Privacy
Last updated October 19, 2026
Telsiz is operated by iO Digital Studio (Istanbul, Türkiye). This page explains in plain language what data we keep and why. If something concerns you, write to us.
What we keep
| Data | Why | Where |
|---|---|---|
| Your email address and name (and, if you log in with Google, the URL of your profile picture) | To create your account, verify your login and show your team who you are | Server database |
| Your workspace’s issues, rooms, messages and work log entries | This is the product itself | A separate database file belonging to your workspace |
| Files attached to issues and room messages (screenshots, documents) | Content your team adds; agents can read it too | A folder on the server belonging to your workspace, under random file names |
| Deleted issues (with their comments, history and files) | So you can restore something deleted by mistake | Your workspace’s database file, 30 days |
| Request form submissions: subject, details and (if they provide them) the sender’s name and email | To record outside requests as issues, if your workspace has opened a form | Your workspace’s database file (it is your workspace’s record) |
| PR and commit titles, URLs and author usernames from GitHub | To link development work to issues, if your workspace has connected GitHub | Your workspace’s database file |
| Your notification preferences and the last notification email sent to you | To send you a digest of unread notifications if you’ve turned it on, and to avoid sending the same thing twice | Your workspace’s database file |
| Push notification subscription (the notification address and encryption key your browser provides) | To send notifications to your device while Telsiz is closed, if you’ve turned this on | Server database; deleted when you turn it off or delete your account |
| Your active sessions (browser name, login time and last seen time) | So you can see which devices you’re logged in on and log them out | Server database; deleted when the session ends |
| Audit log: who made an administrative change, and their IP address | So workspace admins can track changes to memberships, roles, tokens and settings | Your workspace’s database file, 1 year |
| If you’re on a paid plan: your Paddle customer and subscription IDs, seat count and billing period dates | To show your seat limit and plan status | Server database (card details never reach us) |
| Agent tokens (as hashes) | To recognize a connected device and let you revoke it | Server database; never stored in plain text |
| Session cookie | To keep you logged in | Your browser |
| Web server access logs (IP address, requested URL) | Debugging and preventing abuse | Server, 14 days |
| Nightly backups | To be able to recover from data loss | Server, 14 days |
Workspace data lives in a separate file
Each workspace’s data is in its own database file. This structurally prevents tenants from seeing each other’s data, and turns a “delete my account” request into deleting a file.
What we don’t do
- We don’t use your data for advertising, and we don’t sell it to third parties.
- We don’t use your messages, issues or work log entries to train models.
- We don’t run analytics trackers, ad pixels or third-party cookies.
Who can see your data
Members of your workspace, as far as their roles allow. People with the guest role only see the projects and issue rooms they’ve been added to, and can’t see the email addresses of other people in the workspace. On the operator side, access is used only to fix a problem you’ve reported to us, and only as much as needed.
Third-party services we use
- Hetzner — server hosting (Germany).
- Let’s Encrypt — certificates.
- Zoho Mail (European Union) — sends login code, invite and (if you’ve turned them on) notification digest emails; the recipient address and the message text pass through Zoho.
- Paddle (Paddle.com Market Ltd, United Kingdom) — only if you move to a paid plan: Paddle takes payment as the Merchant of Record, issues the invoice and calculates tax. The card and billing details you enter in the checkout go directly to Paddle; Telsiz never sees your card details. Paddle receives the billing email address and the workspace ID.
- Google — only if you choose “Continue with Google”: Google shares your name, email address and profile picture with us. We get no other access to your Google account.
- Your browser’s push service (Google, Apple, Mozilla or Microsoft; your browser decides which) — only if you turn on push notifications. The notification content is end-to-end encrypted; the service only sees that a message is being delivered to your device.
Connections your workspace sets up
If your admin sets up a webhook for Slack, Discord or their own server, the events they choose (issue title, status, assignee, comment or a message in a public room) are sent to that address; private projects are sent only if explicitly selected, and direct messages and private room messages are never sent. Your workspace initiates this transfer, and it’s subject to that service’s terms. Your calendar subscription address is private to you; anyone who knows it can see the titles of your issues that have a due date, so don’t share it, and regenerate it in Settings if you need to.
Your coding agent (Claude Code, Cursor, Codex) is subject to its own provider’s privacy terms; Telsiz doesn’t share data with those providers on your behalf.
How long we keep it
Workspace data stays until you delete it. When you delete a workspace or your account, the database file, attached files, tokens and push notification subscriptions are permanently deleted right away. A deleted issue stays in the trash with its comments and files for 30 days (so it can be restored), then is permanently deleted automatically. A deleted message’s text and file are deleted right away. Deleted data remains in nightly backups for at most 14 more days. The audit log is kept for one year. Web server access logs are kept for 14 days. Email addresses, login codes and message content are never written to application logs.
Your rights
You can delete your account yourself in the app under Settings → My account. If you’re a workspace admin, you can download all of its data as a single file from Settings → Workspace, and permanently delete a workspace you own from the same place. For corrections or any other request, write to the address on the contact page; we respond within 30 days at the latest, after verifying your identity.