Privacy Policy

1. Introduction and Data Controller

Talkivist ("we", "our", "us") is an AI-powered language learning platform operated by Talkivist, headquartered at 13 Jul Br. 3, Podgorica, Montenegro. We are committed to protecting your personal data and respecting your privacy in full compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and other relevant regulations.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our website at talkivist.me and our digital language learning services. By using our platform, you acknowledge that you have read and understood this policy.

2. Information We Collect

We collect the following categories of personal data:

3. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract performance: To provide the services you have subscribed to and manage your account.
• Legitimate interests: To improve our platform, prevent fraud, and ensure security.
• Legal obligation: To comply with applicable laws, tax regulations, and financial reporting requirements.
• Consent: For marketing communications and optional data processing activities. You may withdraw consent at any time.

4. How We Use Your Data

Your personal data is used for the following purposes:

• Creating and managing your Talkivist account
• Delivering AI-powered language learning sessions
• Processing subscription payments and issuing invoices
• Sending transactional emails (account confirmations, receipts, password resets)
• Providing customer support and responding to inquiries
• Analyzing usage patterns to improve platform features and performance
• Detecting and preventing fraudulent activity, abuse, and security threats
• Complying with legal and regulatory obligations
• Sending promotional communications (only with your explicit consent)

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We may share your data with trusted third-party service providers solely to operate our platform:

• Payment processors (e.g., Stripe) — for secure payment handling under PCI-DSS compliance
• Cloud infrastructure providers — for secure data hosting and storage
• AI service providers — for processing language learning interactions
• Analytics tools — for aggregated, anonymized usage analysis
• Email service providers — for transactional and support communications

All third-party processors are contractually bound to handle your data securely and only for the purposes we specify. We may also disclose data when required by law, court order, or governmental authority.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Account data is retained for a minimum of 5 years after account closure to comply with financial and legal obligations. Payment transaction records are retained for 7 years as required by applicable tax and accounting laws. You may request deletion of your account at any time; however, certain data may be retained where required by law.

7. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data in accordance with applicable law.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve our platform. These include:

• Essential cookies: Required for the platform to function (authentication, session management)
• Analytics cookies: To understand how users interact with our platform (anonymized)
• Preference cookies: To remember your language and display settings

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

9. Your Rights

Under applicable data protection law, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to restriction: Request that we limit how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Withdraw consent at any time without affecting prior processing
• Right to lodge a complaint: File a complaint with your local data protection authority

To exercise any of these rights, contact us at info@talkivist.me. We will respond within 30 days.

10. Children's Privacy

Talkivist is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete such information promptly. Parents or guardians who believe their child has submitted personal data to us should contact us at info@talkivist.me.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by email or by posting a prominent notice on our website. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Us