Privacy policy

Last updated:

This policy explains what personal data Inspirnex LLC collects through tallira.app and through the Tallira point-of-sale software, why we collect it, where it is kept, and what you can ask us to do with it. We collect as little as we can. We do not sell personal data and we do not use it for advertising.

1. Who we are

Tallira is a product of Inspirnex LLC. Write to us at hello@tallira.app.

For the personal data in sections 2 to 4, Inspirnex LLC is the controller: we decide why and how it is used. For the records a shop keeps in Tallira (section 5), the shop is the controller and we act for it.

2. When you visit tallira.app

  • Delivery and security. The site runs on Cloudflare. To deliver pages and protect the site from attacks, Cloudflare processes your IP address, your browser's details and the pages you ask for.
  • Visit counts. We use Cloudflare Web Analytics to count visits: which page, the site you came from, your browser and your country. It does not use cookies and does not build a profile of you.
  • Fonts. The pages load their fonts from Google Fonts, so your browser connects to Google, which receives your IP address.
  • Cookies. tallira.app sets no cookies. There are no advertising or tracking pixels on the site.

3. When you book a demo

The demo form asks for your business name, your name and your mobile number, what you run and how you would like to run Tallira. Your email, city and a message are optional. We also record which language you used.

Before the form is sent, Cloudflare Turnstile checks that a person, not a bot, is sending it. Turnstile processes your IP address and your browser's details for that check.

We use what you send to contact you, arrange the demo and prepare your quotation. It is kept in our customer system as an enquiry. Nobody else receives it, and we do not add you to a mailing list.

4. When you are a Tallira customer

  • Your account. Your business name, VAT number, the name and contact details of the person we deal with, your branches and registers, your licence and its dates, and what you have paid us. We use them to issue and renew your licence, invoice you, support you and remind you before a renewal is due.
  • Licence checks. The Tallira app on your PC checks its licence with licensing.tallira.app when it is activated and every six hours after that. It sends the licence code, the app's version and a fingerprint of a key created on that PC, which is not a hardware serial number. Your business details come from our records, not from the PC.
  • Health reports. Every hour, each register tells us that it is running: its version, which register it is, the number and time of its last invoice, how many invoices are waiting to be reported to ZATCA, its licence state, and up to ten recent error lines, which can include the user name of the staff member signed in. On your own PC it also sends the Windows version, how long the PC has been running and the age of its last backup. We use these reports to spot a register in trouble before you have to call us.
  • Diagnostics. When you press "Send diagnostics to Inspirnex", or in the cloud when we ask for them, the register sends its recent log lines so we can find a fault. Health reports and diagnostics never carry an invoice, a sale or a customer's details.
  • Support. When you contact us we keep the conversation so we can help you. We connect to your register remotely only when you ask us to and allow it.

5. Your shop's records

A register holds your sales, invoices, items and prices, your staff's names, roles and sign-ins, and, where you enter them, a customer's name, VAT number and address on an invoice. These records are yours. You are their controller, and you decide what goes into them.

  • On your own PC. The records stay on that PC and in the backup folder you choose. We do not receive them.
  • In the cloud. Each business has its own database and file storage on Cloudflare, kept in the European Union and backed up automatically. We also log each sign-in with its time, IP address and browser, to protect your accounts. We process these records only on your behalf: to run, secure, back up and support your instance, and when the law requires it. We do not use them for anything else.
  • ZATCA. Tallira reports each invoice to ZATCA's Fatoora platform, as the e-invoicing regulations require. The invoice carries your business details, the sale, and the customer's name and VAT number when you enter them. On your own PC the app sends it to ZATCA directly; in the cloud it passes through a relay of ours that stores nothing.
  • Card payments. Tallira does not connect to card terminals and never reads a card. The register records only that a sale was paid by card.
  • Passwords. Staff passwords are stored only as salted hashes, never as the password itself.

If you are a shop's customer or employee and want to see or correct your details, ask the shop. We will help the shop answer you.

6. Who receives personal data

We share personal data only with:

  • Cloudflare, which hosts the site, our customer system and cloud instances, routes and sends our email, and provides Turnstile and Web Analytics.
  • Google, which serves the site's fonts and hosts our email inbox.
  • ZATCA, which receives invoices because the law requires it.
  • Authorities, when the law requires us to disclose data.
  • A buyer of our business, if Tallira or Inspirnex is sold, under the same promises as this policy.

7. Where data is kept

Our customer system and every cloud instance are stored in the European Union, because Cloudflare offers no storage location in the Middle East. Inspirnex LLC is in the United States, and Cloudflare and Google run networks around the world, so your data is processed outside Saudi Arabia. We transfer it only to the providers in section 6, under their data protection terms, and as the Saudi Personal Data Protection Law and its regulations on transfers allow.

Records a register keeps on your own PC do not leave it, except the invoices it reports to ZATCA.

8. How long we keep it

  • Enquiries. If you do not become a customer, we delete your enquiry two years after our last contact, or sooner if you ask.
  • Customer accounts. For as long as you are a customer, and afterwards for as long as tax and accounting law requires.
  • Cloud records. For as long as your subscription runs, at least six years for invoices, and after it ends as the terms of service say.
  • Visit counts. Cloudflare keeps them in aggregate; they do not identify you.

9. Your rights

Under Saudi Arabia's Personal Data Protection Law, and the law of wherever else you live, you can ask us to:

  • tell you what personal data we hold about you and how we use it;
  • give you a copy in a readable format;
  • correct it;
  • delete it, when we no longer need it and the law lets us;
  • stop using it where you gave your consent.

Write to hello@tallira.app. We answer within 30 days. If you are not satisfied with our answer, you can complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).

10. Security

Every connection to tallira.app, our customer system and cloud instances is encrypted. Each cloud customer's records are kept apart from every other customer's. Only the people who need personal data to do their work can see it. Licences are signed, so they cannot be forged. No system is perfectly secure, so if a breach puts your data at risk, we will tell you and the authorities as the law requires.

11. Children

Tallira is for businesses. The site is not meant for children, and we do not knowingly collect their personal data.

12. Changes

When we change this policy we publish the new version here with a new date. If a change matters to customers, we tell them by email before it takes effect.

13. Contact

Questions or requests about your data: hello@tallira.app.