What we keep, and why.

Who we are

TillTalk AI Ltd, company number 17519209, registered in England and Wales. Registered office: 30b Albany Road, Windsor, SL4 2QA. The website is tilltalk.ai. Email talk@tilltalk.ai about anything on this page.

What we keep

• Your till sales. What sold, prices, times, totals, cash and card, and lane or cashier numbers if your till has them. It comes from the till file you send us or a till connection. We do not need card numbers or delivery app passwords.
• Your shop details. Shop name, address and postcode, and the names and mobile numbers of the owner and managers.
• Sign-in details. The mobile number you use to open the app, with a 6-number shop code. For the shop reports page: a login ID and a password. We store the password scrambled (hashed), never as you typed it, plus the last sign-in time and wrong tries.
• Rota. The names you put on the rota and their planned hours. No clock-in, no GPS, no timesheets.
• Labour+ (off unless you switch it on). Date of birth, hourly pay, holiday hours, break minutes, a 48-hour opt-out tick, and a right-to-work type and expiry date. Only the owner or a manager can see these. Staff phones still see the rota only. The pay file is planned hours from the rota, not hours worked. Wage, holiday and break notes are guidance, not legal advice.
• Receipt photos. Only if you photograph a petty cash receipt in the app.
• Questions you ask. What you type in the app or on the reports page. Questions on the reports page are saved in our activity log.
• Contact form. Your name, shop, phone and message when you ask us to call you back.
• Signing up in the app. Shop name, shop type and postcode, and the owner’s name, mobile and email. We email a 6-number code to check the email is yours and keep only a scrambled (hashed) copy of it. To limit sign-ups from one place we keep a scrambled copy of your internet address, never the address itself.

Why we keep it

• To show your sales, what made money, your cash count and staff cost against sales.
• If you switch Labour+ on: to show wage, holiday, break and right-to-work reminders, and a pay file of planned hours.
• To answer the questions you ask about your shop.
• To let only your phones and your login into your shop.
• To find local weather for your shop from its postcode.
• To call you back and follow up after you use the contact form. We never sell it or add you to a mailing list.
• When you sign up in the app: to set up your shop, email you the code and your shop code, tell you when your free trial ends, and call you to help add your till.

Who can see it

• Each shop is kept separate from other shops. Only linked phones can ask about that shop.
• Staff phones see the rota only. Pay, dates of birth and right-to-work dates stay with the owner or a manager, and only if Labour+ is switched on.
• Traffic to and from the site is encrypted.
• TillTalk staff only look at your shop’s data to support you or fix a fault.

Who handles it for us

A few companies run parts of TillTalk for us. The full list, what each one does and where, is on Who handles your data. In short:

• Railway hosts the site and the database where your data is kept.
• Anthropic, and OpenAI as a backup, read your questions and the needed numbers to write answers, read receipt photos, and help check till files. They are in the US. Before a till file is checked, cashier, staff, customer, email, phone, address and card columns are hidden. Anthropic also helps us review contact form messages and our own sales notes; names, shop names, phones and emails are left out, but a message goes as it was typed. Public UK news headlines are also read to pick a stock tip. OpenAI is only used for that if Anthropic is not. That send does not include shop data. If you type a question into the demo, Anthropic gets that question and the demo's made-up numbers only, never a real shop's data. In the practice shop, the question also goes with the made-up sales and any settings you typed, like opening hours, pay and rent. TillTalk does not keep them. Under their business terms they do not use your till data to train their models.
• Resend sends the emails we send, like the contact form reaching our inbox and the sign-up code and welcome email.
• Microsoft 365 hosts our talk@tilltalk.ai inbox, where contact form messages and your emails arrive.
• postcodes.io gets the shop postcode only, to place the shop on a map for local weather. No personal data.
• Open-Meteo gives the weather. We send it a place, not your name or phone.

Messages on WhatsApp are planned, not live. Card payments are not live either.

How long we keep it

• Till files: 90 days from upload, then deleted automatically. The sales saved from them stay while you use TillTalk.
• If you stop using TillTalk: tell us and we delete your shop’s data.
• Contact form: we have not set a time limit yet. Ask us to delete it any time.
• Sign-ups: what you type on the sign-up screen, the scrambled code and the scrambled internet address are deleted after 7 days, finished or not. Once your shop is set up, the shop and owner details stay with your shop.
• Everything else (shop details, phones, sales, rota, questions): kept while you use TillTalk. We have not set a fixed time limit yet. Ask us if you want it gone sooner.

Get a copy, fix it, or delete it

Email talk@tilltalk.ai from the shop, or ask us in person. Say which shop and what you want: a copy of what we hold, a correction, or deletion. We may check it is really you before we act.

To delete the shop, use Delete shop in the app (More, next to Sign out) or follow Delete your account.

Changes

If this page changes, we update the date at the top.