Privacy Policy

Tali is a tool for photographers to embed pricing calculators on their websites. We collect only what we need to make the product work: your account info, your pricing configuration, and basic usage analytics. We don't sell your data, we don't share it with advertisers, and we don't track your clients across the web.

Tali (“we,” “us”) is operated by Ethan W Photography LLC, based in the United States. You can reach us at hello@tali.so.

When you create an account, we collect:

• Your email address and (optionally) your name
• Your pricing configuration: shoot types, base rates, multipliers, add-ons, branding choices, and CTA settings
• Profile details you choose to provide: business name, location, website, phone, social handles, profile photo
• If you sign in with Google: the basic profile fields Google returns (email, name, profile picture)
• If you upgrade to Pro: billing details handled by Stripe (we never see your full card number)

From your widget, we collect:

• Anonymous usage events (which shoot types are viewed, which inquiries are submitted) so we can show you insights
• If you turn on the weather or mileage tools: the city a visitor types, its approximate coordinates, and the date they pick. These pass through tali.so to the providers listed below, which look up the city and return the weather for that date and the driving distance. We cache the results by location and date, not by visitor, and don't store them against any person
• We do not collect your clients' personal information unless they explicitly submit it through the inquiry button

If you connect Google Calendar (Pro, optional), Tali gets read-only access to your list of calendars and the events on the calendars you choose. We use it for one thing: marking the dates you're already booked in your widget.

• We read event titles and dates only to check them against the keywords you set (for example “shoot confirmed”). We store the resulting dates, never event titles, guests, locations or descriptions.
• Your clients see only that a date is booked. The “Check my calendar” preview in your dashboard shows matching event titles to you alone and isn't saved.
• Your Google access token is stored encrypted. Disconnecting in the dashboard revokes it at Google and deletes our copy. You can also remove access any time in your Google Account settings.
• Tali's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data is never used for advertising, sold, or used to train AI models, and no person at Tali reads it except to fix a problem you ask us to look into.

We use your data to:

• Run the dashboard and render your embedded pricing widget
• Process subscription payments via Stripe
• Send essential transactional emails (signup confirmation, password reset, billing)
• Show you analytics about widget views and inquiries
• Debug issues and improve the product

We do not use your data for advertising. We do not sell or rent it to third parties.

We share data only with the service providers who power Tali:

• Supabase — database and authentication hosting
• Vercel — application hosting
• Stripe — subscription billing
• Google — only if you sign in with Google
• Open-Meteo — city search for the weather and mileage tools (including the travel-city picker in your dashboard) and weather data (city name, coordinates and date only)
• OpenStreetMap routing (Valhalla), run by FOSSGIS e.V. or by Stadia Maps — driving distance for the mileage tool (the coordinates of your travel city and the visitor's city only)
• BigDataCloud— turns your location into a city name if you use “Use my location” during setup (runs in your browser)

We may also disclose information if required by law (court order, subpoena, etc.).

Tali uses essential cookies for authentication (keeping you signed in) and a small number of localStorage flags to remember UI preferences. We don't use third-party advertising or cross-site tracking cookies.

We keep your account data for as long as your account is active. If you delete your account, we delete your configuration and personal data within 30 days. Anonymized aggregate analytics may be retained longer.

You can access, export, or delete your data at any time by emailing us at hello@tali.so. If you're in the EU, UK, or California, you have additional rights under GDPR / UK GDPR / CCPA — contact us and we'll honor them.

All traffic is encrypted in transit (HTTPS). Passwords are hashed by Supabase Auth. Payment data is handled entirely by Stripe and never touches our servers. No system is perfectly secure, but we follow industry-standard practices to protect your data.

Tali is not intended for anyone under 18. We don't knowingly collect data from children.

We may update this policy occasionally. If we make material changes, we'll notify active users by email. The “last updated” date at the top always reflects the current version.

Questions? Email hello@tali.so.