Privacy Policy
What the Talos Cyber Technologies client portal collects, including Google user data, and how it is used, stored, shared, and deleted.
Effective October 6, 2026
1. Who we are
This policy covers the Talos Cyber Technologies client portal at taloscybertechnologies.com (the "Service"), operated by Talos Cyber Technologies ("we", "us"). The Service lets invited business clients manage the website we build for them: business details, page content, blog posts, photos, reviews, billing, and optional connections to their own Google account.
Contact for any privacy question or request: taloscybertechnologies@gmail.com.
2. Information we collect
Account information: your name, email address, and password (stored as a secure hash by our authentication provider).
Business information you submit: company name, address, phone, email, contact people, logo, favicon, design preferences, and notes.
Content you create: page requests, change requests, blog posts, FAQ entries, photos, and other files you upload.
Billing information: invoices, payment status, and the brand and last four digits of your card. Full card numbers are handled by our payment processor and never reach our servers.
Website usage figures: request counts, data transfer, storage used, and call button clicks reported by the website we built for you, used to calculate usage charges.
Google user data: only if you choose to connect a Google account. See section 3.
3. Google user data
Connecting Google is optional and starts only when you press the connect button on your website's Google connection page. You choose which permissions to grant on a checklist before Google asks you to approve them. The full list of permissions we can request, what each one lets us do, and why, is in the table below this section.
How we use Google user data: only to provide the features you turned on for your own business, specifically showing your search and traffic reports in the portal, submitting your sitemap, keeping your Google Business Profile listing (hours, details, posts) accurate, displaying and replying to your reviews, sending email from your business address for messages your website generates, and creating calendar events for appointments booked on your website. We access only the Search Console property, Business Profile location, Analytics property, and calendar that belong to your business.
What we do not do with Google user data: we do not sell it; we do not use it for advertising, retargeting, or interest based ads; we do not use it to build user profiles; we do not use it to train or improve artificial intelligence or machine learning models, general or otherwise; we do not read, scan, or store the contents of your Gmail inbox; and no person reads your Google data unless you ask us to for support, it is needed for security, or the law requires it.
Sharing of Google user data: we do not share or transfer Google user data to any third party, except (a) to our infrastructure providers listed in section 5 solely to store and process it on our behalf, (b) when required by law, or (c) as part of a merger or acquisition with notice to you.
Storage and protection: Google access and refresh tokens are encrypted with AES-256-GCM before they are saved, are stored only on our servers, are never sent to your browser, and are used only by our server to make the requests you enabled. All traffic is encrypted in transit with HTTPS.
Retention and deletion: tokens are kept only while your Google connection is active. Pressing "Remove access" on the Google connection page immediately revokes our access with Google and permanently deletes the stored tokens. You can also revoke access at any time at https://myaccount.google.com/permissions. Report data we fetched from Google (for example search figures) is deleted within 30 days after you disconnect or close your account, or sooner on request to taloscybertechnologies@gmail.com.
Limited Use: Talos Cyber Technologies' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
| Permission | Scope | What we access | Why |
|---|---|---|---|
| Basic profile and email | openid, email, profile | Your Google account name and email address. | To show which Google account is linked to your website. |
| Search Console | https://www.googleapis.com/auth/webmasters | Search performance, indexing status, and sitemaps for your website's property. | To show your search results in the portal and submit your sitemap. |
| Business Profile | https://www.googleapis.com/auth/business.manage | Your business listing details, hours, posts, and reviews. | To keep your listing accurate, publish posts you approve, and show and reply to reviews. |
| Analytics (read only) | https://www.googleapis.com/auth/analytics.readonly | Traffic reports for your website's Analytics property. | To show visitor reports in the portal. We cannot change your Analytics settings. |
| Gmail send only | https://www.googleapis.com/auth/gmail.send | Permission to send email from your address. No access to read your inbox. | To send messages your website generates, such as contact form replies and booking confirmations. |
| Calendar | https://www.googleapis.com/auth/calendar | Your calendars and events. | To add appointments booked on your website to your calendar and check availability. |
4. How we use information
To build, host, and maintain your website; to show your content on your website; to communicate with you about your project; to calculate and collect charges; to secure the Service and prevent abuse; and to meet legal and accounting obligations. We do not sell personal information and do not use it for advertising.
5. Service providers
We use a small number of providers that process data only on our instructions: Stripe (card payments), our managed database and authentication provider (account and project records), Cloudflare (file storage and delivery), and our email delivery provider (transactional notices such as invoices). Each is bound by its own security and privacy commitments.
6. Security
Access to your account requires sign in. Database rules restrict every record to its owner, and only authorized studio staff can see project records to do the work. Sensitive credentials are encrypted at rest and all connections use HTTPS.
7. Retention
Project and content records are kept while your account is active. Billing and signed agreement records are kept afterward as long as tax and accounting law requires. Other data is deleted within 30 days after an account is closed.
8. Your choices and rights
You can view and edit your business information in the portal at any time, disconnect Google at any time, and ask us to access, correct, export, or delete your information by emailing taloscybertechnologies@gmail.com. We respond within 30 days. Records we are legally required to keep are retained only for that purpose.
9. Cookies
The portal stores a sign in session in your browser so you stay signed in. We do not use advertising or third party tracking cookies.
10. Children
The Service is for businesses and is not directed to anyone under 16. We do not knowingly collect information from children.
11. Changes to this policy
If we change how we handle information, we update this page and its effective date, and notify account holders by email for material changes, including any change to how Google user data is used.
See also the terms of service.