widgets) do not load this measurement at all, so board visitors are never measured.
Administrative audit log
We record administrative actions inside an organization (creating or deleting boards, changing post statuses, inviting or removing members, exporting data) with the acting user's email and a timestamp. This exists so organization administrators can see who changed what. Ordinary posts and votes by visitors are not recorded in the audit log.
2. Cookies
We do not use advertising or cross-site tracking cookies. Customer boards use only the cookies necessary to run them. On telloo.io we also use one product-usage cookie (below).
| Cookie | Purpose | Lifetime |
|---|---|---|
| Session cookie | Keeps you signed in. | Until sign-out or expiry |
anon_id | A random identifier so that a vote made without an account counts once and can be taken back. It is not linked to your identity. | 1 year |
locale | Remembers the language you selected. | 1 year |
ph_* (telloo.io only) | A random identifier for product-usage measurement (see "Product usage"). Not set on customer boards. | 1 year |
Clearing your browser cookies removes these. Clearing anon_id means an earlier anonymous vote can no longer be recognised as yours.
3. Who we share data with
We do not sell personal data. We use the following service providers, each only to run Telloo:
| Provider | Purpose |
|---|---|
| Cloudflare | Application hosting and content delivery, storage and processing of uploaded images, and bot protection (Turnstile) on anonymous posts and comments |
| Neon | Database hosting (United States) |
| Sign-in, only if you choose to sign in with Google. Font files for link-preview images of public posts (the request contains the characters of the public title) | |
| Resend | Sending invitation and notification email |
| PostHog | Product-usage measurement on telloo.io only (United States) — page views, the milestones listed above and error reports, with a random or account identifier |
| OpenAI | Optional AI features for board teams (United States) — only when a team member presses an AI button: sorting posts into categories, a weekly summary of new posts, or a draft reply to an app store review. We send the text of the posts or the review involved, never names, email addresses or account identifiers. OpenAI does not use API data to train its models. Visitors to a board never trigger AI; similar-post suggestions while writing are computed on our own servers |
| Paddle | Merchant of record for paid plans — checkout, payment processing, tax and invoices |
When you buy a plan, Paddle collects your payment details directly and processes them as an independent controller under its own privacy policy. We receive the subscription status and billing details listed above, never your full card number.
We may disclose data where required by law, or to protect the rights and safety of users and the service.
4. International transfers
Telloo is operated from the Republic of Korea and its infrastructure is located in the United States. Using the service involves transferring your data internationally.
5. How long we keep data
- Board content is kept while the organization exists. If a subscription lapses the board becomes read-only and later inaccessible, but content is not deleted for non-payment — it returns when the subscription resumes.
- App store reviews are kept while the app stays connected and deleted, with the stored API key, when the organization disconnects it.
- Rate-limit records are deleted automatically once their window expires.
- Follow subscriptions are deleted immediately when you unsubscribe.
- Accounts and audit logs are kept while the account or organization is active, and deleted on request as described below.
6. Your rights
You can ask us to access, correct, export or delete your personal data, and to restrict or object to processing. You can change your display name and sign out at any time from your account page, and unsubscribe from any notification email using the link it contains.
For content posted on an organization's board, that organization controls it. If you ask us to remove such content, we may need to refer you to the organization, or act on their instruction.
To make a request, email privacy@doublehash.app. We will respond within the period required by applicable law.
7. Security
Traffic is encrypted in transit. Access to production data is limited to the operator of the service. Sign-in cookies are HTTP-only. No service can promise perfect security, and we do not.
8. Children
Telloo is a business tool and is not directed at children. We do not knowingly collect data from children under 14.
9. Changes
If we change this policy we will update the effective date above, and for material changes we will notify account holders by email.
10. Contact
Questions about this policy: privacy@doublehash.app.